Authorisation Setup in Greenfield S/4 HANA Implementation

Client Profile

Location: Singapore

Industry: Government

Our client is a leading IT service provider working on a project for a collection of government organisations in Singapore.

Our client was responsible for the implementation of S/4 HANA, BW, Solution Manager and GRC for these government organisations.
The greenfield approach was used in the implementation of S/4 HANA; consequently, we faced an added challenge of incorporating new and improved business processes.
The scope of the implementation covered 4,000 users across these organisations, all under one company code.
The authorisation-related portion of the implementation was subcontracted to XS Control. This also included all aspects of the GRC life cycle: Architecture, implementation and post-go live support.
This reference case details the authorisation setup in the S/4 HANA implementation for one of the government organisations.
A bespoke identity management solution was interfaced with SAP GRC for one department in the organisation.

To achieve a comprehensive authorisation roles framework in place, allowing for cost centre-segregated access provisioning.
To implement GRC Access Control, ensuring ‘zero segregation of duties violations’ upon go-live and SoD-free access provisioning post go-live.
To establish a seamless interface with Identity Management Solution.

Greenfield S/4 HANA was to replace legacy financial and logistic applications.
The customer was new to SAP, therefore there was no past experience in ECC to leverage on.
One company/one controlling area enterprise structure was used.
As the customer was a government organisation, there were strict access policies and rules to comply with.
GRC Access Control was to be implemented alongside S/4 HANA implementation.

Solid knowledge and experience in SAP authorisations and segregation of duties.
We used best practice content for SAP role building and utilised our chosen tool MARC to test for and achieve segregation of duties in roles prior to implementation.
Experience in implementing GRC Access Control in a government organisation.

Established role definition in alignment with Business Scenario/Business Process framework.
Performed and passed pre-go live user/role assignment validations through GRC Access Control.
Put in place process for post-go live access provisioning through GRC Access Control.

Leveraged on best practice role contents to ensure completeness of designed roles.
Leveraged on SAP best practice SoD rules to ensure completeness of SoD rules configuration in GRC.
Pre- and post-implementation support on roles and GRC.

Send us a message and we will get in touch with you!