By understanding a few of the basic workings of SAP Roles and Authorisations, the process of creating and changing roles can be significantly simplified, particularly as described below in the "Changed" Status.
The tool SAP provides for building standard "R/3" Authorisations is the Role Maintenance tool, or Profile Generator, transaction PFCG. Understanding how this works is essential to effectively and efficiently manage SAP Roles and Authorisations. Full Effect Solutions provide a free review for UK SAP customers of their PFCG configuration, for more information, please make an enquiry using the form below.
Through the correct use of single and composite roles, the cost of maintaining your roles and authorisations can be significantly reduced. Each single role should be made up of 5 to 15 transactions and should be considered a building block to be used in the composite roles, which should map to Organisational Responsibilities. If your roles contain more than 15 transactions, contact us using the form below and we can perform a security configuration review and advice you on how best to reduce your security costs.
When you add a new transaction to a role, do you find that additional objects are brought through that are unrelated to the transaction added? This will happen if you have entries in your Authorisations tab that have status "Changed". To find out how to prevent this and significantly reduce the maintenance effort for all your role changes, please contact us using the form below.
The starting point on the SAP Service Marketplace for SAP Security