We can help you start over from scratch in authorization management or redesign your established concepts for optimal clarity – prior to your migration to S/4HANA, for example.
Our project models allow for a high degree of flexibility and they are tailored to your particular requirements.
In all of our authorization projects, we use modules of our proven SAST SUITE and can optimize automation to shorten project runtime by up to 70 %. Your project budget will thank us!
Meanwhile, is your next audit right around the corner? Once we show you your priority-one findings, you'll be able to relax as the big day approaches.
Analysis of your SAP authorizations: Before you get started, an extensive analysis of the current situation and proactive project planning are essential to the success of your SAP authorization project. That’s why we support you from the very beginning and help you get an overview of the composition of your systems and concepts.
In this process, we not only ask whether the compliance requirements are met, but also where there is potential for optimization. Our proprietary tool SAST SUITE provides ideal support here. Our software helps you reduce the required effort dramatically and save you a lot of time.
In addition to technical analyses, you also get recommended actions, including a project schedule that is custom-tailored to your systems, as well as a detailed expense estimate. This level of in-depth consideration means that every authorization project is destined to be a complete success.
Authorization concepts for SAP ERP and SAP S/4HANA systems: A well-conceived authorization concept is the cornerstone for protecting your SAP systems – and a major contributor to your business success. Our experts know exactly where more attention is needed in both SAP ERP and SAP S/4HANA systems.
The constant expansion of the number of users and authorizations means it is increasingly difficult to make the appropriate assignments. Over time, role content has changed and the wide variety of transactions and authorization objects has only become more sophisticated. Often, it is no longer possible to easily keep track of it all. Also consider that your identity management processes might no longer be up to date. This is in addition to increasingly strict compliance requirements with regard to critical authorizations and SoD (separation of duties) conflicts.
Our method is standardized and largely automated in the SAST SUITE. Workflows guide you through the project and lead you reliably to its conclusion.
Of course, we will also support you with the implementation and rollout of your new authorization concept.
Your benefits: Thanks to our experts’ years of experience and our Safe Go-Live approach, you do not have to worry about any constraints on your day-to-day business. The SAST SUITE supports you through all project phases and ensures a high level of quality. Whether project coaching or partial or complete assumption of your activities – our agile project models can be tailored to your individual needs.
Your advantages at a glance:
For more information, see our Success Story: NORDWEST Handel AG.
We can also execute projects using other, already available software solutions upon request.
SAP security is often ignored almost completely during a migration.
Why is an S/4HANA migration impossible without also redesigning your authorizations?
With the SAST SUITE, the technical migration of your authorizations to SAP S/4HANA is standardized. The solution is also capable of automated preparations, relieving you of a large part of the conversion work. Our experienced consultants will also look after your individual requirements and ensure a targeted, successful conversion of your authorizations.
We offer a variety of approaches to a successful SAP S/4HANA migration:
Brownfield approach: Transformation of existing roles from your legacy system
Greenfield approach: Redesign your SAP authorizations based on changed processes
Selective data approach: Redesign your SAP authorizations based on current processes
When designing your SAP S/4HANA authorization concept, the quality of your current roles and your internal objectives are the deciding factors for determining whether the brownfield, greenfield, or selective data approach is right for you. Talk to us about using a pilot authorization study to make your decision.
One advantage from your migration project with us: the SAST Safe Go-Live approach. This is how we ensure that the authorization structures behind the Fiori apps are transparent for your S/4HANA system, which intertwines both the SAP Fiori front end and the SAP back end server. When you execute the report, you gain a detailed record of user activities and a code analysis.
Your advantages at a glance:
Our SAP Security Consultants help you identify and eliminate any security vulnerabilities on the application server, your operation system, and your databases.
SAP Solution Manager can play a key role in shaping an SAP S/4HANA implementation project. Release 7.2 was designed to meet all the major challenges that can arise during an SAP S/4HANA implementation and adapt the business processes to the digital requirements. It unifies the design and documentation of business processes, for example, and supports with change and release management.
We’ll help you implement an extensive security concept that protects your system against unauthorized access at the database, network, and front end levels.
Your advantages at a glance:
We have our own, proven project methodology to create and implement SAP emergency user concepts in SAP systems. SAST Superuser Management supports you with monitoring your emergency users in an efficient, audit-compliant manner.
Have you already implemented other solutions or even the SAP standard? Our consulting expertise covers these cases, too.
Here's what we can offer:
Your benefits with SAST Superuser Management:
Optimize your SAP authorizations: In some cases, the redesign of authorizations is not possible. At the same time, companies often face the need to mitigate risks in existing roles and processes, as well as the desire to minimize their SAP license fees. No matter what your motivation, we’ll be happy to support you with optimizing and cleansing your SAP authorizations.
We are specialists in supporting our customers with managing SoD risks. We focus primarily on minimizing them from the start and then managing the residual risks through process monitoring. In our experience, user authorizations often grow over time. As a result, unnecessary authorizations can be reduced by around 75 percent in most cases, without even coordinating with specialist departments or the users themselves.
