## 13.13.5.1.1.2.2  Read-Access Logging
Read access to personal data is partially based on legislation and can be logged. The RAL component can be used to monitor and log read-access to data, and provide information, such as which business users accessed personal data and when they did so.
Read-access logging is supported in all defense objects. Find the details below.
In the following configurations given as an example, fields are logged in combination with additional fields in the following business contexts:
| Configuration            | Fields Logged                                                                                             | Business Context                                            |
|--------------------------|-----------------------------------------------------------------------------------------------------------|-------------------------------------------------------------|
| DFS_CAP_CAPBLTOBJECT_SRV | DFSCAPBLTOBJTYPE DFSCAPABILITYOBJECTID DFSCAPBLTOBJOWNER DFSCAPBLTOBJTYPE PROJECT STATUSCODE EMPLOYEENAME | Logging of the BP/EMPLOYEE domain in the capability object. |
| DFS_FMPO_FLXMTPLOBJ_SRV  | FLXMTPLOBJVAROWNEROBJECTID FLXMTPLOBJVARRESPPLNROBJEC- TID                                                | Logging of the BP/EMPLOYEE domain in the FMPO.              |
| Configuration   | Fields Logged                                                                                                                                                                                                                                                                                                                                                                                                                     | Business Context                                                   |
|-----------------|-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|--------------------------------------------------------------------|
| UI_DFS_SCENARIO | DFSCAPABILITYOBJECTID DFSCAPBLTOBJNAME DFSCAPBLTOBJSHORTNAME DFSDIRECTIVEDESCRIPTION DFSDIRECTIVEID DFSOBJECTNAME DFSSCENARIOALTVESTDAMOUN- TINTC DFSSCENARIOALTVID DFSSCENARIOALTVNAME DFSSCENARIOALTVSHORTNAME DFSSCENARIOALTVTASKID DFSSCENARIOALTVTASKNAME DFSSCENARIOALTVTRANSCRCY DFSSCENARIODESC DFSSCENARIOID DFSSCENARIOSHORTNAME DFSSCENARIOSTATUS DFSSCENARIOSTATUSOBJECTID DFSSCENARIOTYPE DFSSCENARIOVALIDITYENDDATE | Logging of the DEFENSE/ IS_DFS_SEN- SITIVE domain in the scenario. |
|                 | DFSSCENARIOVALIDITYSTARTDATE                                                                                                                                                                                                                                                                                                                                                                                                      |                                                                    |
|                 | FORCEELEMENTORGID                                                                                                                                                                                                                                                                                                                                                                                                                 |                                                                    |
|                 | FRCELMNTORGNAME                                                                                                                                                                                                                                                                                                                                                                                                                   |                                                                    |
|                 | PROJECT                                                                                                                                                                                                                                                                                                                                                                                                                           |                                                                    |
|                 | PROJECTNAME                                                                                                                                                                                                                                                                                                                                                                                                                       |                                                                    |
| UI_DFS_SCENARIO | EMPLOYEENAME                                                                                                                                                                                                                                                                                                                                                                                                                      | Logging of the SAP/EMPLOYEE domain in the scenario.                |
|                 | DFSSCENARIOOWNER                                                                                                                                                                                                                                                                                                                                                                                                                  |                                                                    |
| Configuration               | Fields Logged                                                                                                                                                                                                                                                                                                                                                                                           | Business Context                                                       |
|-----------------------------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|------------------------------------------------------------------------|
| DFS_POS_DEFENSEPOSITION_SRV | PERSONNELNUMBER DFSPOSITIONVALDTYSTARTDATE DFSPOSITIONVALDTYENDDATE DFSPOSITIONRELATEDOBJECTID DFSPOSITIONOPEXERCISEID DFSPOSITIONROTATIONKEY DFSOBJECTSUBTYPE                                                                                                                                                                                                                                          | Logging of the BP/EMPLOYEE domain in the defense position.             |
| UI_C_DFS_MAINT_PLATFORM     | DFSMAINTPLATFORMID DFSMAINTPLATFORMLONGNAME DFSMAINTPLATFORMDESCRIPTION DFSMAINTPLATFORMSTATUSTEXT PARTNERFUNCTIONNAME DFSMAINTPLATFORMSHORTNAME DFSMAINTPLATFORMOWNERNAME DFSMAINTBUSINESSOBJECTNAME DFSASSGMTVALDTYSTRTDATE DFSMAINTPARENTPLATFORMID DFSMAINTBUSINESSOBJECTTYPE DFSMAINTPLATFORMTYPE DFSMAINTPLATFORMOWNERID DFSMAINTBUSINESSOBJECTID DFSMAINTPLATFORMTYPETEXT DFSASSGMTVALDTYENDDATE | Logging of the BP/EMPLOYEE domain in the defense maintenance platform. |
| Configuration             | Fields Logged                | Business Context                                                   |
|---------------------------|------------------------------|--------------------------------------------------------------------|
| UI_C_FRCELMNTOPEXERPOSROT | PERSONNELNUMBER EMPLOYEENAME | Logging of the BP/EMPLOYEE domain in the manage personnel staffing |
The new log domain IS\_DFS\_SENSITIVE has also been created, which can be used by customers to log the fields that they classify as 'sensitive' across all defense objects.
SAP delivers sample configurations for applications. To use these configurations, save the ZIP attachments from the SAP Note 2805607 for release OP 1909, SAP Note 2948600 for release OP 2020 and SAP Note
<!-- image -->
3079725 for release OP 2021. Extract these ZIP files and import the RAL configurations using the import function for configurations in the transaction SRALMANAGER.