Enterprise Resource Planning Blogs by SAP
Get insights and updates about cloud ERP and RISE with SAP, SAP S/4HANA and SAP S/4HANA Cloud, and more enterprise management capabilities with SAP blog posts.
cancel
Showing results for 
Search instead for 
Did you mean: 
karthikj2
Associate
Associate
In the ever-evolving world of SAP, it is indispensable to update Security and Authorizations as per Standard and Latest Controls. Upgrade | Migration | Conversion collectively known SAP Landscape Maintenance are the Core Project Transitions in SAP.

It is significant for a Security Consultant to understand | distinguish the above.

In this blog, I will present a crisp knowledge on Upgrade | Migration | Conversion and discuss how does it impact SAP Authorizations and when Security Upgrade should be performed.

 

What is SAP SECURITY UPGRADE?

SAP introduces New | Updated authorizations (Transaction Code | Authorization Object | Authorization Field | Authorization Check Indicator) to SAP Tables – USOBT | USOBX during Core Component Upgrade.

SU25 – Security Upgrade Tool will be used to update the authorizations to Customer Tables – USOBT_C | USOBX_C. Impact of Security Upgrade will be reflecting in roles post execution of Upgrade Steps – 2A, 2B, 2D and 2C.

Note : As of Dec 2023, customer can Upgrade | Convert to SAP S/4HANA 2020 & above versions (Reference SAP Note: 3338941)

 

  • CONVERSION : Customer who is in SAP ERP Central Component (ECC) getting CONVERTED to Latest SAP S/4HANA version



SAP Conversion




  • UPGRADE : Customer who is already in SAP S/4HANA getting UPGRADED to Latest SAP S/4HANA version



SAP Upgrade




  • Database Migration : This can be categorized into three approaches, and it accords only to Database.

    • Lift & Shift : Homogeneous Migration of SAP Database without changing the Database type in source and target host.



    • Export & Import : Migrating Database from one host to another host where source and target host may or may not have same Database type.



    • Database Migration Option : Popularly known as DMO, is an option in Software Update Manager (SUM) to move the data from Non-HANA Database to HANA Database. SUM meanwhile offers Homogeneous DMO for SAP HANA to SAP HANA Migration.





SAP Migration


SUMMARY :

  • It is fundamental to perform Security Upgrade for Conversion and Upgrade scenarios as there is change | upgrade in SAP ABAP Component Version.

  • When Software Provisioning Manager (SWPM) is used for Homogeneous and Heterogenous Database Migration - Security Upgrade is not required as there is no change in SAP ABAP Component Version.

  • When Software Update Manager (SUM) is used for Database Migration combined with Upgrade or Conversion - Security Upgrade is required as there will be change in SAP ABAP Component Version.