Skip to Content
Personal Insights
Author's profile photo Hari Bhaskar Bhoopathy

Audit data and Configuration changes in SuccessFactors

Hi Everyone,

Hope everyone is staying safe and healthy

I have decided to write this blog  post on one of the salient and an imperative feature of SAP SuccessFactors- “Change Audit reports”. We all know the importance of audit in any organization, especially when working with Government data or any other sensitive personal information of the employee. However, this could be a complex process when the number of employee increases or the company has been established in many geographical locations with each city having its own policies.

Having said this, it is very much necessary that we keep track of what changes are being made at both configuration and data level. We should also be able to generate reports and submit to the audit team with click of a button.

SAP SuccessFactors’ Change Audit report is one such feature that provides you the Audit at both Configuration level , data level and even audits the Role permission changes.

Though there are other options like Check tool or Reports, Change Audit report would be the center idea of this blog post.

 

Types%20of%20Audit

Types of Audit

 

Pre-requisites

 

1.Provisioning

You have to enable the following checkboxes in the provisioning system

Role Based Permissions

Enable Generic Objects- MDF

 

2.RBP Permissions

Once you have enabled the access in provisioning, follow the below path to provide necessary permissions.

Admin center->Manage Permission Roles->Select your desired Role->Under Administrative permissions->Select Admin center permissions.

Enable the below highlighted permissions.

 

Role%20Based%20Permission

 

3.Manage Audit Configuration

Next step is to navigate to Admin center -> Manage Audit Configuration and enable the below  buttons.

 

Personal Data Audit- This is for Data level changes

General Audit- This is for configuration data or business data reports.

Manage%20Audit%20Configuration

Manage Audit Configuration

After enabling the button, click Save.  After about 24 hours or so, you will receive a mail informing you that the Change Audit feature has been activated in your system

Kudooosss…. !!!!

We are all set to use this feature.

Change Audit Reports

 

Now navigate to the Admin center-> Change Audit Reports

Let us first explore the Personal Data Report

Change%20Audit%20Configuration

Change Audit Configuration

 

Person Search

Click on the Person Search Tile , a pop up opens as shown below.

Select “Change On Subject User” when you would like to audit changes of an individual employee

Select “Change by User” when you want to audit the changes made by an individual employee or internal candidate to other people’s personal data.

Personal%20Data%20Report

Personal Data Report

 

Enter the Person name and select the modules as per the requirement. Once you select the modules, the Functional Areas will be automatically selected by the system. You can however, add or remove as per the requirement.

 

Select the Time range  not exceeding 7 days, as this is the limitation of Change Audit features. If you want a month’s audit report or so, you may have to generate multiple reports by selecting the Time range suitably.

You Can also generate the report on recurring basis by enabling the Recurrence button. Either downloading the File offline or directly sending the file to your SFTP cloud storage.

 

 

Once you have entered the necessary details, click Submit.

You could always track the status of the job under the Access Reports Tab. You would receive an email with the report download link .

 

Access%20Reports%20Section

Access Reports Section

 

A sample report is given below.

Change%20Audit%20Report

 

Change Audit Report

 

Source of the above table: www.help.sap.com.

 

You can apply the same method to extract the changes made by the External users or Onboardee as per the requirement.

External%20Candidate%20Changes

                                                            External Candidate Changes

 

The Change audit configuration on Business data and configuration data will be covered in my next blog post.

 

https://blogs.sap.com/2021/06/13/configuration-audit-report-provisioning-system-rbp-and-mdf-objects/

 

I hope most of you would have got to know about this salient Change Audit report feature of SuccessFactors. This tool would really come handy when you decide to audit the changes made in the past.

 

Limitations

  • Audit reports can be generated for a maximum time period of only 7 days at a time. We may have to create multiple reports if our audit requirement is for more than 7 days.
  • Some types of change audit data can take up to 72 hours to be made ready for reporting. Solutions impacted by this delay include: Compensation , Performance & Goals , Succession & Development (except Mentoring), Employee Profile, User Management, Proxy Management, and Role-Based Permissions
  • Audit reports are automatically purged after 48 hours. So, if we miss to download the report within 48 hours, then we may lose the report and have to generate again.
  • Storage limit for reports are exactly 1 GB
  • Field values in change audit reports can’t be more than 4000 characters. Longer values are truncated.

EDIT:

The report generation period has been extended from 7 days to 30 days from the recent Release.

References

https://help.sap.com

https://launchpad.support.sap.com/

Assigned Tags

      10 Comments
      You must be Logged on to comment or reply to a post.
      Author's profile photo John King
      John King

      Great blog Hari!

      Author's profile photo Ashish Singh
      Ashish Singh

      Hi Hari,

      Great blog, thank you for sharing, the period limitation is now extended from 7 to 30 day.

       

      Cheers,

      Author's profile photo Hari Bhaskar Bhoopathy
      Hari Bhaskar Bhoopathy
      Blog Post Author

      Hi Ashish,

      Yes, the period has been extended from 7 days to 30 days. I have updated the blog.

      Thanks

      Author's profile photo Roxana Angel
      Roxana Angel

      Hello!

      Thanks for sharing, Im currently trying to find out if there is a similar report but can be generated for the whole company? We need to know the changes done during the month so we are able to communicate it to the Payroll Provider form them to update the data in their system. Would you happen to know if there is any other report I could use for that matter?

      Thank you!!

       

      Author's profile photo Hari Bhaskar Bhoopathy
      Hari Bhaskar Bhoopathy
      Blog Post Author

      Hi Roxana Angel

      Did you managed to generate the report as per your requirement?

      I believe this report is object specific, I am not sure what exactly you are looking for when you say "the report for the whole company"?

       

       

      Author's profile photo Roger Conesa Colomina
      Roger Conesa Colomina

      Hello!

       

      Thanks for sharing. Is it possible edit these reports? In this reports there are the username and I need the USER ID.

      thanks in advance!

      Author's profile photo Hari Bhaskar Bhoopathy
      Hari Bhaskar Bhoopathy
      Blog Post Author

      Hi Roger Conesa Colomina ,

      You can download the report and change the label as requrired.

      I am not sure if we can change the label before downloading the audit report.

      Thanks

      Author's profile photo Swathi Kavuri
      Swathi Kavuri

      Hi,

       

      Thanks for the above information. I followed the steps and able to run the reports successfully. But there is no data in the reports. What am I missing here?

      Author's profile photo Hari Bhaskar Bhoopathy
      Hari Bhaskar Bhoopathy
      Blog Post Author

      Hi Swathi Kavuri,

      Check the following:

      1. Select the Time period suitably.
      2. Check if you have selected the Person field as per the requirement. ("Subject user" or "Changed by User")
      3. First try to generate the report exhaustively and then gradually apply the filters.

      Still, if you find blank reports, it could be possible that there was no change made during that period.

      Just give try

      Cheers!!

      Author's profile photo Swathi Kavuri
      Swathi Kavuri

      Hi Hari Bhaskar Bhoopathy

       

      Thank you for your detailed explanation!

      Tried again by making some minor changes and ran the report and I see that the report fetched the data.

       

      One more question - let's say, if the change audit is enabled in the SF system today, can it extract the data for the changes that happened in past?

       

      Really appreciate your help.