XITING COMPETENCE for your SAP security
How to simplify the migration of
authorizations to SAP S/4HANA®
JENNIFER SCHMIDER, XITING AG
XITING COMPETENCE for your SAP securityXITING COMPETENCE for your SAP security
AGENDA
1About Xiting
2Introduction
3Role Redesign
4XAMS Demo
XITING COMPETENCE for your SAP securityXITING COMPETENCE for your SAP security
ABOUT XITING
Founded 2008 by SAP Security Experts
Headquartered in Switzerland
50 Employees
Offices in Germany, Switzerland, England and United States
All Senior Consultants are also SAP Trainers
XITING COMPETENCE for your SAP security
S/4HANA – A NEW PRODUCT LINE
• Only one solution for each requirement
• Reduction of application and transactions
• Update and optimization of database structure
SAP ERP
SAP S/4HANA
New implementation
Principle of One
XITING COMPETENCE for your SAP security
SAP S/4HANA EM AND CLOUD SOLUTIONS
SAP Ariba
SAP Fieldglass
Concur
SAP Hybris SAP SuccessFactors
SAP Integrated Business PlanningSourcing and Procurement
Supply Chain
Finance
manufacturing
Research and Development
Asset Management
SAP S/4HANA Core
Service
Sales
Marketing
XITING COMPETENCE for your SAP security
• Different clients for access to the application server
• Administration of end users in SAP S/4HANA app-server
• Application server connects to SAP HANA with technical
account
• Only data base admins have direct access to the DB
• Same security model as traditional ABAP applications
• Anyway a redesign of roles is necessary
SAP S/4HANA ON-PREMISE AUTHORIZATIONS
XITING COMPETENCE for your SAP security
• Business Partner Approach
• Activation of Material Ledger is mandatory
• New General Ledger
• New Asset Management
• Credit Management has to be considered
• FI-CO Integration – one common table and data sources for reports (Central
Journal)
KEY CHANGES IN SAP S/4HANA
XITING COMPETENCE for your SAP security
CONSEQUENCES OF REDESIGN
SAP
S/4HANA
Changed
functions
New UI
Impact on
system
architecture
XITING COMPETENCE for your SAP security
CONSEQUENCES OF REDESIGN
SAP
S/4HANA
Changed
functions
New UI
XITING COMPETENCE for your SAP security
IMPACT ON SYSTEM ARCHITECTURE
Functions which have been available as separate instances, will be bundled in SAP S/4HANA
sProcurement
SAP
SRM
MM
pur
SAP
SLC
XITING COMPETENCE for your SAP security
New
IMPACT ON SYSTEM ARCHITECTURE
Some functions are not available anymore
Customer
Interaction Center
(CIC)
Utilities Customer
Electronic Services
(UCES)
1610: MCF
SAP CRM SAP S/4HANA
SAP Hybris
XITING COMPETENCE for your SAP security
CONSEQUENCES OF REDESIGN
SAP
S/4HANA
Changed
functions
New UI
Impact on
system
architecture
XITING COMPETENCE for your SAP security
CONSEQUENCES FOR CUSTOMERS
New
functionsCash
Management
Output-
Management
with BRFplus
Changed
functionsBusiness
Partner
Asset
Management
No longer
available
Classical Real
Estate
Management
Type of costs
XITING COMPETENCE for your SAP security
CONSEQUENCES OF REDESIGN
SAP
S/4HANA
Changed
functions
New UI
Impact on
system
architecture
XITING COMPETENCE for your SAP security
• Shift of function-based to role-based-
applications
• Central entry point is SAP Fiori-Launchpad
• 3 app types of SAP S/4HANA
• Transactional apps
• Analytical apps
• Fact-Sheets apps
• Overview of all available SAP Fiori
applications: http://www.sap.com/fiori-
apps-library
NEW UI
XITING COMPETENCE for your SAP security
TARGET: ROLE DESIGN SAP S/4HANA
Old roles
User dataOld system
Data model SAP S/4HANA
SAP S/4HANA Role design
XITING COMPETENCE for your SAP security
DEMO
QUESTIONS
XITING COMPETENCE for your SAP security
XITING ROLE DESIGNER
XITING COMPETENCE for your SAP security
XITING ROLE DESIGNER
XITING COMPETENCE for your SAP security
XITING ROLE DESIGNER
XITING COMPETENCE for your SAP security
XITING ROLE DESIGNER
XITING COMPETENCE for your SAP security
XITING ROLE DESIGNER
XITING COMPETENCE for your SAP security
XITING ROLE DESIGNER
XITING COMPETENCE for your SAP security
XITING ROLE DESIGNER
XITING COMPETENCE for your SAP security
XITING ROLE DESIGNER
XITING COMPETENCE for your SAP security
XITING ROLE DESIGNER
XITING COMPETENCE for your SAP security
XITING ROLE DESIGNER
XITING COMPETENCE for your SAP security
XITING ROLE DESIGNER
XITING COMPETENCE for your SAP security
XITING ROLE DESIGNER
XITING COMPETENCE for your SAP security
• SAP S/4HANA is an exciting new platform that comes with changes and
challenges
• SAP S/4HANA introduces a completely new data model
• That new data model is incompatible to legacy role and authorization concepts
• Migrating to SAP S/4HANA requires a redesign of the existing authorization
concept
• XAMS simplifies the migration and automates time-consuming comparison tasks
SUMMARY
XITING COMPETENCE for your SAP securityXITING COMPETENCE for your SAP security
https://www.xiting.ch/services/xams-
services/sap-s4hana-
migrationsservice/
MORE INFORMATION
XITING COMPETENCE for your SAP security
Questions?
QUESTIONS
