SU24 - Changing SU24 after many years.

Hello SAP Security Gurus,

We have never maintained SU24 in our systems (more than 10 years). Currently we have a requirement to update or maintain a custom auth object against standard HR transactions. Please let us know what are the implications of this change. Our concerns are as follows:

1. Once we check maintain the auth object for the standard tcodes, will all the existing roles having these tcodes go out of sync?

2. Should we make sure that SU24 is in sync in all the clients before changing it?

Please let us know if you have any inputs regarding this issue and do the needful.

Thanks,

Karthik Kiran