RBAC realization procedure in SAP landscape



  • Identify affected
    1. organizations / departments
    2. business areas
    3. landscape
    4. stakeholders

and their security requirements for each of the above dimension.
Capture these in an artifact.

  • Set up a team — cross-area, cross-department as required.
  • Define and roll-out process for
    1. Realization project execution
    2. Point of contact for all affected by the scope of triggering business landscape change


  • Identify task profiles required based on the organization chart and business process analysis.
  • Perform “Fit-to-Standard Analysis” if SAP delivered role templates could be used.
  • Identify and list functions to go into the roles.
    Functions include transactions, reports and web links.
  • List the results of above activities in an artifact — authorization matrix.
  • Define naming conventions for authorizations.


  • Design and implement the roles and authorizations.

Test & Deploy