SAP Security: Moving to SU24 approach from manual authorization maintenance

[MadhuSAP1]

Hi All,

Need guidance on below question which is very critical from my project point of view

Currently, we are not using SU24 approach in our project, means we don’t add tcodes in menu tab in role and adding tcodes in S_TCODE and only required authorization objects are added in role manually.

Now, we are going to convert our system into S/4 HANA and apart from this our client also want to convert roles into SU24 approach.

Thus, I wanted to know

1. What activities need to be performed from SU25 and SU24 tcodes point of view
2. Precautionary steps need to be performed
3. Activities from role changes point of view

   Please share your suggestions or any documentations to perform these activities.

   Thanks

   Madhu K