Design, build, and maintain Single, Composite, Derived, and Business Roles.
Perform role redesign, optimization, and simplification activities.
Manage user administration using SU01, SU10, PFCG, SUIM, PFUD, and related transactions.
Troubleshoot authorization issues using SU53, STAUTHTRACE, ST01, and Security Audit Logs.
Perform authorization profile generation and user master comparison.
Support SAP GUI and SAP Fiori authorization concepts.
Design and maintain Fiori catalogs, groups, spaces, and pages.
Support SAP Business Partner (BP) authorization concepts.
SAP GRC Access Control
Implement, configure, and administer SAP GRC Access Control 10.x/12.x.
Configure and support Access Request Management (ARM).
Configure MSMP workflows and approval processes.
Administer Business Role Management (BRM).
Configure and support Emergency Access Management (EAM/Firefighter).
Perform Role Synchronization, Repository Synchronization, User Synchronization, and Risk Analysis.
Maintain Segregation of Duties (SoD) rules and mitigation controls.
Perform Access Risk Analysis and compliance reporting.
Support GRC integration with SAP ECC, SAP S/4HANA, SAP Fiori, and SAP Cloud environments.
SAP GRC Upgrade & Migration
Lead SAP GRC Access Control upgrade projects (10.x/12.x).
Perform pre-upgrade and post-upgrade validation activities.
Validate SAP GRC plug-in compatibility with SAP S/4HANA releases.
Execute connector configuration, repository synchronization, and post-upgrade testing.
Support GRC integration with upgraded SAP S/4HANA systems.
Perform post-upgrade activities, including user synchronization, role synchronization, repository synchronization, batch risk analysis, firefighter synchronization, and MSMP validation.
Troubleshoot upgrade-related authorization and provisioning issues.
Coordinate with Basis teams during upgrade planning, execution, and Hypercare.
Support SAP RISE, Private Cloud, and Hybrid landscape upgrade activities