Course description

Managing User Access and Security of SAP S/4HANA and SAP S/4HANA Cloud, Public Edition is a comprehensive enterprise training program designed for SAP Security Consultants, SAP Basis Administrators, SAP Authorization Consultants, SAP Identity and Access Management (IAM) Specialists, SAP Fiori Administrators, SAP Cloud Administrators, System Administrators, SAP Implementation Consultants, and IT Security Professionals responsible for securing SAP environments.

This course provides practical knowledge of SAP Security Fundamentals, SAP Authorization Concepts, Role Maintenance, User Administration, SAP Fiori Security, SAP Identity and Access Management (IAM), SAP Cloud Identity Services, SAP HANA User Administration, SAP HANA Security, Authentication, Single Sign-On (SSO), Cybersecurity, and Cloud Identity Provisioning.

Following SAP's official Learning Journey, the course progresses from SAP security fundamentals through authorization concepts, SAP Fiori security, SAP Identity Access Management, Cloud Identity Services, SAP HANA security, and enterprise user access management.

Enterprise SAP landscapes require strong identity management, secure authentication, role-based authorization, and centralized user administration to protect business-critical applications and sensitive data. SAP provides a comprehensive security framework that enables organizations to manage users, roles, authorizations, authentication, identity provisioning, compliance, and cybersecurity across SAP S/4HANA, SAP HANA, SAP Business Suite, SAP Business Technology Platform, and SAP S/4HANA Cloud, Public Edition.

This course introduces the complete lifecycle of SAP Security and User Access Management, including SAP authorization concepts, user administration, role maintenance, SAP Fiori authorization management, SAP Identity and Access Management (IAM), SAP Cloud Identity Services, authentication, Single Sign-On (SSO), SAP HANA security, user provisioning, authorization troubleshooting, and enterprise security governance.

Throughout the course, learners will gain practical implementation experience while working through real-world SAP security scenarios involving role design, authorization assignments, SAP Fiori business roles, IAM administration, Cloud Identity Services configuration, SAP HANA user administration, and enterprise access governance.

By the end of this course, participants will possess the knowledge required to implement, configure, administer, troubleshoot, and optimize SAP user access and security solutions for enterprise SAP environments.

Who Should Attend

  • SAP Security Consultants
  • SAP Authorization Consultants
  • SAP Basis Administrators
  • SAP Identity and Access Management (IAM) Consultants
  • SAP Fiori Administrators
  • SAP Cloud Administrators
  • SAP HANA Administrators
  • SAP S/4HANA Consultants
  • SAP Implementation Consultants
  • System Administrators
  • Cybersecurity Professionals
  • IT Security Engineers
  • Identity Management Specialists
  • Enterprise Architects
  • SAP Support Consultants

Skills You Will Gain

  • SAP Security Fundamentals
  • SAP Authorization Concepts
  • Role Maintenance (PFCG)
  • User Administration
  • SAP Fiori Security
  • SAP Business Roles
  • Identity Access Management (IAM)
  • SAP Cloud Identity Services
  • Authentication & Single Sign-On
  • SAP HANA Security
  • User Provisioning
  • Authorization Troubleshooting
  • Access Governance
  • SAP Cybersecurity
  • Enterprise Security Best Practices

Career Opportunities

  • SAP Security Consultant
  • SAP Authorization Consultant
  • SAP IAM Consultant
  • SAP Basis Security Administrator
  • SAP Cloud Security Consultant
  • SAP Fiori Security Consultant
  • SAP HANA Security Administrator
  • Identity and Access Management Consultant
  • SAP Cybersecurity Consultant
  • SAP Governance Consultant
  • SAP Technical Consultant
  • SAP Support Consultant
  • Enterprise Security Architect
  • IT Security Administrator
  • SAP S/4HANA Security Specialist

These roles are highly valued across manufacturing, banking, healthcare, retail, government, telecommunications, pharmaceuticals, logistics, energy, and global enterprises implementing SAP S/4HANA and SAP Cloud solutions.

Certification Preparation

This course is designed to support learners preparing for SAP Security and Authorization-related certifications by covering the concepts included in SAP's official Learning Journey.

Participants will gain practical knowledge in:

  • SAP Security Fundamentals
  • SAP Authorization Concepts
  • Role Maintenance
  • User Administration
  • SAP Fiori Authorizations
  • Identity Access Management (IAM)
  • SAP Cloud Identity Services
  • Authentication & Single Sign-On
  • SAP HANA Security
  • User Provisioning
  • Authorization Analysis
  • Cybersecurity
  • Enterprise Security Governance

The course combines conceptual learning with practical implementation exercises to prepare learners for enterprise SAP Security projects and certification success.

What will i learn?

