Now accepting guest editorial from SAP, Oracle, Workday and ServiceNow practitioners.Pitch a guide
The Sign-Off Table

Lesson 2 of 5

System change options

10 min

Listen to this lesson

0:00 / 15:25

Client settings protect client-specific customizing. The repository, meaning ABAP programs, dictionary objects and other development objects, is protected at system level by the system change option in transaction SE06 (button System Change Option). It answers one question: may repository objects be changed in this system at all, and if so, which ones?

  1. Is the global setting "Modifiable"?Yes → check the software component and namespace · No → no repository object can be changed in this system
  2. Is the object's software component or namespace modifiable?Yes → check the client's cross-client setting in SCC4 · No → the change is blocked
  3. Does SCC4 allow repository changes from this client?Yes → the change can be made (and recorded in a transport) · No → the change is blocked
How SE06 and SCC4 combine. Every gate must be open for a repository change.
The Sign-Off Table · thesignofftable.com/academy/sap-bas-201

The global setting

The global setting is either Modifiable or Not Modifiable. If it is Not Modifiable, no repository object can be changed, whatever the other settings say. Production and quality assurance systems normally run Not Modifiable; development systems run Modifiable.

Software components and namespaces

Below the global setting, each software component can be set individually. SAP training describes four values: Modifiable; Restricted Modifiability (objects can only be created as non-originals); Not Modifiable, Enhanceable Only (no changes, but the enhancement framework can still be used); and Not Modifiable, Not Enhanceable. Namespaces are set the same way: the customer name range (Y and Z objects) and any reserved namespaces in the form /NAMESPACE/ can be opened or closed separately.

LevelDevelopment (CMD)Quality (CMQ)Production (CMP)
Global settingModifiableNot ModifiableNot Modifiable
SAP software componentsOpen only as far as needed (for example for SAP Notes and approved modifications)Not ModifiableNot Modifiable
Customer name range (Y/Z)ModifiableNot ModifiableNot Modifiable
Client cross-client setting (SCC4)Allowed in the development clientNo changesNo changes
Contoso's system change options by system role.
The Sign-Off Table · thesignofftable.com/academy/sap-bas-201

Two practical points help in development. First, changing an SAP-delivered object by hand (a modification) requires the object to be registered with SAP, and the developer gets a key for it; changes made through the Note Assistant do not need such a key. Second, partners and add-on vendors often deliver objects in their own reserved namespace. Keep those namespaces closed in CMD unless you really own the objects, so that nobody "fixes" an add-on locally and breaks its next update.

What SNOTE needs

Implementing SAP Notes with the Note Assistant (SNOTE) changes SAP repository objects, so in the development system the affected software components must be set to Modifiable or Restricted Modifiability, and the general SAP name range must be modifiable. In QA and production, notes arrive by transport, never by running SNOTE there.

An SAP Note is implemented once with SNOTE in development and then travels by transport; QA and production never run SNOTE.
The Sign-Off Table · thesignofftable.com/academy/sap-bas-201

Emergency opening of production

Occasionally production must be opened, but only as a break-glass step for a setting or repair that cannot be transported, for example when SAP support must make a correction directly in production. Code and configuration emergency fixes do not qualify: as the release management course explains, they are still built in development (CMD) and moved through the transport path, with faster approval and a minimum safe test. Treat any opening as a controlled exception. SE06 changes are logged in the system, but an approved procedure makes the difference between an audited emergency and a finding.

Production's SE06 setting as a lifecycle: it leaves Not Modifiable only through an approved, time-boxed break-glass window and is verified by a second person when it closes.
The Sign-Off Table · thesignofftable.com/academy/sap-bas-201
  1. RequestChange owner documents why the change cannot be transported and how long production must stay open
  2. ApproveRelease manager (Luis at Contoso) and system owner approve the window
  3. OpenSam opens only the needed component or namespace in SE06 and the client in SCC4
  4. ChangeOnly the non-transportable change is made and recorded; anything that can be transported goes through CMD and the transport path
  5. Close and verifySettings are restored; a second person checks SE06 and SCC4 and records the evidence
  6. Follow upThe same change is applied in CMD and CMQ so the landscape stays in sync
An emergency opening procedure. The follow-up step prevents production from drifting away from development.
The Sign-Off Table · thesignofftable.com/academy/sap-bas-201

What would you do?

During cutover rehearsal, Kenji asks Sam to set CMQ to Modifiable "for the afternoon" so he can debug and patch a custom report directly. What is the best answer?

Key points
  • SE06 controls repository changes: global setting, then software components and namespaces.
  • Production and QA: global setting Not Modifiable. Development: Modifiable, opened only as needed.
  • A cross-client change needs both SE06 and SCC4 to allow it.
  • Open production only as break-glass for non-transportable settings, through an approved, time-boxed, verified procedure; code and config fixes still go CMD → transport path.

Check your understanding · not graded

Lesson check

  1. 1. Which transaction holds the system change option?

  2. 2. What does "Not Modifiable, Enhanceable Only" allow for a software component?

  3. 3. A cross-client customizing change is blocked although SCC4 allows it. What else must allow it?

  4. 4. How should SAP Notes reach production?