Authorization handling

S/4 HANA On-Premise Edition

Authorization Concepts in S/4HANA On-Premise

v Roles are maintained using PFCG

transaction.
v If the business users are
accessing the SAP GUI
transactions, identify the PFCG
roles associated to the transaction
codes.
v Authorization Objects can be
viewed under the tab
Authorizations.
v Restrictions to be maintained for
authorization object

2016 SAP SE or an SAP affiliate company. All rights reserved. Customer 15

Profit Centre Based Authorization
Profit Centre Based Authorization

v Activate Business Function FIN_GL_CI_1.

v Activate Authorization Check in the customizing SPRO Financial Accounting (New)
Financial Accounting Global Settings (New) Authorizations Activate Authorization Check
for Profit Centers
v Profit Centre based authorization through Authorization Object K_PCA
v Identify all roles which need profit centre based authorizations.
v Identify the transactions for profit centre based restrictions.
v Add Authorization Object K_PCA to the roles
v Apply restrictions

Additional Information:
v OSS Notes reference:
v 1331317 - EhP3: Authorization check for profit centre
v 1799909 - FI: Activity authorization check FAGL_AUTH_CHECK
v 2190315 - FI: Activity for authorization check with FAGL_AUTH_CHECK
2016 SAP SE or an SAP affiliate company. All rights reserved. Customer 17
How to implement restrictions in S/4HANA OP?

Identify transactions for business process which needs to be assigned to any given role.
Create Create master role using PFCG single/ composite role.
Assign the transactions to the role(s).
Master roles Authorization objects related to the transactions will be loaded based on SU22/ SU24.

Create Derived role using transaction PFCG.

Derived Assign restriction to the derived roles (Company Code(s), Profit Centre(s) etc.)
roles & Assign users/ user group to Roles
Restrictions

Verify the user roles and segregation of duties

Test and validate the authorizations.

Test Roles

Note: No default Segregation of Duties implementation available in S4HANA. GRC component is required to do the
Segregation of Duties and Risk analysis.
2016 SAP SE or an SAP affiliate company. All rights reserved. Customer 19
Thank you

Contact information:

Vibin Varghese
CoE Financials
SAP SSC Ireland Limited