  • Understand SAP security concepts.
  • Configure SAP authorization concepts.
  • Create and maintain SAP users.
  • Design SAP business roles.
  • Configure SAP Fiori authorizations.
  • Administer SAP Identity Access Management (IAM).
  • Configure SAP Cloud Identity Services.
  • Manage SAP HANA security and user administration.
  • Troubleshoot authorization issues.
  • Implement enterprise SAP security best practices.

Requirements

  • Basic SAP navigation
  • Basic understanding of SAP systems
  • Familiarity with enterprise IT environments
  • Basic user administration knowledge
  • Interest in SAP security and identity management
  • Computer or Laptop
  • Stable Internet Connection
  • Modern Web Browser
  • SAP S/4HANA or SAP S/4HANA Cloud Training Environment (Recommended)

Frequently asked question

Yes. The course starts with SAP Security fundamentals before progressing to authorization concepts, role maintenance, SAP Fiori security, IAM, Cloud Identity Services, and SAP HANA security.

Yes. The course provides detailed coverage of SAP authorization concepts, role maintenance, authorization terminology, user creation, traces, transports, and user administration.

Yes. You will learn SAP Fiori authorizations, SAP Fiori business roles, application implementation, launchpad security, CDS authorization concepts, and authorization analysis.

Yes. The course covers SAP Identity Access Management (IAM), business user concepts, role administration, troubleshooting, monitoring, and business role maintenance in SAP S/4HANA Cloud, Public Edition.

Yes. You will learn SAP Cloud Identity Authentication Services, Identity Provisioning Services, SAP BTP integration, authentication, and user provisioning.

Yes. The course explains SAP HANA user management, roles, privileges, user creation, modification, deletion, and SAP HANA authorization management.

Yes. Authentication, infrastructure security, SAP Cloud Identity Services, and Single Sign-On (SSO) are covered as part of the SAP Security fundamentals module.

You will gain hands-on experience creating users, configuring roles, maintaining authorizations, administering SAP Fiori security, implementing IAM, configuring Cloud Identity Services, troubleshooting authorization issues, and securing SAP HANA environments.

  • Lesson 01 00:00:00
    Module 1 Overview

    SAP System Security provides the foundation for protecting enterprise SAP landscapes through secure authentication, authorization, identity management, compliance, and cybersecurity. Organizations rely on SAP security concepts to safeguard business processes, sensitive information, and critical system resources across SAP Business Suite, SAP HANA, SAP S/4HANA, SAP S/4HANA Cloud, and SAP Business Technology Platform.

    This module introduces SAP security fundamentals, SAP application security, access governance, identity and access management (IAM), cloud identity services, authentication, Single Sign-On (SSO), cybersecurity, and autonomous enterprise security.

    By the end of this module, learners will understand the core concepts and technologies used to secure modern SAP environments.

    According to the SAP Learning Journey, this module covers SAP security fundamentals, SAP application security, access governance, IAM, Cloud Identity Services, authentication, SSO, cybersecurity, and autonomous enterprise concepts.

    What You Will Learn

    • Understand SAP security fundamentals.
    • Explore SAP application security.
    • Understand access governance.
    • Configure Identity and Access Management (IAM).
    • Understand Cloud Identity Services.
    • Learn authentication and Single Sign-On.
    • Understand cybersecurity principles.
    • Support secure SAP environments.

    Units in This Module

    • Unit 1.1: Providing an Overview of Security Fundamentals
    • Unit 1.2: Providing an Overview of SAP On-Premise Application Security
    • Unit 1.3: Introducing SAP Access Governance and Compliance
    • Unit 1.4: Understanding Identity and Access Management (Public Cloud)
    • Unit 1.5: Describing SAP Access Governance and Compliance for SAP S/4HANA Cloud, Public Edition
    • Unit 1.6: Introducing SAP Cloud Identity Services
    • Unit 1.7: Providing an Overview of Infrastructure and Authentication Security
    • Unit 1.8: Describing Single Sign-On (SSO)
    • Unit 1.9: Understanding SAP Security Services
    • Unit 1.10: Introducing SAP Data Privacy Governance and Cybersecurity
    • Unit 1.11: SAP Autonomous Enterprise
  • Lesson 02 00:00:00
    1.1 Providing an Overview of Security Fundamentals

    SAP Security Fundamentals introduce the core principles used to protect enterprise SAP systems from unauthorized access while ensuring confidentiality, integrity, and availability of business information. Participants will understand the overall SAP security framework and its role within enterprise IT environments.

    Key Topics

    • SAP Security
    • Security Fundamentals
    • Enterprise Security
    • Information Security
    • Security Architecture
    • Risk Management
    • Compliance
    • SAP Landscape
  • Lesson 03 00:00:00
    1.2 Providing an Overview of SAP On-Premise Application Security

    SAP On-Premise Application Security focuses on protecting SAP Business Suite and SAP S/4HANA systems through secure configurations, authorization concepts, authentication mechanisms, and system administration practices.

