Explore Your Options for Setting Up a Security-Related Organizational Structure
- by Massimo Manara, SAP Security Consultant, Aglea s.r.l.
- April 25, 2011
Learn how to set up a security-related organizational structure and what your options are for doing so.
An organizational structure is mainly used to manage personnel development (OM-PD), but you can also use it to manage your security concept during the assignment of authorizations. Options to consider include using an existing HR-oriented organizational structure or creating a new organizational structure that is security-oriented.
Several common problems can occur when an authorization assignment works in conjunction with an organizational structure (e.g., more than one team or department is involved). This can complicate managing the structure across your landscape and managing the same objects between different teams (i.e., HR and security). Using examples of different scenarios, I explain possible solutions to these problems.
I cover the SAP transaction codes involved in managing an organizational structure, go through the process of creating a new security-oriented structure, and show how to assign users and roles at the position level with transactions PPOM or PFCG (profile generator). After that you can distinguish the advantages or disadvantages of using a structure and understand how all stakeholders should be involved to ensure its proper maintenance.
Let’s start by looking at all the transactions that are involved in creating, maintaining, and viewing an organizational structure (Table 1).
Organizational structure transaction codes
Would you like to see this full item?