System and Data Auditing: Data and Operation Auditing Settings (Summary)

System and Data Auditing: Data and Operation Auditing Settings

Definition

System configuration settings about the Data and Operation Auditing features and functions (object change auditing, user operation auditing, object snapshot recording).

Description
Setting up or viewing system parameters of this group

Description

This group includes all the system parameters concerning the Data and Operation Auditing features to manage the security and audit level of the running SAP CC Core Server system and its data.

To conform to your security policy, you configure the SAP CC system with the following technical features and functions:

Technical Feature Key Parameter Enabled Tasks
(Technical Operations) Recommended Tasks

Data Object Auditing

Object Change Log Recording

None

Viewing Change Logs of Audited Data Objects

Purging With SAP CC Admin+

Object Snapshot Recording

AUDIT_OBJECT_ACTIVATION

AUDIT_OBJECT_DOMAIN

Inspecting Object Snapshots Associated to Object Changes

User Operation Auditing

Operation Execution Recording

AUDIT_ACTIVATION

AUDIT_DOMAIN

Viewing Audited Operations

Purging With SAP CC Admin+

Technical Feature	Key Parameter	Enabled Tasks (Technical Operations)	Recommended Tasks
Data Object Auditing
Object Change Log Recording	None	Viewing Change Logs of Audited Data Objects	Purging With SAP CC Admin+
Object Snapshot Recording	AUDIT_OBJECT_ACTIVATION AUDIT_OBJECT_DOMAIN	Inspecting Object Snapshots Associated to Object Changes
User Operation Auditing
Operation Execution Recording	AUDIT_ACTIVATION AUDIT_DOMAIN	Viewing Audited Operations	Purging With SAP CC Admin+

Consult the SAP CC Application Help (aka SAP CC Library) for more information about the audit concept and features in SAP Convergent Charging. See the detailed functions and mechanisms.

Note

The User Operation Auditing technical feature is part of the System and Data Auditing fundamental feature but it relates also to the SAP User Management feature. See the System: User Management Settings parameter group.

Implementation, Sizing, and Customizing

Depending on your business, technical, and security requirements, you determine the best configuration of your SAP CC system. You consider database storage (sizing) and performance because the auditing functions and generated recordings may significantly impact the performance of the whole SAP CC system. See the SAP CC Configuration Guide for more information, guidelines, and recommendations about the implementation and Customizing activities.

Setting Up or Viewing System Parameters

You can set up or view the following system parameters that are available for different instance types in the running SAP CC Core Server system.

Parameter Definition

AUDIT_ACTIVATION The enablement or disablement of the User Operation Auditing feature to conform to the required security and auditing level

AUDIT_DOMAIN The list of audit domains that are enabled and define the categories of auditable user operations

AUDIT_OBJECT_ACTIVATION The enablement or disablement of the Object Snapshot Recording subfeature to conform to the required security and auditing level

AUDIT_OBJECT_DOMAIN The list of audit domains that are enabled and define the categories of data objects that can be audited to object snapshots

Parameter	Definition
AUDIT_ACTIVATION	The enablement or disablement of the User Operation Auditing feature to conform to the required security and auditing level
AUDIT_DOMAIN	The list of audit domains that are enabled and define the categories of auditable user operations
AUDIT_OBJECT_ACTIVATION	The enablement or disablement of the Object Snapshot Recording subfeature to conform to the required security and auditing level
AUDIT_OBJECT_DOMAIN	The list of audit domains that are enabled and define the categories of data objects that can be audited to object snapshots

Notes

Use the set command of the SAP CC Admin+ user interface to change the parameter values. The immediate change may be not possible and a restart is necessary. Consult the details for each parameter.
Use the get command to retrieve the parameter values manually.
Use the SAP CC Config Tool user interface to set up a complete or partial list of system parameters (restart needed).