    Key Topics

    • SAP Business Suite
    • SAP S/4HANA
    • Application Security
    • System Security
    • Authorization
    • Secure Configuration
    • Access Control
    • Enterprise Applications
  • Lesson 04 00:00:00
    1.3 Introducing SAP Access Governance and Compliance

    SAP Access Governance helps organizations manage user access, reduce segregation of duties (SoD) risks, enforce compliance, and support regulatory requirements through centralized governance and authorization management.

    Key Topics

    • Access Governance
    • Compliance
    • Segregation of Duties (SoD)
    • Risk Management
    • Access Control
    • Governance
    • Security Policies
    • Regulatory Compliance
  • Lesson 05 00:00:00
    1.4 Understanding Identity and Access Management (Public Cloud)

    Identity and Access Management (IAM) enables organizations to securely manage business users, identities, authentication, authorization, and access policies across SAP S/4HANA Cloud, Public Edition.

    Key Topics

    • Identity Management
    • Access Management
    • IAM
    • User Authentication
    • User Authorization
    • Cloud Identity
    • Business Users
    • SAP Cloud
  • Lesson 06 00:00:00
    1.5 Describing SAP Access Governance and Compliance for SAP S/4HANA Cloud, Public Edition

    SAP S/4HANA Cloud, Public Edition provides integrated governance capabilities that help organizations administer user access, monitor compliance, manage business roles, and maintain secure cloud operations.

    Key Topics

    • SAP S/4HANA Cloud
    • Cloud Governance
    • Access Compliance
    • Business Roles
    • Cloud Security
    • Authorization Management
    • Risk Management
    • Governance Policies
  • Lesson 07 00:00:00
    1.6 Introducing SAP Cloud Identity Services

    SAP Cloud Identity Services provide cloud-based identity authentication, user provisioning, secure access management, and centralized identity services for SAP cloud applications and SAP Business Technology Platform.

    Key Topics

    • SAP Cloud Identity Services
    • Identity Authentication
    • Identity Provisioning
    • Cloud Security
    • User Provisioning
    • Authentication
    • SAP BTP
    • Identity Federation
  • Lesson 08 00:00:00
    1.7 Providing an Overview of Infrastructure and Authentication Security

    Infrastructure and authentication security protect SAP environments through secure communication, authentication mechanisms, network security, encryption, and infrastructure hardening.

    Key Topics

    • Infrastructure Security
    • Authentication
    • Encryption
    • Secure Communication
    • Network Security
    • Identity Verification
    • Access Protection
    • SAP Security
  • Lesson 09 00:00:00
    1.8 Describing Single Sign-On (SSO)

    Single Sign-On (SSO) enables users to securely access multiple SAP applications using a single authentication process, improving user experience while maintaining enterprise security standards.

    Key Topics

    • Single Sign-On
    • SSO
    • Authentication
    • Identity Federation
    • User Experience
    • Secure Login
    • Access Management
    • Enterprise Security
  • Lesson 10 00:00:00
    1.9 Understanding SAP Security Services

    SAP Security Services provide enterprise capabilities for authentication, authorization, monitoring, auditing, identity protection, compliance, and security management across SAP applications.

    Key Topics

    • SAP Security Services
    • Authorization
    • Authentication
    • Security Monitoring
    • Audit
    • Compliance
    • Identity Protection
    • Enterprise Security
  • Lesson 11 00:00:00
    1.10 Introducing SAP Data Privacy Governance and Cybersecurity

    Data Privacy Governance and Cybersecurity protect enterprise data through privacy regulations, cybersecurity frameworks, secure access controls, monitoring, and threat management across SAP landscapes.

    Key Topics

    • Data Privacy
    • Cybersecurity
    • Privacy Governance
    • Threat Management
    • Security Compliance
    • Data Protection
    • Information Security
    • Risk Assessment
  • Lesson 12 00:00:00
    1.11 SAP Autonomous Enterprise

    The SAP Autonomous Enterprise vision leverages automation, artificial intelligence, cloud technologies, and intelligent security to create self-managing, resilient, and secure enterprise environments.

    Key Topics

    • SAP Autonomous Enterprise
    • Intelligent Automation
    • Artificial Intelligence
    • Cloud Security
    • Enterprise Resilience
    • Autonomous Operations
    • Digital Transformation
    • SAP Innovation

  • Lesson 01 00:00:00
    Module 2 Overview

    The SAP Authorization Concept provides a structured framework for controlling user access to SAP Business Suite and SAP S/4HANA applications through users, roles, profiles, authorizations, authorization objects, and role maintenance. Proper authorization management ensures users have access only to the transactions, applications, and business data required for their job responsibilities.

