SAP Solution Manager Authorization Concept Motivation and Support. SAP Active Global Support

Transcription

1 SAP Solution Manager Authorization Concept Motivation and Support SAP Active Global Support

2 Agenda Motivation for Authorization Concept Most Customer Pain Points 2011 SAP AG. All rights reserved. 2

3 Motivation for Authorization Concept

4 Primary Focus In order to use all functionality in SAP Solution Manager it is important to setup and manage and authorization concept for SAP Solution Manager and to define the responsibilities correctly. The most customer already have a suitable HR Org structure and want to use it in SAP Solution Manager. How do customers reflect their IT organization to SAP Solution Manager? 2011 SAP AG. All rights reserved. 4

5 Authorization and Security Concept SAP Solution Manager as Central Component SAP Solution Manager is the central component in customer s system landscape. Productive SAP System (in terms of managed systems ) are connected to SAP Solution Manager. This makes SAP Solution Manager to an important and even critical component in a productive system landscape SAP AG. All rights reserved. 5

6 Authorization and Security Concept Risks with SAP Solution Manager The main risks on SAP Solution Manager from security perspective are: SAP Solution Manager system can be damaged by unauthorized change of master data by unauthorized customizing or configuration change SAP Solution Manager is misused to illegally access managed systems due to missing authorization concept (authorizations within SAP Solution Manager) due to missing security concept (communication around SAP Solution Manager) 2011 SAP AG. All rights reserved. 6

7 Motivation to set up an Authorization Concept Sensitivity of central Master Data Important master data (solutions, systems, projects, etc) for your IT processes are stored and provided by the SAP Solution Manager. If this Master Data is changed it could have an significant impact at across all configured scenarios. for instance the scenario Business Process Monitoring will not work correctly if the solution for the specific User has been changed/deselected SAP AG. All rights reserved. 7

8 Most Customer Pain Points

9 Most Customer Pain Points Experience Customers or the responsible people in the IT organization do not have enough knowledge or project experience for security or authorization concept. Question: How to establish a suitable security or authorization concept for SAP Solution Manager? 2011 SAP AG. All rights reserved. 9

10 Most Customer Pain Points SAP Solution Manager Authorization Concept Missing understanding in SAP Solution Manager Authorization Concept SAP Solution Manager scenarios and technical integration (on authorization level) Knowledge about Authorization Objects (Authorization Details) Which impact does the object have? Which scenario is it used for? SAP Standard delivered ABAP Roles Which ABAP roles are required? How to define ABAP roles from standard? SAP Solution Manager Roles Concept What does Workcenter Navigation Role mean? How can I separate responsibilities by roles? 2011 SAP AG. All rights reserved. 10

11 Most Customer Pain Points Documentation Absence of documentation (during authorization concept project) 2011 SAP AG. All rights reserved. 11

12 Most Customer Pain Points Information and Documentation Often customers are also lost in finding the correct and required information when establishing the authorization concept SAP AG. All rights reserved. 12

13 Support by SAP

14 AGS Support for Customers Which support can SAP offer in security and authorization concept? Complete Concept by SAP SAP only supports in the Conception Collaboration between SAP and customers Customer IT Organization SAP can support along the above mentioned pain points 2011 SAP AG. All rights reserved. 14

15 AGS Support for Customers In which areas can AGS support? Authorization Concept Project Approach: Analysis, Business Blueprint, Implementation, Testing, Documentation SAP Solution Manager scenarios and technical integration SAP Solution Manager Roles Concept (Workcenter Roles, Functional Roles, ) SAP Standard delivered ABAP Roles Authorization Objects in detail Security Concept in SAP Solution Manager environment SAP Standards and Technical Users Connections between SAP Solution Manager and Managed Systems Landscape and Infrastructure questions 2011 SAP AG. All rights reserved. 15