Which of the following security measures is the customer responsible for?

Question

Options

• AApplication-level user management
• BChange logging through audit trails
• CAPI management
• DDeactivation of SAP administrative users

• A
  88% (36)
• B
  7% (3)
• C
  2% (1)
• D
  2% (1)

Explanation

In SAP cloud services, the shared responsibility model divides security duties between SAP and the customer - and application-level user management (A) falls squarely on the customer, who controls which business users get access, what roles they hold, and how those accounts are governed within the application.

Change logging through audit trails (B) and API management (C) are platform-level capabilities that SAP provides and manages as part of the cloud infrastructure, not tasks the customer configures from scratch. Deactivation of SAP administrative users (D) refers to system-level accounts (like SAP*) that SAP itself is responsible for managing, since customers do not have direct control over those privileged accounts in cloud deployments.

Memory tip: Think "inside the app = customer's job." Anything that touches who logs into your business application is your responsibility; anything that touches the underlying platform, system accounts, or infrastructure logging is SAP's responsibility.

No community discussion yet for this question.