SAP Authorization System: Design and Implementation of Authorization Concepts for SAP R/3 and SAP Enterprise Portal

by IBM Business Consulting GmbH and IBM Business Consulting Services

Book Overview

This practical guide offers you a detailed introduction to all the essential aspects of SAP Authorization management, as well as the necessary organizational and technical structures and tools. Take advantage of a proven Phase Model to help you navigate through all of the stages leading up to the implementation and deployment of an authorization concept, from the procedural steps required to design the concept, to the production phase, and lastly, to the supervision phase. In addition, you'll quickly learn how to set up authorization via the SAP R/3 Profile Generator.

This book provides in-depth coverage of the special security requirements of the SAP Enterprise Portal as well as the SAP R/3 standards and infrastructure, which serve as a framework to develop and support SAP Authorization concepts.

Highlights include:
- Special features of the SAP Authorization System
- Fundamental principles of the SAP Authorization concept
- Internal Control System (ICS)
- Best practices for the design phase
- Best practices for the production phase
- Testing of Authorization concepts
- Audit Information System (AIS)
- SAP Enterprise Portal: components, access control and administration, integration, and more

The Authors
This book was written by a team of highly experienced SAP consultants from IBM Business Consulting Services GmbH. The authors have honed their expertise with many years of experience with SAP technology, especially with regard to the implementation of SAP Authorization concepts.

• Format: Hardcover
• Language: English
• ISBN: 1592290167
• ISBN13: 9781592290161
• Release Date: August 2003
• Publisher: SAP Press
• Length: 281 Pages
• Weight: 1.30 lbs.
• Dimensions: 6.6" x 9.4"

Customer Reviews

Excellent overview of implementing "What It Takes" to PASS an AUDIT of Enterprise Data Protections

Excellent introduction in only 200 pages by defining specific authorization step(s) for both individual roles including executives & special group roles.. . Chapter 1 Page 27 addresses pivotal questions corporate Controller & Auditor's will or should ask. . . Very specific examples of both data security aspect & defining the authorization roles are well narrated by authors using successive depth in short examples in following chapters. THE Beginning introduces a variety of core Authorization checks, covering introduction to necessity of protecting whole system including protection of individual internal SAP database Tables homding individual rows & columns of varying data privacy levels, protecting Reports, protecting security of regulated HR data, plus summary of concepts for System Access protection, User administration, the Authorization concepts, creating Documentation of Access Protection System, and Retention Periods. ** Now you have solid map to passing audits with lower audit expense ** Each chapter averages to roughly 15-20 pages. Ch.3 Embedding Internal Control Systen, Ch.4 Procedure Model of Designing Authorization Concept with callout on Involved Parties roles (steering committee, Project mgmt, Auditor's, module specialists & process specialists, contact persons fron user departments, user & authorization administration). Ch.5 Process Model for implementation. Ch.6 Auditing Authorization Concepts. Ch.7 SAP Enterprise Portal. Ch.8 Future Development & Methods. * - * - * David L Cannon Best Selling Author "Certified IS Auditor Study Guide (Sybex/Wiley) 2006~present