Lukardi > Case Studies > Construction industry > Reorganization of SAP SoD authority
CONSTRUCTION INDUSTRY
SAP Authorization and SoD Reorganization
SAP Security

CONSTRUCTION INDUSTRY
Customer Profile
A leading cement producer in Poland, part of an international group, one of the largest construction conglomerates in the world. The company specializes in the production of high-quality cements used in a variety of construction projects, from infrastructure to residential building. The company focuses on innovation, sustainable development, and minimizing environmental impact, while ensuring the highest standards of customer service.
Challenges
System security risks
Too many permissions for some users
Company processes hampered by bureaucracy
Orders related to cyclical audits
Customer Expectations
Mandatory audits (external and internal)
In the SAP area: controls, control documentation, paper tickets
System and vendor selection: reliable, professional, accessible
Searching for the appropriate system: SAP GRC, external system integrated with SAP, SAST - system embedded within SAP.
Lukardi is available to us
and we can consult if needed. They conducted a series of training sessions for us. Currently, the system is working for us (Segregation of Duties), and we know how to configure it ourselves.
IT Manager / CIO
Key Project Information
Project Stages
Scope of the project
and schedule
Remote deployment
(COVID)
- SAP Standard
- SAP Certificate
- Manufacturer Transportation
- SoD Matrix
Implemented Modules
SAST Super User Management - Privileged access management, emergency user
SAST Authorization Management - Segregation of Duties.
SAST Risk&Compliance Management - Periodic audits, risk management
SAST User Access Management - Workflow of granting authorizations in SAP.
Project Effects
Firefighter
SOX control
In the system a simply defined process
Monitoring of used transactions during access
Segregation of Duties
Authorizations - access to transactions and objects
Multiple authorizations provided by the manufacturer
Ability to check the system for authorization access
Business Processes
Authorization collection
SoD matrix design element
Roles and Statistics
Roles:
checking roles for authorization access
checking roles that cause SoD conflicts
Statistics:
sets of reports showing usage,
roles, transactions by users over a given period of time.
helpful for possible access optimization.
SoD Matrix
conflicts in existing processes,
A labor-intensive implementation process,
necessary involvement of business,
maintenance of the matrix by the business,
creating your own matrices.

Risk management and compliance
defining risks
mitigation of risks
control
support for periodic review of entitlements. Specifically privileged by defining Policies.
policies contain a set of Checks (Checks) associated with authorizations.
periodically, automatically run generate full information about assigned critical privileges to users.
the provider delivers its policies, which can be used to cross-check user permissions in the system.
Workflow of granting rights in SAP
When assigning rights, the system automatically checks for SoD conflicts based on the default matrix.
Key User
Application
Automation
SoD analysis
Manager, SoD
Acceptance
User Admin
Implementation
Workflow for managing user privileges in SAP.
- requesting access
- requesting a user
- self-service portal
- acceptance of authorization risks (SoD)
Your Needs
Our Support
Lets Talk!
Your needs, our support.
Lets Talk!
Your needs, our support. Let's talk