SAP Security & GRC
Soterion’s SAP Security & GRC podcast with host Dudley Cartwright, helping you on your journey to effective access risk management in SAP.
Soterion is an international leading provider of GRC and FUE Licensing solutions for organisations running SAP. Our user-friendly, plug-and-play software integrates immediately into the SAP environment — S/4HANA ready, award-winning, and designed to translate complex GRC processes into business-friendly language.
Soterion believes that effective GRC is measured by how well business users can manage access risk. Our solutions empower organisations to enhance risk awareness, drive better decision making, and build accountability across every level of the business — because access risk is business risk.
SAP Security & GRC
How to Set up and Analyse STAUTHTRACE
Use Left/Right to seek, Home/End to jump to start or end. Hold shift to jump forward or backward.
Listen to the SAP Security & GRC podcast – helping you on your journey to effective access risk management in SAP.
In this episode, Ross Robertson walks through the SAP short-term user authority check trace (STAUTHTRACE) – a real-time authorisation trace that captures both successful and failed authority checks as users execute transactions, Fiori apps, and RFC calls. Think of it as a far more powerful evolution of the classic SU53 report.
🔑 Key Takeaways:
What STAUTHTRACE is and how it differs from the classic SU53 report
How to activate the trace system-wide or on a specific application server
Why STAUTHTRACE runs on a rolling memory buffer with minimal system impact – so you can leave it active long-term
How to filter results by user, date/time, application type, application name, authorisation object, and check result
A live troubleshooting walkthrough: diagnosing a failed SU01 user-change authorisation (S_USER_GRP)
Reading both passed and failed checks – including table access checks in SE16 (e.g. EKKO) and CDS view entity checks in S/4HANA
Inspecting the user buffer via SU56
👥 Featuring:
Ross Robertson – Senior SAP Authorisations Consultant, Soterion