Enterprise Resource Planning Authorization Configuration Project. Optimization of SAP license costs

Abstract

Authorizations in ERP systems are essential for controlling user access to transactions and functions, ensuring that individuals can only perform actions necessary for their roles. This maintains system security and integrity. The topic is particularly relevant for Valmet Automotive Oyj, which is transitioning to the SAP S/4HANA ERP system. The company has decided to manage authorizations internally after the go-live phase, with minimal external support, making the develop-ment of a robust authorization concept critical.

The main aim of this thesis is to address research questions: how to handle and maintain SAP authorization errors after the go-live phase, how SAP role maintenance and transport of the role changes is done; what are the ways for minimizing SAP license fees. To achieve these objectives, the study combines a literature review with observations of current processes and data analysis. Additionally, the company’s internal authorization concept document was updated with de-tailed steps and instructions as a deliverable.

The findings include a clear process for managing authorization issues and maintaining SAP roles, as well as the steps, which should be taken to reduce license costs. These measures emphasize adherence to the Principle of Least Privilege, avoiding unnecessary system complexity, and periodically deactivating inactive users. The results are significant for ensuring security and cost efficiency during the ERP transition. The limitations include restrictions of data used for the re-search and deliverable instruction for the role maintenance process, which is delivered to the company and intended for internal company usage.