Application Development Discussions
Join the discussions or start your own on all things application development, including tools and APIs, programming models, and keeping your skills sharp.
cancel
Showing results for 
Search instead for 
Did you mean: 

Role Redesign Tips

Former Member
0 Kudos

Experts,

Do you have any documentation for a good Security Design and SAP recommended design. Your help in getting documentation/ideas related to good security redesign is highly appreciated.

Thanks in Advance

1 ACCEPTED SOLUTION

Former Member
0 Kudos

Try https://service.sap.com/securityguides and the FAQ sticky thread at the top of the forum page.

The SDN Wiki could be another option, but there is nothing specifically about role design there yet.

There is more to secuirty than role design...

Cheers,

Julius

7 REPLIES 7

jurjen_heeck
Active Contributor
0 Kudos

Have you had a look at the sticky thread in this forum? You'll find some usefull discussions there. I doubt a general question like yours will get a satisfying answer.

Former Member
0 Kudos

Hi

what do you mean good security design?

0 Kudos

So a little details about the current design, we have roles which are derived on non org level values, we have a combination of positional roles, single roles, there are multiple TCODES in multiple roles, we have derived display roles, lot of custom TCODES and programs. We have 28K+ roles in the system .The design was good enough for the client 10 years ago. It has changed a lot lately and need a redesign.We were planning on redesigning and cleanup the system. Wanted to propose a design which can be continued for a while. Hence asking for expert opinions to see how we can start and proceed towards a good design.

thanks in advance

0 Kudos

28K roles !!

Good decision of course. Please go through ASAP method of Role designing or IBM Phase Model. Just to give you one hints: Please do not use several design principle together. Use only one. Like... do not use Standalone Roles several in number(of course there should if your going to use Ref-Derive role design.

Regards,

Dipanjan

0 Kudos

Can you provide me with the links or document attachments for the same

Thanks

0 Kudos

No such Links exists as much as I know. A starting point would be SAP course ADM 940. Another source is the book SAP Authorization System - by SAP Press.

Regards,

Dipanjan

Former Member
0 Kudos

Try https://service.sap.com/securityguides and the FAQ sticky thread at the top of the forum page.

The SDN Wiki could be another option, but there is nothing specifically about role design there yet.

There is more to secuirty than role design...

Cheers,

Julius