    This module introduces SAP authorization concepts, authorization terminology, user creation, role maintenance, authorization settings, authorization traces, transport management, and enterprise user administration.

    By the end of this module, learners will be able to design, configure, administer, and troubleshoot SAP authorization concepts for SAP S/4HANA and SAP Business Suite.

    According to the SAP Learning Journey, this module covers authorization concepts, authorization terminology, user creation, role maintenance, authorization settings, authorization traces, transporting authorizations, and user administration.

    What You Will Learn

    • Understand SAP authorization concepts.
    • Learn authorization terminology.
    • Create SAP users.
    • Configure Role Maintenance.
    • Perform authorization settings.
    • Analyze authorization traces.
    • Transport authorizations.
    • Administer enterprise users.

    Units in This Module

    • Unit 2.1: Understanding Authorizations in General
    • Unit 2.2: Understanding Basic Terminology of Authorizations
    • Unit 2.3: Creating Users
    • Unit 2.4: Working with the Role Maintenance
    • Unit 2.5: Performing Basic Settings
    • Unit 2.6: Using Traces
    • Unit 2.7: Transporting Authorizations
    • Unit 2.8: Administrating Users in the Company Landscape
  • Lesson 02 00:00:00
    2.1 Understanding Authorizations in General

    SAP Authorizations determine which applications, transactions, reports, and business objects users can access within an SAP system. Participants will understand the overall authorization framework and its importance in enterprise security.

    Key Topics

    • SAP Authorizations
    • Authorization Concept
    • Access Control
    • Authorization Objects
    • User Permissions
    • Security Policies
    • Enterprise Security
    • SAP S/4HANA
  • Lesson 03 00:00:00
    2.2 Understanding Basic Terminology of Authorizations

    Understanding SAP authorization terminology is essential for designing secure role structures. Learners will become familiar with authorization objects, authorization fields, profiles, activities, roles, and authorization assignments.

    Key Topics

    • Authorization Objects
    • Authorization Fields
    • Profiles
    • Activities
    • Roles
    • Permissions
    • Access Rights
    • SAP Terminology
  • Lesson 04 00:00:00
    2.3 Creating Users

    User administration enables administrators to create, maintain, modify, lock, unlock, and manage SAP users while assigning appropriate authorization roles and maintaining enterprise security standards.

    Key Topics

    • User Creation
    • User Maintenance
    • User Administration
    • User Types
    • User Profiles
    • Password Policies
    • User Security
    • SAP Administration
  • Lesson 05 00:00:00
    2.4 Working with the Role Maintenance

    Role Maintenance allows administrators to create, modify, copy, generate, and assign authorization roles that determine user access to SAP transactions, applications, and business processes.

    Key Topics

    • Role Maintenance
    • PFCG
    • Business Roles
    • Authorization Roles
    • Role Assignment
    • Role Generation
    • Security Administration
    • SAP Roles
  • Lesson 06 00:00:00
    2.5 Performing Basic Settings

    Basic authorization settings establish the configuration required for effective authorization management, including default parameters, organizational levels, authorization defaults, and security configuration.

    Key Topics

    • Authorization Settings
    • Organizational Levels
    • Security Configuration
    • Default Parameters
    • Authorization Defaults
    • Role Configuration
    • SAP Administration
    • Security Policies
  • Lesson 07 00:00:00
    2.6 Using Traces

    Authorization traces help administrators identify missing authorizations, troubleshoot authorization errors, analyze access failures, and validate authorization assignments during implementation and support activities.

    Key Topics

    • Authorization Traces
    • STAUTHTRACE
    • SU53
    • Security Analysis
    • Authorization Errors
    • Access Troubleshooting
    • User Analysis
    • SAP Diagnostics
  • Lesson 08 00:00:00
    2.7 Transporting Authorizations

    Authorization transports enable administrators to move roles, authorizations, and security configurations between SAP development, quality assurance, and production environments while maintaining system consistency.

    Key Topics

    • Authorization Transport
    • Transport Requests
    • Change Management
    • Role Transport
    • Security Migration
    • SAP Landscape
    • Deployment
    • Configuration Management
  • Lesson 09 00:00:00
    2.8 Administrating Users in the Company Landscape

    Enterprise user administration involves managing user accounts, organizational assignments, authorization consistency, lifecycle management, and security governance across multiple SAP systems.

    Key Topics

    • Enterprise User Administration
    • User Lifecycle
    • User Governance
    • Authorization Administration
    • Company Landscape
    • Identity Management
    • Security Governance
    • SAP Administration

  • Lesson 01 00:00:00
    Module 3 Overview

    SAP Fiori introduces a role-based, user-centric experience for SAP S/4HANA. A secure SAP Fiori environment depends on properly configured business roles, catalogs, groups, authorization objects, launchpad permissions, Core Data Services (CDS) authorizations, and integration scenarios. Effective authorization management ensures users can access only the applications and business functions required for their responsibilities.

