SAP Security Administrator, SAP Security Administrator, SAP GRC Consultant

Environment: SAP R/3 Finance systems, APO, BI/BW, GRC, HR

Roles and Responsibilities:

* Responsible to implement Role-based security administration, including design, testing and
documentation.
* Worked with PFCG in creating roles, profiles, composite roles & derived.
* Created customized end user roles and menus to allow for low level modular access control.
* Set up security roles and user accounts for more than 5000 End Users for primary Go Live and Post
Go Live.
* Redefined authorization checks scope using SU24 etc.
* Created new and edited the existing Authorizations as per the requirements coming through Help
desk which involves the inclusion of transactions in the menu tree or editing the activities as per
SU53 results.
* Work with Business specialists to help them understand what SAP authorization objects are causing
the conflicts and what all options exist for mitigating the conflicts.
* Worked with the Business Process Owners to restrict sensitive transactions and security
authorizations, and ensured segregation of duties across business areas.
* Analyzed all customer programs and transaction codes for authority checks.
* Worked with functional team leads to define the new transactions.
* Worked on SAP Check Indicator Defaults and Field values, reduced the scope of Authorization checks
using transaction SU24 and maintained check indicators for Transaction codes.
* Trouble shoot R/3 security problem by using different scenario such as system trace, parameter
change, SU53, SE16 and replicating user error in order to find security problem.
* Continuously improved security configuration to reflect best practices and to prepare for system
audits.
* Extensively used Central User Administration (CUA) for creating new end and help desk users using
Macro tool for Mass User creation and maintenance.
* Respond to requests and prepare SAP security reports based on management and department needs.
* Extensively used PFCG to create roles/profiles for various modules such as MM, FI/CO, GL, AP, AR
etc. and created generated profiles, Authorizations, object classes, objects, and roles and assigned
to user master.
* Investigate SAP HR Security Incidents
* Perform Basic GRC Security Requests (i.e, Creation of Mitigating Controls, Addition and Deletion
of Approvers/Controllers) and medium to complex incident requests.
* Supports business in helping them identify and eliminate possible or existing Segregation of Duty
(SOD) conflicts via the SAP GRC AC Tool.
* Supports business in clearing up audit remediation which relates to SAP access/authorization.
* Performs emergency id access review to ensure that all usage is in line with the request.
* Involves in pre-checks and post-checks security testing before and after system upgrades.