How to Set up and Analyse STAUTHTRACE

Listen to the SAP Security & GRC podcast – helping you on your journey to effective access risk management in SAP.

In this episode, Ross Robertson walks through the SAP short-term user authority check trace (STAUTHTRACE) – a real-time authorisation trace that captures both successful and failed authority checks as users execute transactions, Fiori apps, and RFC calls. Think of it as a far more powerful evolution of the classic SU53 report.

🔑 Key Takeaways:

What STAUTHTRACE is and how it differs from the classic SU53 report

How to activate the trace system-wide or on a specific application server

Why STAUTHTRACE runs on a rolling memory buffer with minimal system impact – so you can leave it active long-term

How to filter results by user, date/time, application type, application name, authorisation object, and check result

A live troubleshooting walkthrough: diagnosing a failed SU01 user-change authorisation (S_USER_GRP)

Reading both passed and failed checks – including table access checks in SE16 (e.g. EKKO) and CDS view entity checks in S/4HANA

Inspecting the user buffer via SU56

👥 Featuring:

Ross Robertson – Senior SAP Authorisations Consultant, Soterion