    This module introduces SAP Fiori concepts, SAP Fiori authorizations, business role management, Fiori application implementation, Launchpad security, CDS authorization concepts, authorization analysis, transport management, and integration scenarios.

    By the end of this module, learners will be able to configure, administer, troubleshoot, and transport SAP Fiori authorizations for enterprise SAP S/4HANA environments.

    According to the SAP Learning Journey, this module covers SAP Fiori concepts, SAP Fiori authorizations, application implementation, Launchpad authorizations, CDS authorization concepts, authorization analysis, transport options, integration scenarios, and SAP S/4HANA project authorizations.

    What You Will Learn

    • Understand SAP Fiori architecture.
    • Configure SAP Fiori authorizations.
    • Manage SAP Fiori business roles.
    • Implement SAP Fiori applications.
    • Configure Launchpad authorizations.
    • Understand CDS authorization concepts.
    • Analyze authorization issues.
    • Transport SAP Fiori authorizations.

    Units in This Module

    • Unit 3.1: Understanding the SAP Fiori Concept
    • Unit 3.2: Describing SAP Fiori Authorization
    • Unit 3.3: Managing SAP Fiori Authorizations
    • Unit 3.4: Implementing SAP Fiori Applications
    • Unit 3.5: Maintaining Special Authorizations for SAP Fiori Launchpad
    • Unit 3.6: Understanding Authorization Concept for ABAP Core Data Services (CDS)
    • Unit 3.7: Analyzing Authorizations in SAP Fiori Applications
    • Unit 3.8: Understanding Options for Transporting Authorizations
    • Unit 3.9: Describing Integration Scenarios
    • Unit 3.10: Defining Authorizations in SAP S/4HANA Projects
  • Lesson 02 00:00:00
    3.1 Understanding the SAP Fiori Concept

    SAP Fiori provides a modern, role-based user experience that enables business users to access SAP applications through an intuitive and responsive interface. Participants will understand the SAP Fiori architecture, user experience principles, and business role concepts.

    Key Topics

    • SAP Fiori
    • SAP Fiori Architecture
    • User Experience (UX)
    • Business Roles
    • SAP Launchpad
    • Responsive Design
    • Enterprise Applications
    • SAP S/4HANA
  • Lesson 03 00:00:00
    3.2 Describing SAP Fiori Authorization

    SAP Fiori Authorizations determine which applications, tiles, catalogs, and business functions users can access. Learners will understand authorization concepts specific to SAP Fiori and SAP S/4HANA.

    Key Topics

    • SAP Fiori Authorization
    • Business Roles
    • Catalogs
    • Authorization Objects
    • Access Control
    • Security Roles
    • SAP Security
    • Role-Based Access
  • Lesson 04 00:00:00
    3.3 Managing SAP Fiori Authorizations

    Managing SAP Fiori Authorizations involves assigning business roles, catalogs, spaces, pages, and authorization objects to ensure users receive appropriate access while maintaining enterprise security and compliance.

    Key Topics

    • Business Role Assignment
    • Catalog Management
    • Spaces and Pages
    • Role Administration
    • Authorization Management
    • User Access
    • SAP Launchpad
    • SAP Administration
  • Lesson 05 00:00:00
    3.4 Implementing SAP Fiori Applications

    Implementing SAP Fiori Applications includes deploying business applications, configuring catalogs, assigning business roles, enabling Launchpad access, and validating user authorizations for enterprise business processes.

    Key Topics

    • SAP Fiori Apps
    • Application Deployment
    • Business Catalogs
    • Launchpad Configuration
    • Role Assignment
    • Application Security
    • SAP S/4HANA
    • SAP Fiori Administration
  • Lesson 06 00:00:00
    3.5 Maintaining Special Authorizations for SAP Fiori Launchpad

    The SAP Fiori Launchpad requires specialized authorizations to control access to applications, catalogs, spaces, pages, personalization features, and Launchpad services. Learners will configure and maintain these security settings.

    Key Topics

    • SAP Fiori Launchpad
    • Launchpad Security
    • Special Authorizations
    • Catalog Assignment
    • User Personalization
    • Business Roles
    • Access Management
    • SAP Security
  • Lesson 07 00:00:00
    3.6 Understanding Authorization Concept for ABAP Core Data Services (CDS)

    Core Data Services (CDS) introduce authorization mechanisms that protect business data accessed through SAP Fiori applications. Participants will understand CDS authorization concepts, access control, and data-level security.

    Key Topics

    • ABAP CDS
    • CDS Authorization
    • Data Access Control
    • Authorization Objects
    • Data Security
    • Access Policies
    • SAP Fiori
    • SAP S/4HANA
  • Lesson 08 00:00:00
    3.7 Analyzing Authorizations in SAP Fiori Applications

    Authorization analysis helps administrators identify missing permissions, troubleshoot application access issues, validate business roles, and optimize SAP Fiori security configurations.

