BUSINESS SOLUTIONS
WORKFLOW AND ARCHIVING
SECURITY
E-COMMERCE
MARKETING
ANALYTICSTRAINING: SAP SECURITY
Creating SAP Entitlement Concepts
Build a secure, compliant and scalable entitlement model for your organization
Training description
An effectively built SAP Entitlement Concept is the foundation for data security, process continuity and audit compliance. Our training courses are designed for organizations that want to clean up or completely rebuild their SAP entitlements - based on a proven, comprehensive concept template. During the workshop, participants receive practical tips, examples, ready-made materials and expert support to develop a complete, auditable entitlement concept on their own.
About the speaker
Tomasz Jurgielewicz
Head of Security Development
It implements comprehensive security and license cost optimization projects, focusing on areas such as:
- Identification of authorization conflicts and reorganization of authorization,
- SAP vulnerability identification,
- Integration of SIEM solutions with SAP,
- SAP license optimization.
Key information
Who is the training intended for?
We target training to:
- SAP authorization teams and administrators
- Data Owners and Key Users
- IT and security managers
- Persons responsible for compliance, audit and internal control
- SAP / migration / transformation S/4HANA project leaders
No programming knowledge is required - the training focuses on understanding SAP security logic and building entitlement concepts in practice
Training objectives
Upon completion, the participant is able to:
Independently develop a complete Entitlement Concept in accordance with best practices and audit requirements.
Understand the structure of the template and how to adapt it to the organization.
Design reference, process and aggregate roles.
Properly define data owners, division of responsibilities and SoD rules.
Define user and role management processes.
Describe and classify critical privileges, authorization objects, and access control.
Make the SAP area organized enough so that changes can be implemented quickly and maintained later.
Scope of training
The training covers all the key elements of the template, including:
1. assumptions and foundations of the concept
- purpose of creating the concept of entitlements
- Data protection, SoD and the 4 eyes principle
- responsibility and role of data owners
2. architecture framework and authority structure
- SAP systems structure (DEV / TEST / PROD).
- limitations of the concept and control mechanisms
- Linking roles to business processes
3. defining authorization elements
- authorization objects
- object classes
- transactions, profiles and role structure
- organizational levels and OrgSets
4. role design by template
- reference roles
- process roles
- collective roles (basic / stand / special)
5. user and role management
- the process of creating, modifying and blocking users
- division of responsibilities (authorization team 1/2/3, helpdesk)
- application handling and risk analysis
6 SoD policy and critical powers
- identification of conflicts
- examples of conflicts and compensatory controls
- working with SoD matrix
7. system parameters and security aspects
- login and password control
- authorization control (SU24, SU53, ST01)
- logging of changes, tables, system parameters
8 Documentation and verification of the concept
- rules for documenting roles
- annual reviews
- audit verifications
- concept update and change management
Why is it worth it?
We work on a complete template, used in large organizations
The training is conducted by practitioners - SAP security specialists
The participant receives ready-made tools (matrices, checklists, templates)
Ability to work on your own examples and real cases
Full preparation for audits (internal, external, SOX).
Training format
Onsite workshops - 1 or 2 days
Design workshop in the organization - preparing the concept together with the team
1:1 counseling sessions
The end result for your organization
After the training, participants are able to prepare a complete, structured and auditable Entitlement Concept - fully compliant with the standard presented in the template.
It is an ideal base for:
Reorganization of powers,
implementations of new systems,
S/4HANA migration,
Ordering security and access structure,
Let's talk about the details of training for your company
Your needs, our support.
Your Digital Transformation?
Your needs, our support. Let's talk