The SAST SUITE offers an extensive, certified SoD rule set to eliminate separation-of-duty conflicts. We will be happy to support you no matter what software solution you use.
Overview of our project methodology:
*Optional/recommended project steps
We have standardized the elimination of SoD risks in a project methodology. Of course, this methodology also allows maximum leeway for your individual requirements.
Your advantages at a glance:
Our customers' requirements regarding quality, the time involved, and of course, their project budget often differ greatly when it comes to planning this kind of cleanup project. No matter what your own priorities are in authorization projects, we offer solutions designed to meet every requirement to the letter.
All these projects have one thing in common: Our experienced consultants use the solutions from our SAST SUITE to cleanse your critical authorizations. For you, this means we achieve a cleansing rate of up to 95 percent – and we can also analyze the actual use of critical object values across all users.
One of the biggest challenges faced in a redesign project is ensuring the continuity of normal business operations. With our SAST Safe Go-Live Management approach, this concern is now a thing of the past. If unintended error situations occur, we enable your users to help themselves in just seconds, through a fallback user process.
Your advantages at a glance:
For this reason, auditors are increasingly insisting that technical users not be granted blanket authorizations such as SAP_ALL. Ideally, users will have only the minimum needed authorization objects and values, and an ongoing process will verify this. There are also dynamic use cases, however, in which it is unclear which objects will be needed in the future. With our standardized methodology, we can support you with analyzing the authorizations of your technical system users and defining them in line with your specific needs. To do so, we recommend using the SAST SUITE for analysis, implementation, and a smooth go-live.
Your advantages at a glance:
To begin, all you need is the SAST Self Adjusting Authorizations and a brief introduction to their use. Our experts support you with the installation and concept, make sure they are configured in accordance with the concept, and remain available for questions at all times after the tool is activated. The software takes care of all the rest for you: During the learning phase, the novel technology logs the transactions used by defined users. In the subsequent production phase, the execution of additional transactions is blocked and requires approval (via electronic workflow) for activation. You can set up a blocklist to prevent the execution of especially critical transactions, such as SE16, SM30, SA38, and others, immediately for certain groups of users.
The procedure is flexible and can be implemented in a very short time. Please feel free to contact us with any questions you might have.
The SAP standard features a number of options for analyzing user activities. The information is widely distributed, however, and not optimized for this kind of analysis. With our proprietary SAST SUITE, we have optimized the procedure and are capable of generating comprehensive analyses that take all data sources into account. As a result, we can quickly identify users and recommend actions for restricting users, so they don’t pose an undue burden on your IT budget.
Overview of our project methodology:
This procedure pays off twofold, because both the effort required and expenditures are very low compared to the license fee savings. In other words: Your expenditures usually pay off by the next SAP system measurement at the latest.
While the necessary authorization objects are added to roles, after the functional tests and findings regarding their necessity, but ongoing maintenance of transaction SU24, which is the foundation for smooth, efficient authorization management, is often lacking. As such, optimizing these values is essential to ensuring the consistent quality of your SAP roles.
Why is it so important to maintain these values?
Missing authorization default values will inevitably result in recurring errors during transaction execution. In turn, this results in process disturbances and delays, long response times, and increased effort by everyone involved. Last but not least, program terminations during processing can result in inconsistent data.
With the SAST SUITE and the expertise of our consultants, you can get your processes running smoothly again in nearly no time at all. Our software supports you with analyzing the required objects and values, together with the resulting implementation in transaction SU24.
Your advantages at a glance:
SAP security monitoring: Thanks to a variety of measures, you have lifted your authorization concepts up to a good, secure level. That’s an important first step. But it’s just as important to implement SAP security monitoring, to maintain this secure status for critical authorizations in the long term.
To prevent this from happening, we will be happy to support you in establishing a stay clean process.
Overview of our methodology:
During the definition phase, all necessary check parameters are defined:
We use the subsequent implementation phase for the following:
During the go-live:
Our SAST SUITE features a check policy with more than 2,000 checks in the areas of SAP authorizations, database, operating system, SAP configuration, and much more – helping you to implement the stay clean process quickly. And even if you use a different solution, our competent SAP experts will be happy to advise you on its use.
Interested?
Bring your SAP authorizations to a new level! Arrange a non-binding consultation.
"Instead of repeatedly ironing out unevennesses in the roll administration, we’ve used SAST SUITE to put our authorization structures on an entirely new basis. Besides saving time and money over the long term, we no longer have to worry about our legal compliance."
Success Story "Authorization Management - legal certainty and correctness"
"With the help of the SAST experts and the Safe Go-Live approach, around 50% of the users that were created could be identified as inactive and easily deactivated. At the same time, the authorization project reduced the risks by up to 70% and thereby significantly improved security."