    Key Topics

    • Authorization Analysis
    • SAP Fiori Diagnostics
    • Authorization Trace
    • Security Troubleshooting
    • Access Validation
    • User Analysis
    • SAP Security
    • Application Monitoring
  • Lesson 09 00:00:00
    3.8 Understanding Options for Transporting Authorizations

    Transport management enables SAP Fiori authorizations, business roles, catalogs, and security configurations to be moved between development, quality assurance, and production systems while maintaining consistency across landscapes.

    Key Topics

    • Transport Management
    • Authorization Transport
    • Business Role Transport
    • SAP Landscape
    • Change Management
    • Configuration Deployment
    • SAP Security
    • System Administration
  • Lesson 10 00:00:00
    3.9 Describing Integration Scenarios

    SAP Fiori integrates with SAP S/4HANA, SAP Business Technology Platform, and other enterprise applications. This unit explains integration scenarios that require secure identity management, authorization mapping, and application connectivity.

    Key Topics

    • Integration Scenarios
    • SAP BTP
    • SAP S/4HANA Integration
    • Identity Federation
    • Authorization Mapping
    • Enterprise Integration
    • Cloud Integration
    • SAP Security
  • Lesson 11 00:00:00
    3.10 Defining Authorizations in SAP S/4HANA Projects

    SAP implementation projects require well-defined authorization strategies that align with business processes, security requirements, and organizational governance. Learners will understand how to design and implement authorization concepts during SAP S/4HANA projects.

    Key Topics

    • SAP Project Security
    • Authorization Design
    • Business Roles
    • Security Strategy
    • SAP Implementation
    • Governance
    • Access Control
    • SAP S/4HANA Projects

  • Lesson 01 00:00:00
    Module 4 Overview

    Identity and Access Management (IAM) in SAP S/4HANA Cloud, Public Edition enables organizations to securely manage business users, business roles, business catalogs, authorizations, and user access throughout the user lifecycle. IAM provides centralized administration, role assignment, monitoring, troubleshooting, and governance to ensure secure access to SAP cloud applications.

    This module introduces SAP Identity and Access Management (IAM), business users, business roles, role collections, authorization troubleshooting, monitoring, and enterprise user administration for SAP S/4HANA Cloud, Public Edition.

    By the end of this module, learners will be able to configure, administer, monitor, and troubleshoot Identity and Access Management in SAP S/4HANA Cloud, Public Edition.

    According to the SAP Learning Journey, this module covers IAM concepts, business users, business roles, role administration, troubleshooting, monitoring, and user management in SAP S/4HANA Cloud, Public Edition.

    What You Will Learn

    • Understand SAP Identity and Access Management (IAM).
    • Create and manage business users.
    • Configure business roles.
    • Assign business catalogs.
    • Monitor user access.
    • Troubleshoot authorization issues.
    • Administer cloud identities.
    • Implement IAM best practices.

    Units in This Module

    • Unit 4.1: Understanding SAP Identity and Access Management
    • Unit 4.2: Managing Business Users
    • Unit 4.3: Configuring Business Roles and Business Catalogs
    • Unit 4.4: Monitoring and Troubleshooting IAM
  • Lesson 02 00:00:00
    4.1 Understanding SAP Identity and Access Management

    SAP Identity and Access Management (IAM) provides the framework for managing identities, authorizations, and secure access across SAP S/4HANA Cloud applications. Participants will understand IAM architecture, user lifecycle management, and security governance.

    Key Topics

    • Identity and Access Management
    • IAM
    • Identity Lifecycle
    • Access Control
    • Cloud Security
    • Business Users
    • Security Governance
    • SAP S/4HANA Cloud
  • Lesson 03 00:00:00
    4.2 Managing Business Users

    Business Users represent individual users who access SAP S/4HANA Cloud applications. Learners will understand user creation, maintenance, activation, deactivation, and lifecycle management.

    Key Topics

    • Business Users
    • User Administration
    • User Lifecycle
    • User Creation
    • User Maintenance
    • Cloud Administration
    • Identity Management
    • SAP Cloud
  • Lesson 04 00:00:00
    4.3 Configuring Business Roles and Business Catalogs

    Business Roles and Business Catalogs determine the applications, business functions, and permissions available to users. Participants will learn how to configure, assign, and maintain business roles and catalogs.

    Key Topics

    • Business Roles
    • Business Catalogs
    • Role Assignment
    • Access Management
    • Catalog Assignment
    • Authorization Management
    • SAP Fiori
    • Cloud Security
  • Lesson 05 00:00:00
    4.4 Monitoring and Troubleshooting IAM

    Monitoring and troubleshooting tools help administrators identify authorization issues, validate role assignments, analyze access problems, and maintain secure user access across SAP S/4HANA Cloud.

