Skip to Content
avatar image
Former Member

What to do incase of new change in Org Structure while using indirect assig

Hi all,

This is my first post in this forum and I hope I will get the right answer.

We have implemented the indirect role assignement and now we are in the process to set the process incase of any change in the Org Structure.

Option 1)

Me as a security engineer I have decied to have the following process:

HR has moved an employee from position to position > HR will inform the SAP Security Engineer about the new change > SAP Security Engineer lock the user and send the new list of roles for the employee to the mananger and process team lead for approval > mananger and process team lead can either approve the request or suggest new changes > then the SAP Security Engineer will do the changes i(if any) and then unlock the user.

Option 2)

One of the Process Team Leads is suggesting that we assign the roles to the positions once, get it approved and then whatever happen we don't care.

Please let me know what is the best way, and I am sure the first option is the best but a lot of manual work.

I hope to get good response on this and I hope if there is supported document from SAP.

Add comment
10|10000 characters needed characters exceeded

  • Get RSS Feed

2 Answers

  • avatar image
    Former Member
    Feb 08, 2009 at 02:36 PM

    Option 1 sounds labour intensive. Option 2 requires better planning and testing.

    If your roles are built with the org structure in mind and the user's authority for anything other than basic common functions is from those position based roles, then you can assign the roles to the positions and let HR move the user's around as their jobs change in the org structure.

    What you should however be involved in is any changes to the org structure itself and the roles assigned to the positions and the roles themselves anyway.

    As you would be letting the system do a large part of the boring work for you, you should also monitor the usage of it from time to time.

    If you have a very large number of users and your org structure is stable and well defined (i.e. not a chaotic project structure...) then go for option 2 because it is more scalable.

    Cheers,

    Julius

    Add comment
    10|10000 characters needed characters exceeded

    • Former Member Former Member

      Agree with you. Hopefully Suleiman lets us know how it turns out.

      > Oh yes the chicken or hen... ummm.... I say the EGG 😊

      What I meant was "chicken or the egg", but vaguely remember "lots of hens lay lots of eggs" or similar having been mentioned as well... 😉

      Cheers,

      Julius

  • avatar image
    Former Member
    Feb 09, 2009 at 11:34 AM

    Thanks for your answers,

    I will think about more,

    take care

    Add comment
    10|10000 characters needed characters exceeded