/ GUI / SU01 / PFCG
This portfolio project demonstrates the process of creating a SAP user account, assigning a business role, validating authorization status, and synchronizing user access using standard SAP security administration transactions. The exercise was performed in a SAP S/4HANA sandbox environment to demonstrate user onboarding and authorization management activities commonly performed by SAP Basis and Security administrators.
A new finance user was onboarded into the SAP S/4HANA environment. User master data was created, a standard SAP business role was assigned, authorization status was validated, and user master records were synchronized through user comparison processing.
Demonstrates the relationship between user master records, business roles, authorization profiles, and authorization synchronization processes used within SAP environments.
A new SAP user account was created using transaction SU01. User master data was maintained, including user type and logon credentials. The account was configured as a Dialog User and an initial password was assigned for system access.
abap>/nSU01
The user account was successfully created and activated within the system.
Assign the required business role to the newly created user.
Transaction PFCG was used to assign the SAP business role SAP_BR_GL_ACCOUNTANT to the user account. The role assignment was maintained through the User tab within the role definition.
abap>/nPFCG
The user FIUSER1 was assigned to the SAP standard business role SAP_BR_GL_ACCOUNTANT through the User Assignment tab in PFCG.
Validate the authorization status of the assigned role.
The Authorizations tab was reviewed to verify the authorization status of the assigned business role. The role configuration was examined to confirm that authorization data had been maintained and that the authorization profile had been successfully generated.
Authorization data was saved successfully, and the authorization profile was shown as current.
Execute a user comparison to synchronize the role assignment and authorization profile with the user master record.
A User Comparison was executed to synchronize the role assignment and authorization profile with the user master record. This process updates the user master data to reflect the permissions assigned through the business role.
The user comparison completed successfully and the authorization data was synchronized without errors.
Verify that the assigned business role is visible within the user master record.
The user master record was reviewed in transaction SU01 to verify that the assigned business role had been successfully applied to the user account. Role assignment details were validated through the Roles tab.
abap>/nSU01
The assigned business role was visible within the user master record and was available for authorization processing.
This exercise demonstrated the end-to-end process of SAP user provisioning and role assignment using standard SAP administration transactions. The workflow included user creation, business role assignment, authorization profile review, user comparison, and verification of assigned access within the user master record. The exercise highlighted the relationship between user master records, business roles, authorization profiles, and user comparison processing within SAP S/4HANA.