    Key Topics

    • IAM Monitoring
    • Authorization Troubleshooting
    • User Analysis
    • Access Validation
    • Security Monitoring
    • Role Verification
    • Cloud Administration
    • SAP Diagnostics

  • Lesson 01 00:00:00
    Module 5 Overview

    SAP Cloud Identity Services provide centralized identity authentication, identity provisioning, federation, and secure access management for SAP cloud applications. These services simplify user authentication, automate user provisioning, and enable secure integration across SAP Business Technology Platform (SAP BTP) and SAP cloud solutions.

    This module introduces SAP Cloud Identity Authentication, Identity Provisioning Service (IPS), user synchronization, identity federation, SAP BTP integration, and cloud identity management.

    By the end of this module, learners will be able to configure and administer SAP Cloud Identity Services for enterprise SAP cloud environments.

    According to the SAP Learning Journey, this module covers SAP Cloud Identity Authentication, Identity Provisioning, SAP BTP integration, and cloud identity management.

    What You Will Learn

    • Understand SAP Cloud Identity Services.
    • Configure Identity Authentication.
    • Configure Identity Provisioning.
    • Synchronize cloud identities.
    • Configure identity federation.
    • Integrate with SAP BTP.
    • Manage cloud authentication.
    • Secure enterprise cloud applications.

    Units in This Module

    • Unit 5.1: Understanding SAP Cloud Identity Services
    • Unit 5.2: Configuring Identity Authentication
    • Unit 5.3: Configuring Identity Provisioning Service (IPS)
    • Unit 5.4: Integrating SAP Cloud Identity Services with SAP BTP
  • Lesson 02 00:00:00
    5.1 Understanding SAP Cloud Identity Services

    SAP Cloud Identity Services provide centralized identity management capabilities that support authentication, user provisioning, identity federation, and secure access across SAP cloud applications.

    Key Topics

    • SAP Cloud Identity Services
    • Cloud Identity
    • Identity Management
    • Authentication
    • User Provisioning
    • Identity Federation
    • SAP Cloud
    • Enterprise Security
  • Lesson 03 00:00:00
    5.2 Configuring Identity Authentication

    Identity Authentication provides secure user login capabilities using authentication policies, multifactor authentication (MFA), password policies, and identity verification for SAP cloud applications.

    Key Topics

    • Identity Authentication
    • Authentication Policies
    • Multi-Factor Authentication (MFA)
    • Password Policies
    • Secure Login
    • User Authentication
    • Cloud Security
    • SAP Identity Services
  • Lesson 04 00:00:00
    5.3 Configuring Identity Provisioning Service (IPS)

    Identity Provisioning Service (IPS) automates the synchronization and provisioning of users between enterprise identity providers and SAP cloud applications, reducing manual administration and improving security.

    Key Topics

    • Identity Provisioning Service
    • IPS
    • User Provisioning
    • Identity Synchronization
    • Cloud Administration
    • User Lifecycle
    • SAP Cloud
    • Automation
  • Lesson 05 00:00:00
    5.4 Integrating SAP Cloud Identity Services with SAP BTP

    SAP Business Technology Platform (SAP BTP) integrates with SAP Cloud Identity Services to provide centralized authentication, identity federation, secure application access, and enterprise cloud identity management.

    Key Topics

    • SAP BTP
    • Cloud Integration
    • Identity Federation
    • Enterprise Authentication
    • SAP Cloud Identity
    • Secure Access
    • Cloud Connectivity
    • SAP Business Technology Platform

  • Lesson 01 00:00:00
    Module 6 Overview

    SAP HANA Security provides the framework for protecting SAP HANA databases through user administration, authentication, authorization management, privileges, roles, auditing, encryption, and secure database access. Proper SAP HANA security ensures that enterprise data remains protected while allowing authorized users to perform their business and administrative tasks.

    This module introduces SAP HANA user administration, role management, privilege assignment, authentication methods, authorization concepts, auditing, and security best practices.

    By the end of this module, learners will be able to administer SAP HANA users, manage database security, assign privileges, and implement secure SAP HANA environments.

    According to the SAP Learning Journey, this module covers SAP HANA user administration, role management, privileges, user lifecycle, authorization management, and SAP HANA security concepts.

    What You Will Learn

    • Understand SAP HANA security architecture.
    • Create and manage SAP HANA users.
    • Configure roles and privileges.
    • Implement authentication methods.
    • Configure authorization management.
    • Monitor database security.
    • Perform auditing and compliance checks.
    • Apply SAP HANA security best practices.

