Skip to Content

SoD rule maintenance when using Fiori apps

Hello everybody,
I am currently searchung for ways to convert the classical SoD Rule set (based on a combination of T-code + auth. objects) to be used in an SAP S/4 HANA enviroment where these T-codes are now replaced by Fiori apps.

From my understanding instead of object S_TCODE the usage of object S_SERVICE would be the right approach. However the content of S_SERVICE is a system-specific hashed value, which will be different for each and every system...

When using a common SoD rule set for multiple SAP systems this would require a lot of effort regarding maintenance as you would need all the system-specifc values for S_SERVICE somehow considered...

Does anybody of you know other approaches to solve this issue or is this really the only option to integrate the Fiori apps in the SoD rule set?

thank you

Johannes

Add comment
10|10000 characters needed characters exceeded

  • Get RSS Feed

4 Answers

  • Best Answer
    Jan 11 at 09:35 AM

    additional remark: please refer to 2574731 - Ruleset for S/4 HANA Risk Analysis

    Add comment
    10|10000 characters needed characters exceeded

  • Mar 27, 2017 at 07:57 AM

    Hi there,

    a correction from side after deeper investigation: the hashed values in are NOT system-dependent. However there is still the issue of these crypted values to be properly maintained in the SoD Matrix; all SoD relevant Fiori apps need to be determined and assigned/linked with the SoD Function IDs for the different business functions.
    Does the standard SoD Matrix "GLOBAL" provided with GRC 10.X already include some of these information ?

    thank you
    Johannes

    Add comment
    10|10000 characters needed characters exceeded

    • have you tried referencing USOBHASH table to convert the Service Technical Name to Hash Value that you need to maintain for S_SERVICE? It would be manual but helps you figure it out.

  • avatar image
    Former Member
    Nov 21, 2017 at 11:37 AM

    Please reply incase you have any further information on this topic.

    Add comment
    10|10000 characters needed characters exceeded

  • Jan 11 at 09:33 AM

    according to SAP the latest GRC10.1 SP20 (expected end of month 01.2018) will contain new rules covering the impact of SAP S/4 HANA applications.

    Add comment
    10|10000 characters needed characters exceeded