SAP Solution Manager Authorization ConceptMotivation and Support
SAP Active Global Support
© 2011 SAP AG. All rights reserved. 2
Agenda
Motivation for Authorization Concept
Most Customer Pain Points
Motivation for
Authorization Concept
© 2011 SAP AG. All rights reserved. 4
Primary Focus
In order to use all functionality in SAP Solution Manager it is important to setup and
manage and authorization concept for SAP Solution Manager and to define the
responsibilities correctly.
The most customer already have a suitable HR Org structure and want to use it in
SAP Solution Manager.
How do customers reflect their
IT organization to SAP Solution Manager?
© 2011 SAP AG. All rights reserved. 5
Authorization and Security ConceptSAP Solution Manager as Central Component
SAP Solution Manager is the central component in customer’s system landscape.
Productive SAP System (in terms of “managed systems”) are connected to SAP
Solution Manager. This makes SAP Solution Manager to an important and even
critical component in a productive system landscape.
© 2011 SAP AG. All rights reserved. 6
The main risks on SAP Solution Manager from security perspective are:
SAP Solution Manager system can be damaged
– by unauthorized change of master data
– by unauthorized customizing or configuration change
SAP Solution Manager is misused to illegally access managed systems
– due to missing authorization concept
(authorizations within SAP Solution Manager)
– due to missing security concept
(communication around SAP Solution Manager)
Authorization and Security ConceptRisks with SAP Solution Manager
© 2011 SAP AG. All rights reserved. 7
Motivation to set up an Authorization ConceptSensitivity of central Master Data
Important master data (solutions, systems, projects, etc) for your IT processes are
stored and provided by the SAP Solution Manager. If this Master Data is changed it
could have an significant impact at across all configured scenarios.
for instance the scenario Business Process Monitoring will not work correctly if the solution
for the specific User has been changed/deselected.
Most Customer Pain Points
© 2011 SAP AG. All rights reserved. 9
Most Customer Pain PointsExperience
Customers or the responsible people in the IT organization do not have
enough knowledge or project experience for security or authorization concept.
Question: How to establish a suitable security or
authorization concept for SAP Solution Manager?
© 2011 SAP AG. All rights reserved. 10
Most Customer Pain PointsSAP Solution Manager Authorization Concept
Missing understanding in SAP Solution Manager Authorization Concept
SAP Solution Manager scenarios and technical integration (on authorization level)
Knowledge about Authorization Objects (Authorization Details)
– Which impact does the object have?
– Which scenario is it used for?
SAP Standard delivered ABAP Roles
– Which ABAP roles are required?
– How to define ABAP roles from standard?
SAP Solution Manager Roles Concept
– What does Workcenter Navigation Role mean?
– How can I separate responsibilities by roles?
© 2011 SAP AG. All rights reserved. 11
Most Customer Pain PointsDocumentation
Absence of documentation (during authorization concept project)
© 2011 SAP AG. All rights reserved. 12
Most Customer Pain PointsInformation and Documentation
Often customers are also lost in finding the correct and required information
when establishing the authorization concept.
Support by SAP
© 2011 SAP AG. All rights reserved. 14
AGS Support for Customers
Which support can SAP offer in security and authorization concept?
Complete Concept by SAP
SAP only supports in the Conception
Customer IT
Organization
Collaboration between
SAP and customers
SAP can support along the above
mentioned pain points
© 2011 SAP AG. All rights reserved. 15
AGS Support for CustomersIn which areas can AGS support?
Authorization Concept
Project Approach: Analysis, Business Blueprint, Implementation, Testing, Documentation
SAP Solution Manager scenarios and technical integration
SAP Solution Manager Roles Concept (Workcenter Roles, Functional Roles, …)
SAP Standard delivered ABAP Roles
Authorization Objects in detail
Security Concept in SAP Solution Manager environment
SAP Standards and Technical Users
Connections between SAP Solution Manager and Managed Systems
Landscape and Infrastructure questions