I am currently searchung for ways to convert the classical SoD Rule set (based on a combination of T-code + auth. objects) to be used in an SAP S/4 HANA enviroment where these T-codes are now replaced by Fiori apps.
From my understanding instead of object S_TCODE the usage of object S_SERVICE would be the right approach. However the content of S_SERVICE is a system-specific hashed value, which will be different for each and every system...
When using a common SoD rule set for multiple SAP systems this would require a lot of effort regarding maintenance as you would need all the system-specifc values for S_SERVICE somehow considered...
Does anybody of you know other approaches to solve this issue or is this really the only option to integrate the Fiori apps in the SoD rule set?