In the ever-evolving world of SAP, it is indispensable to update Security and Authorizations as per Standard and Latest Controls. Upgrade | Migration | Conversion collectively known SAP Landscape Maintenance are the Core Project Transitions in SAP.

It is significant for a Security Consultant to understand | distinguish the above.

In this blog, I will present a crisp knowledge on Upgrade | Migration | Conversion and discuss how does it impact SAP Authorizations and when Security Upgrade should be performed.

What is SAP SECURITY UPGRADE?

SAP introduces New | Updated authorizations (Transaction Code | Authorization Object | Authorization Field | Authorization Check Indicator) to SAP Tables – USOBT | USOBX during Core Component Upgrade.

SU25 – Security Upgrade Tool will be used to update the authorizations to Customer Tables – USOBT_C | USOBX_C. Impact of Security Upgrade will be reflecting in roles post execution of Upgrade Steps – 2A, 2B, 2D and 2C.

Note : As of Dec 2023, customer can Upgrade | Convert only to S4HANA 2022 & above versions

• SAP CONVERSION : Customer who is in ECC getting CONVERTED to Latest S4HANA version

SAP Conversion

• SAP UPGRADE : Customer who is already in S4HANA getting UPGRADED to Latest S4HANA version

SAP Upgrade

• SAP Migration : This can be categorized into three approaches, and it accords only to Database.
• • Lift & Shift : Moving data from one host to another host with same Database type in source and target host. Example: HANA to HANA | MySQL to MySQL | Oracle to Oracle
• • Export & Import (Non-HANA) : Moving data from one host to another host where source and target host may or may not have same Database type. Example: Oracle to MySQL | MySQL to ASC
• • Database Migration Option (HANA) : Popularly known as DMO. It is when data is moved from Non-HANA database to HANA database.

SAP Migration

SUMMARY :

• It is fundamental to perform Security Upgrade for SAP Conversion and SAP Upgrade scenarios as there is change | update in SAP Core Component.
• Migration does not require Security Upgrade when there is no change in SAP Component Version.
• Migration combined with Upgrade | Conversion requires Security Upgrade.