Academy · Security & GRC · 200 Practitioner
Role Design and Maintenance with PFCG
Covers designing and building roles with the role maintenance transaction PFCG: task- and job-based design, menus and authorization values, maintenance status and traffic lights, authorization default values in SU24, master and derived roles by organizational level, and documenting and transporting roles so they can be tested in QA and audited. Uses Contoso Motor Co.'s role rebuild during its S/4HANA conversion.
- 50 minutes
- 5 lessons + quiz
- Security & GRC Specialist
What you’ll be able to do
- Build a single role from menu content and maintain authorization values
- Use authorization default values (SU24) to improve role quality
- Design derived roles using organizational levels
- Apply naming and documentation standards
- Transport roles and verify them in QA
Sources and further reading
- Creating and Implementing an Authorization Concept · SAP Learning
- Creating Standard Roles (Working with the Role Maintenance) · SAP Learning
- Outlining Subtleties of Authorization Maintenance · SAP Learning
- Implementing a Derived Role Strategy · SAP Learning
- Investigating Installation and Upgrade Tasks (SU24 and SU25) · SAP Learning
- Transporting Authorization Components · SAP Learning
- Implementing a Composite Role Strategy · SAP Learning