Approach for SAP Security in S/4 HANA

[Former Member]

Hello Gurus,

We have a requirement in our project to implement S/4 HANA and implement SAP Security.

I have read the SAP Security guide for S/4 HANA, I would like to know what is the best approach to impelment SAP Securuty at application layer and at database layer.

Since this will be a system conversion, how to process and what important steps we need to take care.

[former_member5584]

HI Pooja,

Good Day,

Are you looking for S4Hana implementation approach from SAP security point of view or its S4Hana conversion approach?

[former_member5584 · Accepted solution]

If is S4Hana implementation - Then we need to follow Activate methodology approach

[former_member604916 · Accepted solution]

Excellent explanation.. hats Off Guru..

[chris_wake · Accepted solution]

Great information.

[sreekanth_sunkara · Accepted solution]

Thank you Narayanan, What about S/4 Hana Conversion from Security perspective? Can we still use the old PFCG roles or do we have build new security roles as lot of t-codes are obsolete in S/4 HANA and apps are based on the Business Process, Sub-process in S/4 Hana.

Thanks,

Sri.

[former_member371029 · Accepted solution]

"sri s

Thank you Narayanan, What about S/4 Hana Conversion from Security perspective? Can we still use the old PFCG roles or do we have build new security roles as lot of t-codes are obsolete in S/4 HANA and apps are based on the Business Process, Sub-process in S/4 Hana."

You can use the old roles and adapt later. Obviously, new stuff is not in the old roles, so you'll have to create roles or adjust existing ones for the new stuff.

Hope it helps.

Best regards

[former_member5584]

Hi JC,

Good day,

please read my other blog, where i have explain on S/4Hana conversion impact and work for SAP security

https://answers.sap.com/questions/12648121/sap-security-steps-needed-for-sap-ecc-to-s4hana-co.html?c...

Yes, still we can keep old roles but need to adjust existing roles with new changes to support existing functionality and if need you can add new functionality T-codes.

For FIORI Apps, is based on landscape your going to setup , if central hub, then you need Gateway role in Front end system and business suite role in back end system, if is embedded then you need to add your gateway & business suite in existing business role as per Business process or sub-process.

Thanks & regards

Narayanan

[sreekanth_sunkara]

Thank you so much Narayanan.

Thanks,

Sri

[former_member604916]

Excellent Sir..