Understand how SAP Security supports real business work.
Understand users, roles, authorisations and access-control concepts within SAP environments. UTBROS explains where this module fits in a real organisation, the teams involved and the SAP concepts that support the work.
USED BY
security and SAP support teams
PROCESS FOCUS
user lifecycle, roles, authorisations, access review and audit support
LEARNING OUTCOME
understand controlled access within SAP business processes
What this course covers
- SAP User Types and User Master Basics
- Roles, Profiles and Authorization Concepts
- PFCG Role Maintenance Basics
- SU53 and Basic Authorization Error Analysis
- Password Policy and User Lock Management
- Single and Composite Roles
- Authorization Objects and Field Values
- Role Assignment and User Comparison
- Transporting Roles Between Systems
- SUIM Reports and Access Review
- Emergency Access and Firefighter Overview
- RFC and Communication User Security
- Basic Fiori Catalog / Group / Role Concepts
- Change Documents and Security Audit Log Basics
- Segregation of Duties (SoD) Fundamentals
- Complex Role Design and Derived Roles
- Authorization Trace with STAUTHTRACE / ST01
- Critical Access, SoD Rulesets and Mitigation Controls
- Fiori Front-End / Back-End Authorization Troubleshooting
- SAML, OAuth, SSO and Identity Provider Integration
- RFC Trust, SNC and Secure Communications
- GRC Access Control and Emergency Access Governance
- User Provisioning, Joiner-Mover-Leaver and Automation
- Security Hardening, Audit Evidence and Vulnerability Remediation
- Role Redesign, Access Certification and Production Root-Cause Analysis