Manage the lifecycle of your SAP roles & accesses
Whether you're starting from scratch or need a complete overhaul, we'll help you build a clear, scalable and compliant SAP authorization architecture, without turning your project into a gas factory.
What we suggest. The project, step by step
Redesign or create your SAP roles
End-to-end support for the creation or redesign of your SAP roles, with an approach focused on security, business efficiency... and ease of administration.
We'll listen to you and offer you a tailor-made service that's just right for you.
1. Framing & authorization strategy
Review of existing equipment (if applicable)
Business & IT requirements gathering
Definition of key principles: target role model, granularity, segregation of duties, naming rules
Alignment with your constraints (audit, compliance, internal resources)
2. Functional & technical design
Creation of a role matrix (based on your processes and organization)
Definition of business, technical, composite & simple roles
Integration of SoD controls & SAP best practices
Iterative validation with business and security teams
3. Implementation & testing
Setting up roles in SAP
Assignments in a dedicated environment
Technical verification of roles
Functional test support
Corrections and adjustments based on user feedback
4. Deployment & support
Definition of deployment strategy (pilot, waves, big bang)
Go-live(s)
Internal communication plan and support for change
hypercare (support, quick adjustments)
5. Skills transfer
Training for IT teams and SAP administrators
Presentation of the role matrix to BPOs
Provision of project documentation (matrices, rules, procedures)
Individual or group coaching on tools and best practices
6. Run
We take care of your users' lifecycle (creation, change, deletion)
We manage your roles (upgrades, scope deployments, etc.)
Let's talk about your project
Need to regain control over your SAP roles?
We can help you lay a sound, secure and lasting foundation.
Contact us for a free scoping meeting. We'll listen to you, challenge you, and propose a realistic trajectory.
For whom?
Companies in SAP deployment (greenfield or brownfield project)
Organizations that have accumulated unmaintained "historical" roles
IT teams wishing to regain control on their SAP authorizations
Structures subject to compliance (SOX, RGPD, etc.)
Benefits for you
From coherent, evolving roles
A risk reduction SoD and alignment with audit requirements
From easy-to-manage access on the IT side, easy to understand on the business side
A collaborative approach and know-how transfer to stay autonomous
Tools & expertise
SAP ECC / S/4HANA
FIORI authorization (launchpad modeling, creation of spaces/pages/sections...)
CRM tool
SoD analysis (using GRC, Excel or other specialized tools)
Proven methodology for multi-site, multi-business projects
Isabelle PRINCET, DPCC Department, HUTCHINSON SA
Our collaboration with Secureway is a daily demonstration of their availability, attentiveness, skills and expertise in authorizations. A quality partner!
Olivia ROUMEGOUS, HRIS manager, Group CHANTELLE
I enjoyed working with Christophe and Secureway. A true partner who combines professionalism, expertise and straightforward relationships.
Frequently asked questions (FAQ) about managing and supporting your SAP role solution
Why outsource the management of our SAP roles and authorizations rather than manage them internally?
Outsource the management of your SAP roles and authorizations allows you to benefit instantly from specialized, certified expertise which is often difficult and costly to maintain in-house. This ensures rapid updating roles in the face of regulatory and system changes (patches, version upgrades). By outsourcing this critical service, your in-house teams can concentrate on their core business, while guaranteeing a high level of security and compliance without interruption.
How does Secureway manage emergency access requests and the risk of authorization drift?
Secureway manages emergency access requests (or Emergency Access Management), supported by robust tools (including our SWAWE solution) for granting temporary and traceable rights (Firefighter). Our management service includes a continuous monitoring authorizations to detect any drift or non-compliant allocation immediately after it occurs. This active monitoring prevents progressive «pollution» of the role model, ensuring its sustainability and risk reduction over time.
Our current role model is old. Can you handle the management of a less-than-optimal model?
Yes, we can handle the management of a non-optimal model, But our first objective is to apply corrective measures. We usually start with a quick audit and the implementation of corrective «quickwins» (removing unnecessary access, cleaning up SAP_ALL roles) to stabilize the level of risk. Then, as part of the service contract, we offer progressive support towards a targeted role redesign (particularly on the highest-risk processes) to ensure that the managed model becomes increasingly efficient and compliant over time.
What are Secureway's service level agreements (SLAs) for role management?
Visit Secureway's service level agreements (SLAs) for role management are clearly defined in the service contract and include key indicators. These SLAs typically cover :
- Response time to critical authorization incidents.
- The time it takes to put new roles into production.
- Frequency of SoD risk monitoring reports.
- Guaranteed compliance with external audits. These commitments ensure the service continuity and responsiveness required for your SAP environment.
Contact us
(+33) 6 66 63 03 02
Grégory BIASOTTO
8 avenue de Paris 78000 Versailles
contact@secureway.fr
Entrust us with your project
Our teams will be happy to answer any questions you may have.