• SAP Security overview and key concepts
• Authentication vs authorization
• Users, roles, profiles, authorizations – relationship and flow
• SAP security architecture basics
• Authentication vs authorization
• Users, roles, profiles, authorizations – relationship and flow
• SAP security architecture basics
• SAP GUI basics for security administrators
• Important T-codes for security work (high-level overview)
• Understanding client, system, and mandant concepts
• Important T-codes for security work (high-level overview)
• Understanding client, system, and mandant concepts
• User types (Dialog, System, Communication, Service, Reference)
• Create, change, lock/unlock, delete users
• Password policies and login security settings
• User groups, user parameters, address and defaults
• Mass user maintenance concepts
• Create, change, lock/unlock, delete users
• Password policies and login security settings
• User groups, user parameters, address and defaults
• Mass user maintenance concepts
• Authorization objects and fields
• Authorization values – activities and restrictions
• How authorization checks work in SAP
• SU24 basics – proposal and maintenance concept
• Profiles and authorization generation basics
• Authorization values – activities and restrictions
• How authorization checks work in SAP
• SU24 basics – proposal and maintenance concept
• Profiles and authorization generation basics
• Single role vs composite role
• Role structure – menu, authorizations, user assignment
• Building menus – transactions, reports, web links
• Role naming standards and documentation
• Transport basics for roles (landscape movement overview)
• Role structure – menu, authorizations, user assignment
• Building menus – transactions, reports, web links
• Role naming standards and documentation
• Transport basics for roles (landscape movement overview)
• Role-based access control (RBAC) approach
• Derivation roles concept (organizational levels)
• Organizational level fields and best practices
• Master roles vs derived roles
• Common role design patterns for business teams
• Derivation roles concept (organizational levels)
• Organizational level fields and best practices
• Master roles vs derived roles
• Common role design patterns for business teams
• Assigning roles to users – best practices
• Validity dates, temporary access, emergency access overview
• Access provisioning workflow suggestions
• Periodic role review and user access review checklist
• Validity dates, temporary access, emergency access overview
• Access provisioning workflow suggestions
• Periodic role review and user access review checklist
• Common authorization errors and root causes
• Using SU53 for error analysis
• Using STAUTHTRACE basics (when and how)
• Fixing issues via role updates, SU24 adjustments, missing objects
• Best-practice troubleshooting flow
• Using SU53 for error analysis
• Using STAUTHTRACE basics (when and how)
• Fixing issues via role updates, SU24 adjustments, missing objects
• Best-practice troubleshooting flow
• What is SoD and why it matters
• Typical SoD conflict examples in SAP processes
• Risk mitigation methods (role redesign, controls, approvals)
• Audit-ready access management practices
• Typical SoD conflict examples in SAP processes
• Risk mitigation methods (role redesign, controls, approvals)
• Audit-ready access management practices
• User lifecycle controls – joiner, mover, leaver
• Role approval and change management controls
• Access review documentation and evidence
• Logs and monitoring basics relevant to security teams
• Secure administration checklist
• Role approval and change management controls
• Access review documentation and evidence
• Logs and monitoring basics relevant to security teams
• Secure administration checklist
