SAP Security & Authorization Concepts
Authorizations decide whether a go-live succeeds and whether your SAP system passes the next audit. We design role concepts that are secure, maintainable and practical for users – for S/4HANA, Fiori and SAP BTP.
What we deliver
- Authorization concepts for on-premise S/4HANA and SAP BTP (identity and access management)
- Role design and implementation: PFCG roles, derived roles, Fiori catalogs and groups/spaces
- Authorization tracing, troubleshooting and fixing missing authorizations before and after go-live
- Super-user and key-user templates, segregation of duties and critical authorizations
- Governance: assessments of security-relevant changes, role distribution processes, user lifecycle
- Technical security: certificates, SSO, OAuth, security guidelines and audit support
- Transport and ChaRM support to bring role changes safely into production
Authorizations for new processes
New regulatory processes, new Fiori apps or a new AI use case always come with new authorization requirements. We have built and adapted the authorization concepts for several regulatory projects in the Swiss energy market and for AI-supported customer communication – working closely with the business, developers and the operating partner.