Best Practices and Scenarios for Working with Overall Authorizations

  • by Tero Tukiainen, SAP Authorizations Consultant, SAPORT Consulting
  • March 30, 2010
Learn some best practices and scenarios for building a solid authorizations concept. See which combination of roles and structural authorizations is best for your company.
Key Concept
Overall authorizations are the combination of different types of roles and use of structural authorizations. For each specific need, a company needs to choose the implementation of roles and structural authorization profiles to authorize users with overall authorizations. Although it is impossible that a specific type of role fit every company, you can define the scenario to make a decision on what to implement based on your company’s needs. While the roles provide some different options, the use of structural authorizations is quite straightforward. Either you use them or you do not. With the implementation of organizational management it is advisable to use the structural authorizations to restrict the users’ authorizations.

When building a solid authorizations concept, it is good to know some best practices and scenarios for each alternative for implementation of the overall authorizations. This is especially true for roles, but it is also important to know the options for structural authorizations with the implementation of the SAP ERP HCM module. Each type of role has its own pros and cons, and therefore it is impossible for me to tell which of the options is best. Instead, you can use this article as a guide for deciding which option would be best based on your own company-specific requirements.

Tero Tukiainen

Tero Tukiainen is the managing partner of SAPORT Consulting Inc, which he founded in 2009. He is an SAP HR-certified consultant who has specialized in SAP security and authorizations since 2000. Tero has spoken at SAP HR conferences in both Europe and the US since 2005.

See more by this author


No comments have been submitted on this article. 

Please log in to post a comment.

To learn more about subscription access to premium content, click here.