Basics – Starting Point.

Chronologically, as well as logically, this is your and my starting point. This blog post defines the very basics of an authorization concept based on my professional experience and focuses on practical approaches. Let’s get started!

The universe of authorizations is – without exaggeration – endless. Each application, system and every organization requires authorizations before solutions can be used at all. And since those are defined specifically per organization and requirement, there is an endless amount of authorizations regarding their characteristics and manifestations. That is why I called my blog a universe. So now you are missing the explanation of SAP within my blog name. It is straight forward: on the one hand it stands for Strehle@Practice which I chose as a branding. And on the other hand it obviously states my focus on authorizations of SAP systems. I do hope this is not too confusing 😉

Authorization Management – Basic Principles

Know your environment and adapt.

#One: authorizations are logically defined by business functions to enable the business. The technology however aligns to the given requirements. Hence, the business is always predetermines the authorizations within the company.

#Two: explicit (obvious) and implicit (invisible) requirements need to be adressed. To access certain data or start a process you have explicit business requirements. But to be able to fullfill those, implicit requirements need to be covered as like system access, user parameters etc.

#Three: know your system environment. Seldomly a system is decoulpled from the companys IT ecosystem. You need to be aware of all interdependencies and pro-actively adress those topics in a managing behaviour.

#Four: due to #Three you need to know the team and specialists to fullfill your assignments. You will never be able to work on your own, since you depend on business requirements and peripheral knwoledge of other team members or system specialists.

Derived from the above stated principles you need to define your profile within the company. Dive in to every level of your job and enable yourself to provide the best authorization support.

Please let me know if this entry helped. Did you find what you looked for? Was the described content clearly structured and well readable?

Thanks for your feedback!