Access Violation Management (SOD Tool)

With transaction /REM2/SOD users can configure their own set of checks that track executed SOD violations:

SAP systems track changes to SAP business objects as change documents. This tool analyzes users that made corresponding changes to two business objects where the duties should be segregated.

To set up a check for an SOD violation:

• Go to transaction /REM2/SOD and press + to add a new rule
• enter a unique Rule ID
• select whether this rule is active or not
• select object type A and enter a label
• enter a time horizon for analysis for object A
• select object type B and enter a label
• enter a time horizon for analysis for object B
• select a link table (search help or F4 will show you all available tables for this combination of objects), and a link field
• add a description
• save.

To run SOD checks, select the check in /REM/ADMIN and mark as active.

Alerts will be displayed in the alerts transaction /REM/ALERTS in the Access Violation Management area.