Business Roles & Technical Roles

[former_member283791]

Colleagues,

With the whole process of creating Business Roles for the implementation of IdM we gotten to thinking and started looking for a best practice when it comes to creating and managing business roles aswell as technical (SAP, ABAP) roles.

Anyone have any good documentation in this regard?

Thx in advance,

Jonathan

[Former Member]

Hi Jonathan,

I don't know if this helps you in any way but have you already seen this tutorial/document on working with Roles and Privileges within the Identity Center?

[http://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/10bf8526-f8c9-2b10-fe9f-c6724dee04ec]

Does this help at all? or were you looking for something else?

Cheers!

Sandeep

[former_member283791]

Hey Sandeep,

It's a good document but not exactly what I was looking for.

Concerning the Business Roles I was looking for more of a functional (business) view point on the whole business role thing. Something I could use from a technical standpoint to help my customer in the business role creation process.

Concerning the Technical Roles (ABAP authorisations). We have the situation here at the moment that we're dealing with 14 years or role creation in the SAP systems with no guidelines what so ever. So to put it gently: it's a mess. And I was wondering if there was any best practice document out there describing the "best practice" of creating technical roles, handling authorisations in SAP etc.

I realise that the second question doesn't quite fit in this forum but I'm guessing here would be the closest match for the question.

Thx.

[Former Member]

You could for example have the idea:

Composite role = Business role

So people request these roles. The Business role for example has the same technical roles on TEST and PROD.

This takes not too much time, as you already have your composite roles.

Or you create compelty new roles, which are based on your processes. For example "Purchaser EU", which contains several technical roles, maybe also over different systems (ERP, CRM ...)

This of course takes a lot of time and you will need to work togheter with the people from the business.

Its cleaner, but can take much time.

[Former Member]

Hey Jonathan,

I unfortunately don't know of any comprehensive documents that go into the subject of Business / Technical role design.

I did however find a(n) (old) high level article talking of a few guidelines for role design:

[http://www.sapdesignguild.org/editions/edition1/user_roles.asp]

I also found a whitepaper that goes into organization structure / roles with relation to an SAP Business Blueprint (Pg 5):

[http://www.abs-europe.com/assets/Image/FAQ/What_is_an_SAP_Business_Blueprint.pdf]

Cheers!

Sandeep