How to Set up and Analyse STAUTHTRACE

Listen to the SAP Security & GRC podcast – helping you on your journey to effective access risk management in SAP. In this episode, Ross Robertson walks through the SAP short-term user authority check trace (STAUTHTRACE) – a real-time authorisation trace that captures both successful and failed authority checks as users execute transactions, Fiori apps, and RFC calls. Think of it as a far more powerful evolution of the classic SU53 report. 🔑 Key Takeaways: What STAUTHTRACE is and how it differs from the classic SU53 report How to activate the trace system-wide or on a specific application server Why STAUTHTRACE runs on a rolling memory buffer with minimal system impact – so you can leave it active long-term How to filter results by user, date/time, application type, application name, authorisation object, and check result A live troubleshooting walkthrough: diagnosing a failed SU01 user-change authorisation (S_USER_GRP) Reading both passed and failed checks – including table access checks in SE16 (e.g. EKKO) and CDS view entity checks in S/4HANA Inspecting the user buffer via SU56 👥 Featuring: Ross Robertson – Senior SAP Authorisations Consultant, Soterion