Archiving Authorization Change Records (BC-ADM-SEC)

The archiving object US_AUTH is used to archive change records for changes to authorizations from table USH12.

Unless you are archiving a large number of change records, an archiving run should have no significant effect on the performance of your system. An authorization change record requires about 100 bytes (uncompressed).

Archiving authorization change records does not have any effect on other archivable data. There are no particular dependencies or relationships between authorization change records and other archivable data.

You can use the archiving object US_AUTH within the framework of Information Lifecycle Management. To be able to do this, you must activate the related business functions. The system then shows the ILM Actions group box. Using these actions, you can, for example, run archiving during which the system evaluates the retention periods entered in Information Retention Manager. You can also create snapshots (copies) of data, and you can delete data that does not meet your criteria.

We recommend a storage duration of 10 years for all user and authorization change records.

Change records are archived according to the date that you specify. All records older than the date specified are archived. Old archives are not automatically deleted.

The log files generated by archiving and deleting records are stored in the SAP spool system. The archiving log records the number of change records archived. The delete log lists the change records that were deleted after the archiving session.

Choose Tools → Administration → User Maintenance.Then choose Manual Maintenance → Edit Authorizations Manually (transaction SU03), followed by Utilities Archive and Read, and choose the archiving function.

The archiving function calls the standard archiving interface, where the correct archiving object is already specified.

You need only specify (or create) an appropriate report variant, specify the start time and printing specifications for the background processing of the report, and schedule the report with Create job.

See also the documentation on the archiving procedure in general. You will find this documentation in the first section of this document.

You must explicitly delete archived records after an archiving session has been successfully completed. Be sure to check the archiving log to be sure that the archiving session has been completed successfully. Also, be sure that you specify the same date for the deletion program. Otherwise, too many or too few change records will be deleted.