Migration der Berechtigungen auf SAP S/4HANA - Ist ein Rollen-Redesign erforderlich?

Post on 10-Apr-2017

62 views 2 download

transcript

XITING COMPETENCE for your SAP security

How to simplify the migration of

authorizations to SAP S/4HANA®

JENNIFER SCHMIDER, XITING AG

XITING COMPETENCE for your SAP securityXITING COMPETENCE for your SAP security

AGENDA

1About Xiting

2Introduction

3Role Redesign

4XAMS Demo

XITING COMPETENCE for your SAP securityXITING COMPETENCE for your SAP security

ABOUT XITING

Founded 2008 by SAP Security Experts

Headquartered in Switzerland

50 Employees

Offices in Germany, Switzerland, England and United States

All Senior Consultants are also SAP Trainers

XITING COMPETENCE for your SAP security

S/4HANA – A NEW PRODUCT LINE

• Only one solution for each requirement

• Reduction of application and transactions

• Update and optimization of database structure

SAP ERP

SAP S/4HANA

New implementation

Principle of One

XITING COMPETENCE for your SAP security

SAP S/4HANA EM AND CLOUD SOLUTIONS

SAP Ariba

SAP Fieldglass

Concur

SAP Hybris SAP SuccessFactors

SAP Integrated Business PlanningSourcing and Procurement

Supply Chain

Finance

manufacturing

Research and Development

Asset Management

SAP S/4HANA Core

Service

Sales

Marketing

XITING COMPETENCE for your SAP security

• Different clients for access to the application server

• Administration of end users in SAP S/4HANA app-server

• Application server connects to SAP HANA with technical

account

• Only data base admins have direct access to the DB

• Same security model as traditional ABAP applications

• Anyway a redesign of roles is necessary

SAP S/4HANA ON-PREMISE AUTHORIZATIONS

XITING COMPETENCE for your SAP security

• Business Partner Approach

• Activation of Material Ledger is mandatory

• New General Ledger

• New Asset Management

• Credit Management has to be considered

• FI-CO Integration – one common table and data sources for reports (Central

Journal)

KEY CHANGES IN SAP S/4HANA

XITING COMPETENCE for your SAP security

CONSEQUENCES OF REDESIGN

SAP

S/4HANA

Changed

functions

New UI

Impact on

system

architecture

XITING COMPETENCE for your SAP security

CONSEQUENCES OF REDESIGN

SAP

S/4HANA

Changed

functions

New UI

XITING COMPETENCE for your SAP security

IMPACT ON SYSTEM ARCHITECTURE

Functions which have been available as separate instances, will be bundled in SAP S/4HANA

sProcurement

SAP

SRM

MM

pur

SAP

SLC

XITING COMPETENCE for your SAP security

New

IMPACT ON SYSTEM ARCHITECTURE

Some functions are not available anymore

Customer

Interaction Center

(CIC)

Utilities Customer

Electronic Services

(UCES)

1610: MCF

SAP CRM SAP S/4HANA

SAP Hybris

XITING COMPETENCE for your SAP security

CONSEQUENCES OF REDESIGN

SAP

S/4HANA

Changed

functions

New UI

Impact on

system

architecture

XITING COMPETENCE for your SAP security

CONSEQUENCES FOR CUSTOMERS

New

functionsCash

Management

Output-

Management

with BRFplus

Changed

functionsBusiness

Partner

Asset

Management

No longer

available

Classical Real

Estate

Management

Type of costs

XITING COMPETENCE for your SAP security

CONSEQUENCES OF REDESIGN

SAP

S/4HANA

Changed

functions

New UI

Impact on

system

architecture

XITING COMPETENCE for your SAP security

• Shift of function-based to role-based-

applications

• Central entry point is SAP Fiori-Launchpad

• 3 app types of SAP S/4HANA

• Transactional apps

• Analytical apps

• Fact-Sheets apps

• Overview of all available SAP Fiori

applications: http://www.sap.com/fiori-

apps-library

NEW UI

XITING COMPETENCE for your SAP security

TARGET: ROLE DESIGN SAP S/4HANA

Old roles

User dataOld system

Data model SAP S/4HANA

SAP S/4HANA Role design

XITING COMPETENCE for your SAP security

DEMO

QUESTIONS

XITING COMPETENCE for your SAP security

XITING ROLE DESIGNER

XITING COMPETENCE for your SAP security

XITING ROLE DESIGNER

XITING COMPETENCE for your SAP security

XITING ROLE DESIGNER

XITING COMPETENCE for your SAP security

XITING ROLE DESIGNER

XITING COMPETENCE for your SAP security

XITING ROLE DESIGNER

XITING COMPETENCE for your SAP security

XITING ROLE DESIGNER

XITING COMPETENCE for your SAP security

XITING ROLE DESIGNER

XITING COMPETENCE for your SAP security

XITING ROLE DESIGNER

XITING COMPETENCE for your SAP security

XITING ROLE DESIGNER

XITING COMPETENCE for your SAP security

XITING ROLE DESIGNER

XITING COMPETENCE for your SAP security

XITING ROLE DESIGNER

XITING COMPETENCE for your SAP security

XITING ROLE DESIGNER

XITING COMPETENCE for your SAP security

• SAP S/4HANA is an exciting new platform that comes with changes and

challenges

• SAP S/4HANA introduces a completely new data model

• That new data model is incompatible to legacy role and authorization concepts

• Migrating to SAP S/4HANA requires a redesign of the existing authorization

concept

• XAMS simplifies the migration and automates time-consuming comparison tasks

SUMMARY

XITING COMPETENCE for your SAP securityXITING COMPETENCE for your SAP security

https://www.xiting.ch/services/xams-

services/sap-s4hana-

migrationsservice/

MORE INFORMATION

XITING COMPETENCE for your SAP security

Questions?

QUESTIONS