Academy · Security & GRC · 200 Practitioner
Segregation of Duties and Access Risk Analysis
Explains segregation of duties (SoD) and critical access in SAP S/4HANA: why conflicting duties enable fraud and error, how a rule set expresses risks as functions, actions and permissions, how to read an access risk analysis at user and role level, when to remediate and when to mitigate, and how to build SoD checks into role design and testing so conflicts never reach production.
- 49 minutes
- 5 lessons + quiz
- Security & GRC Specialist, Test Lead / Test Manager, Program / PMO Lead
What you’ll be able to do
- Explain SoD and critical access risks with SAP examples
- Describe rule set structure: risks, functions, actions and permissions
- Interpret an access risk analysis result
- Choose remediation or mitigation for a conflict
- Include SoD checks in role design and testing
Sources and further reading
- Describing SAP Access Control (lesson) · SAP Learning
- Introducing SAP Access Governance (lesson) · SAP Learning
- Describing SAP Identity and Access Governance (lesson) · SAP Learning
- GRC300: SAP Access Control 12.0 Implementation and Configuration · SAP Training
- Implementing User and Authorization Management Strategies (lesson: separation of duties in administration) · SAP Learning
- Understanding the Differences Between SAP Access Control and SAP Cloud Identity Access Governance · SAP Learning