topic Re: Role Redesign Tips in Application Development and Automation Discussions

Role Redesign Tips

Former Member — Sun, 04 Oct 2009 23:42:02 GMT

Experts,

Do you have any documentation for a good Security Design and SAP recommended design. Your help in getting documentation/ideas related to good security redesign is highly appreciated.

Thanks in Advance

Re: Role Redesign Tips

jurjen_heeck — Mon, 05 Oct 2009 06:01:39 GMT

Have you had a look at the sticky thread in this forum? You'll find some usefull discussions there. I doubt a general question like yours will get a satisfying answer.

Re: Role Redesign Tips

Former Member — Mon, 05 Oct 2009 07:22:19 GMT

what do you mean good security design?

Re: Role Redesign Tips

Former Member — Mon, 05 Oct 2009 15:24:08 GMT

So a little details about the current design, we have roles which are derived on non org level values, we have a combination of positional roles, single roles, there are multiple TCODES in multiple roles, we have derived display roles, lot of custom TCODES and programs. We have 28K+ roles in the system .The design was good enough for the client 10 years ago. It has changed a lot lately and need a redesign.We were planning on redesigning and cleanup the system. Wanted to propose a design which can be continued for a while. Hence asking for expert opinions to see how we can start and proceed towards a good design.

thanks in advance

Re: Role Redesign Tips

sdipanjan — Mon, 05 Oct 2009 15:51:07 GMT

28K roles !!

Good decision of course. Please go through ASAP method of Role designing or IBM Phase Model. Just to give you one hints: Please do not use several design principle together. Use only one. Like... do not use Standalone Roles several in number(of course there should if your going to use Ref-Derive role design.

Regards,

Dipanjan

Re: Role Redesign Tips

Former Member — Mon, 05 Oct 2009 16:13:24 GMT

Can you provide me with the links or document attachments for the same

Thanks

Re: Role Redesign Tips

sdipanjan — Mon, 05 Oct 2009 16:19:25 GMT

No such Links exists as much as I know. A starting point would be SAP course ADM 940. Another source is the book SAP Authorization System - by SAP Press.

Regards,

Dipanjan

Re: Role Redesign Tips

Former Member — Mon, 05 Oct 2009 18:06:47 GMT

Try https://service.sap.com/securityguides and the FAQ sticky thread at the top of the forum page.

The SDN Wiki could be another option, but there is nothing specifically about role design there yet.

There is more to secuirty than role design...

Cheers,

Julius