Answer / hasnul_amrie

SAP offer STAT and STAD (STAT no longer available in ECC6).
The problem with this is if there is lots of activities, the
oldest data will be deleted automatically. Basically All WP
share the same buffer, where records are stored in the
buffer based on time occurs. When the buffer full it will
write to a file in the file system. Each app server has
their own files. The number of max files can be created
control by profile parameter stat/max_files. So if system is
heavy, by 2-3 days the oldest files will be deleted.

One of the way is to create customize table where all these
entries will be kept. But you have to maintain the table
growth cause the databse might be burden with this actvt
which is why SAP did not do it in the first place ):

Another way we can look at it is by activating your Security
audit log (sm19/sm20). Again you cannot open it too long
cause it might slow down your database.

Answer / david reyes

You can use the AL08 and SM04, both transactions help you to know what is doing each user currenly.

Answer / gau

You can also use transaction AL08 to know how many users are logged into a particular system and what transactions are they executing.

Answer / roopesh kumar

Run SUIM Tcode and get reports for various combinations of
User Roles and authorizations with date and time.

Answer / ravi

Try STAT and if the info in that is not enough, enable audit

how do i go on about Developing,maintaining,and implementing a mitigating control strategy and provide SAP authorisations support to users? Please help

0 Answers  

What do you mean by SOX and Gxp?

2 Answers   IBM,

What is the difference between ECC security and RAR security when GRC (RAR<SPM<CUP) is used, when similar functionality can be performed SAP R3 level(ECC)?

2 Answers   ADP, Baidu,

How would you do the 'a user logge into production system, changes a table and logged out'. How would you track him?

0 Answers  

Giving fire call access and extending fire call access by using VIRSA’s VFAT tool? can u brief give the explanation

0 Answers   IBM,

one tcode,say sa38, is assigned to 10 diffrent users through a same role.I want to restrict one of those 10 users to execute only a few reports in sa38 but not all reports.what are the possible ways of getting it done?

3 Answers   Cap Gemini,

what is the process to find that one consultant had removed a table from sap tables

0 Answers  

This is in continuataion to the previous question. a user is assigned with tcode SA38.how to restrict him to execute only a few reports,say rsusr003.If you're going to modify the role(having sa38) assigned to the user,that will affect other users also because that role might be assigned to multiple users.I don' want that to happen.so what is the solution?

5 Answers   iGate,

Can you explain document transfer-level security?

0 Answers  

1.What are the upgrades happened in GRC 5.3 from GRC 5.2?

2 Answers  

Which of below authorization object that protect transaction code execution? A. S_TCODE B. P_TCODE C. Q_TCODE D. X_TCODE

6 Answers   Cap Gemini, SAP Labs,

You wan to transport user groups from transaction sugr? Would this impact the groups tab in su01? What would you do?

0 Answers