System Refresh Delta Guard

Post-refresh isolation and before / after delta guard: RFC destinations, SCOT, logical systems, jobs, printers, endpoint URLs, integration destinations, qRFC / bgRFC queues and selected custom configuration, with an allow / ignore policy and a non-destructive repair checklist

Content reviewed September 26, 2026

Engine: SYSTEM_REFRESH_DELTA_GUARD
Domain: Operations
Version: 2.1.0
Target releases: S4H_2022, S4H_2023, S4HANA_CLOUD_2402, S4HANA_CLOUD_2408
Accepted formats: JSON, CSV, TEXT

Input contract

Post-refresh extracts of the target system: JSON {'sid', 'client', 'rfc_destinations', 'scot', 'logical_systems', 'jobs', 'printers', 'endpoints', 'integration_destinations', 'queues', 'custom_config', 'isolation_policy'} - optionally as {'pre_refresh': {...}, 'post_refresh': {...}, 'ignore_policy': [{section, key, reason}]} for the before / after comparison - or a sectioned CSV export.

Required input

target SID
RFC / SCOT / logical system / job / printer sections for a full verdict

Before / after comparison (endpoints, integration destinations, custom configuration) needs the pre-refresh baseline captured on the same target system; qRFC / bgRFC queues are also checked without a baseline. Deltas matching the ignore policy are reported as ignored, never silently dropped. No repair is executed: the output is a repair checklist.

Finding codes

Finding codes (11)

REFRESH_INPUT_SID_MISMATCHDefault severity: BlockerCategory: LANDSCAPE_ISOLATION
Extract SID differs from the refreshed target SID
Remediation: Re-extract from the refreshed (target) system; checks against the wrong system are meaningless.
REFRESH_CRITICAL_JOB_SCHEDULEDDefault severity: CriticalCategory: LANDSCAPE_ISOLATION
Sensitive production jobs released in the copy
Remediation: Suspend released jobs (BTCTRNS1) after the copy and only re-release reviewed jobs.
REFRESH_LOGICAL_SYSTEM_UNADJUSTEDDefault severity: CriticalCategory: LANDSCAPE_ISOLATION
Logical system names not converted (BDLS)
Remediation: Run BDLS for the client to convert the production logical system names and re-check ALE partner profiles (WE20).
REFRESH_QUEUE_NOT_SANITIZEDDefault severity: CriticalCategory: REFRESH_DELTA
qRFC / bgRFC queues hold copied entries
Remediation: Keep the listed outbound queues stopped (SMQ1 / SBGRFCMON), delete the LUWs copied from production after review, and only then restart the queue schedulers.
REFRESH_RFC_TARGETS_PRODUCTIONDefault severity: CriticalCategory: LANDSCAPE_ISOLATION
RFC destinations still point to production
Remediation: Re-point or lock the listed SM59 destinations (post-copy automation / BDLS + RFC import) before releasing the system; production calls from a copy corrupt productive data.
REFRESH_SCOT_OUTBOUND_ACTIVEDefault severity: CriticalCategory: LANDSCAPE_ISOLATION
Outbound mail active without redirection
Remediation: Deactivate the SMTP node or configure a catch-all redirect in SCOT/SOST before restarting jobs.
REFRESH_CUSTOM_CONFIG_OVERWRITTENDefault severity: MajorCategory: REFRESH_DELTA
Selected custom configuration overwritten by the copy
Remediation: Restore the listed system-specific custom settings (e.g. TVARVC variables, Z-configuration switches) to their pre-refresh values or add them to the ignore policy if the production value is intended.
REFRESH_ENDPOINT_URL_OVERWRITTENDefault severity: MajorCategory: REFRESH_DELTA
System-specific endpoint URLs overwritten by the copy
Remediation: Restore the listed endpoint URLs (SOAMANAGER, HTTP / OData service endpoints, logon / callback URLs) to the values captured before the refresh, following the repair checklist; do not re-enable interfaces before the restore is verified.
REFRESH_INTEGRATION_DESTINATION_OVERWRITTENDefault severity: MajorCategory: REFRESH_DELTA
Integration destinations overwritten by the copy
Remediation: Point the listed integration destinations (BTP / CPI / HTTP destinations, communication arrangements) back to the non-production targets captured before the refresh.
REFRESH_PRODUCTION_PRINTER_ACTIVEDefault severity: MajorCategory: LANDSCAPE_ISOLATION
Production printers active in the copy
Remediation: Lock or re-point production output devices in SPAD to test devices.
REFRESH_ISOLATION_VERIFIEDDefault severity: InfoCategory: LANDSCAPE_ISOLATION
Isolation verified for the supplied sections
Remediation: No action; the verdict covers exactly the supplied RFC, SCOT, logical-system, job and printer extracts.

Input validation codes (5)

REFRESH_ARCHIVE_REJECTEDDefault severity: MajorCategory: INPUT_VALIDATION
Archive rejected by ingestion safety limits
Remediation: The archive exceeded the 100:1 expansion ratio, 500 MB total size, entry-count or 2-level nesting limit, or contained path traversal / encrypted members. Upload a flat, unencrypted archive of the export files. No verdict was produced. Re-export the artifact in one of the formats accepted by System Refresh Delta Guard (JSON, CSV, TEXT) and re-run the analysis.
REFRESH_INVALID_INPUTDefault severity: MajorCategory: INPUT_VALIDATION
Artifact does not match the engine input contract
Remediation: Provide the artifact type documented for this engine; unrelated or structurally invalid documents are rejected. No verdict was produced. Re-export the artifact in one of the formats accepted by System Refresh Delta Guard (JSON, CSV, TEXT) and re-run the analysis.
REFRESH_PARSE_ERRORDefault severity: MajorCategory: INPUT_VALIDATION
Artifact could not be parsed
Remediation: Fix the syntax error at the reported line/column (or re-export the file unmodified from SAP). No verdict was produced. Re-export the artifact in one of the formats accepted by System Refresh Delta Guard (JSON, CSV, TEXT) and re-run the analysis.
REFRESH_PAYLOAD_TOO_LARGEDefault severity: MajorCategory: INPUT_VALIDATION
Artifact exceeds the size limit
Remediation: Split the export (e.g. per package, company code or date range) so each upload stays under the service payload limit. No verdict was produced. Re-export the artifact in one of the formats accepted by System Refresh Delta Guard (JSON, CSV, TEXT) and re-run the analysis.
REFRESH_INSUFFICIENT_INPUTDefault severity: InfoCategory: INPUT_VALIDATION
Required input missing
Remediation: Supply every input the engine's contract marks as required (see the engine catalog entry). No verdict was produced. Re-export the artifact in one of the formats accepted by System Refresh Delta Guard (JSON, CSV, TEXT) and re-run the analysis.

Back to the documentation