Academy · Security & GRC · 100 Foundations
SAP Security Fundamentals: Users, Roles and Authorizations
Introduces the SAP authorization concept: users, roles, profiles, authorization objects, fields and values, and how access is checked at runtime, from the transaction start check to the checks inside programs and Fiori apps. Covers user types, least privilege and the front-end and back-end layers of SAP Fiori, with Contoso Motor Co. examples a tester can reuse when proving that roles work.
- 50 minutes
- 5 lessons + quiz
- Security & GRC Specialist, Tester / Test Analyst, Basis / Platform Administrator
What you’ll be able to do
- Describe how authorization checks work using authorization objects, fields and values
- Differentiate single roles, composite roles and profiles
- Explain user types and their purpose
- Describe the principle of least privilege in SAP
- Identify where Fiori adds front-end and back-end authorization layers
Sources and further reading
- Explaining Elements and Terminology of the ABAP Authorization Concept · SAP Learning
- Identifying Authorization Checks in the SAP System · SAP Learning
- Maintaining and Evaluating User Data · SAP Learning
- Implementing a Composite Role Strategy · SAP Learning
- Understanding the Business User Concept · SAP Learning
- Understanding SAP Fiori Architecture with SAP S/4HANA · SAP Learning
- Creating Business Roles for SAP Fiori Content · SAP Learning
- Glossary: least privilege · NIST Computer Security Resource Center