Pfcg roles after ecc to S/4 Hana conversion

[former_member604690]

Hello All,

Currently I am working in to a ecc to S/4 Hana conversion project. I do have few queries from Security perspective. Appreciate your prompt response on the same

1. What will be the impact on the ecc roles after conversion? How to check the impact? Will SU25 provide me all impact changes? Is it mandatory to run SU25 after conversion?

2. I believe I would need to build additional add on roles for Fiori app access and keep my ecc roles as it is. Kindly let me know if my understanding is correct.

Regards,

Vijay

[former_member604916]

Hi Vijay,

Please find my response below

1. What will be the impact on the ecc roles after conversion?

Impact will be on Programs, Tables, Transactions and authorization Objects. so the relative roles will get affected. To know this impact, SAP is releasing Simplification items for every releases, Try simplicifaction item check tool

https://launchpad.support.sap.com/#/sic/

How to check the impact?

Impact can be analyzed from the SU25 steps output .

Will SU25 provide me all impact changes?

Yes, it will provide you the all impacted changes with respect to Transaction and Roles. You can also check the Object level changes via table USOBT_CD and USOBX_CD

Is it mandatory to run SU25 after conversion?

Yes, it is mandatory as per SAP Best practices, you may incur functionality misbehave or not working and many errors during role maintenance, if we didnt perform SU25 after conversion or upgrade

2. I believe I would need to build additional add on roles for Fiori app access and keep my ecc roles as it is. Kindly let me know if my understanding is correct.

Yes , for fiori apps you need to build separate roles. Meanwhile you also need to update the S4H roles accordingly with respective Services required for the fiori App. you will also need to build additional roles for establishing connection between systems and some basic authorization for Launchpad (For Central Hub Concepts)

Regards,

Shanthakumar Kuppusamy

[former_member5584]

Hi Vijay,

Good day,

Answer for your questions

1. What will be the impact on the ecc roles after conversion? How to check the impact? Will SU25 provide me all impact changes? Is it mandatory to run SU25 after conversion?

Yes, we need to perform Pre & Post conversion active as what we do normally as part of Upgrade, bit change in process such us

1. Need to refer simplification list before we start the actual conversion(.https://launchpad.support.sap.com/#/sic/)
2. Then perform Pre-conversion/upgrade steps
3. As part of conversion guide step T7(cross app), step- 4.3 perform the Post conversion/upgrade steps

4. 

5. incase of any inconsistency in standard vs custom tables(USOBT,USOBT_C,USOBX & USOBX_C) even after SU25 steps then perform expert mode sync - Refer Note: 440231

2. I believe I would need to build additional add on roles for Fiori app access and keep my ecc roles as it is.

Yes, we need to build roles but it varies based on embedded or central hub concept of Front end server setup.

Thanks & regards

Narayanan

[Harel]

Hi Vijay,

Did you follow SAP NOTE 440231?

BR

Harel