SAP Solution Manager Authorization ConceptMotivation and Support

SAP Active Global Support

© 2011 SAP AG. All rights reserved. 2

Agenda

Motivation for Authorization Concept

Most Customer Pain Points

Motivation for

Authorization Concept

© 2011 SAP AG. All rights reserved. 4

Primary Focus

In order to use all functionality in SAP Solution Manager it is important to setup and

manage and authorization concept for SAP Solution Manager and to define the

responsibilities correctly.

The most customer already have a suitable HR Org structure and want to use it in

SAP Solution Manager.

How do customers reflect their

IT organization to SAP Solution Manager?

© 2011 SAP AG. All rights reserved. 5

Authorization and Security ConceptSAP Solution Manager as Central Component

SAP Solution Manager is the central component in customer’s system landscape.

Productive SAP System (in terms of “managed systems”) are connected to SAP

Solution Manager. This makes SAP Solution Manager to an important and even

critical component in a productive system landscape.

© 2011 SAP AG. All rights reserved. 6

The main risks on SAP Solution Manager from security perspective are:

SAP Solution Manager system can be damaged

– by unauthorized change of master data

– by unauthorized customizing or configuration change

SAP Solution Manager is misused to illegally access managed systems

– due to missing authorization concept

(authorizations within SAP Solution Manager)

– due to missing security concept

(communication around SAP Solution Manager)

Authorization and Security ConceptRisks with SAP Solution Manager

© 2011 SAP AG. All rights reserved. 7

Motivation to set up an Authorization ConceptSensitivity of central Master Data

Important master data (solutions, systems, projects, etc) for your IT processes are

stored and provided by the SAP Solution Manager. If this Master Data is changed it

could have an significant impact at across all configured scenarios.

for instance the scenario Business Process Monitoring will not work correctly if the solution

for the specific User has been changed/deselected.

Most Customer Pain Points

© 2011 SAP AG. All rights reserved. 9

Most Customer Pain PointsExperience

Customers or the responsible people in the IT organization do not have

enough knowledge or project experience for security or authorization concept.

Question: How to establish a suitable security or

authorization concept for SAP Solution Manager?

© 2011 SAP AG. All rights reserved. 10

Most Customer Pain PointsSAP Solution Manager Authorization Concept

Missing understanding in SAP Solution Manager Authorization Concept

SAP Solution Manager scenarios and technical integration (on authorization level)

Knowledge about Authorization Objects (Authorization Details)

– Which impact does the object have?

– Which scenario is it used for?

SAP Standard delivered ABAP Roles

– Which ABAP roles are required?

– How to define ABAP roles from standard?

SAP Solution Manager Roles Concept

– What does Workcenter Navigation Role mean?

– How can I separate responsibilities by roles?

© 2011 SAP AG. All rights reserved. 11

Most Customer Pain PointsDocumentation

Absence of documentation (during authorization concept project)

© 2011 SAP AG. All rights reserved. 12

Most Customer Pain PointsInformation and Documentation

Often customers are also lost in finding the correct and required information

when establishing the authorization concept.

Support by SAP

© 2011 SAP AG. All rights reserved. 14

AGS Support for Customers

Which support can SAP offer in security and authorization concept?

Complete Concept by SAP

SAP only supports in the Conception

Customer IT

Organization

Collaboration between

SAP and customers

SAP can support along the above

mentioned pain points

© 2011 SAP AG. All rights reserved. 15

AGS Support for CustomersIn which areas can AGS support?

Authorization Concept

Project Approach: Analysis, Business Blueprint, Implementation, Testing, Documentation

SAP Solution Manager scenarios and technical integration

SAP Solution Manager Roles Concept (Workcenter Roles, Functional Roles, …)

SAP Standard delivered ABAP Roles

Authorization Objects in detail

Security Concept in SAP Solution Manager environment

SAP Standards and Technical Users

Connections between SAP Solution Manager and Managed Systems

Landscape and Infrastructure questions