    Units in This Module

    • Unit 6.1: Understanding SAP HANA Security
    • Unit 6.2: Managing SAP HANA Users
    • Unit 6.3: Configuring Roles and Privileges
    • Unit 6.4: Authentication and Authorization Management
    • Unit 6.5: Auditing and Security Monitoring
  • Lesson 02 00:00:00
    6.1 Understanding SAP HANA Security

    SAP HANA Security protects enterprise databases by controlling authentication, authorization, user management, and secure access to business data. Participants will understand SAP HANA's layered security architecture and database protection mechanisms.

    Key Topics

    • SAP HANA Security
    • Database Security
    • Security Architecture
    • Authorization
    • Authentication
    • Data Protection
    • Enterprise Database
    • SAP HANA Platform
  • Lesson 03 00:00:00
    6.2 Managing SAP HANA Users

    User administration in SAP HANA involves creating, modifying, locking, unlocking, and deleting database users while ensuring secure authentication and proper access permissions.

    Key Topics

    • User Administration
    • User Creation
    • User Maintenance
    • User Lifecycle
    • Database Users
    • Identity Management
    • SAP HANA Administration
    • Security Management
  • Lesson 04 00:00:00
    6.3 Configuring Roles and Privileges

    Roles and privileges define what actions users can perform within SAP HANA. Learners will configure system privileges, object privileges, analytical privileges, and role assignments to support secure database operations.

    Key Topics

    • SAP HANA Roles
    • System Privileges
    • Object Privileges
    • Analytical Privileges
    • Role Assignment
    • Access Control
    • Authorization Management
    • Security Administration
  • Lesson 05 00:00:00
    6.4 Authentication and Authorization Management

    Authentication validates user identities, while authorization determines access to database objects and resources. Participants will configure authentication methods, password policies, and authorization settings for secure SAP HANA environments.

    Key Topics

    • Authentication
    • Authorization
    • Password Policies
    • User Validation
    • Access Control
    • Security Policies
    • Identity Verification
    • SAP HANA Security
  • Lesson 06 00:00:00
    6.5 Auditing and Security Monitoring

    Auditing and monitoring provide visibility into user activities, security events, and system changes. Learners will configure audit policies, review security logs, monitor database access, and support compliance initiatives.

    Key Topics

    • Security Auditing
    • Audit Policies
    • Security Logs
    • Monitoring
    • Compliance
    • Database Activity
    • Risk Management
    • SAP HANA Monitoring

  • Lesson 01 00:00:00
    Practical Exercises

    Throughout this course, learners will complete hands-on exercises based on real-world SAP Security administration and implementation scenarios.

    Participants will perform the following practical activities:

    • Configure SAP Security settings
    • Create and maintain SAP users
    • Configure authorization objects
    • Create business roles using PFCG
    • Assign authorization profiles
    • Perform authorization tracing using SU53 and STAUTHTRACE
    • Transport authorization roles
    • Configure SAP Fiori business roles
    • Assign catalogs, spaces, and pages
    • Configure Launchpad authorizations
    • Implement CDS authorization controls
    • Create business users in SAP S/4HANA Cloud
    • Configure IAM business roles
    • Troubleshoot authorization issues
    • Configure SAP Cloud Identity Authentication
    • Configure Identity Provisioning Service (IPS)
    • Integrate SAP Cloud Identity Services with SAP BTP
    • Create SAP HANA users
    • Configure SAP HANA roles and privileges
    • Configure authentication and password policies
    • Enable audit logging and monitor security events
    • Validate user access using authorization analysis
    • Secure enterprise SAP environments following SAP best practices
  • Lesson 02 00:00:00
    Enterprise Implementation Project

    Implementing Enterprise User Access and Security for SAP S/4HANA and SAP S/4HANA Cloud, Public Edition

    In this capstone project, learners will implement a complete SAP Security and User Access Management solution for a multinational organization using SAP S/4HANA and SAP S/4HANA Cloud, Public Edition.

    Participants will configure authorization concepts, business roles, SAP Fiori security, Identity and Access Management (IAM), SAP Cloud Identity Services, SAP HANA security, authentication mechanisms, auditing, and enterprise governance while following SAP security best practices.

    The implementation project follows the complete SAP Learning Journey for SAP Security and User Access Management.

    Phase 1 – SAP Security Foundation

    Configure:

    • SAP Security Framework
    • Security Policies
    • User Administration
    • Authorization Concepts
    • Security Governance
    • Access Control
    • Authentication Settings
    • Enterprise Security Standards

    Phase 2 – Authorization Management

    Implement:

    • SAP Users
    • Authorization Objects
    • PFCG Roles
    • Role Assignments
    • Authorization Profiles
    • SU53 Analysis
    • STAUTHTRACE
    • Authorization Transport Management

    Phase 3 – SAP Fiori Security

    Configure:

    • SAP Fiori Business Roles
    • Business Catalogs
    • Spaces and Pages
    • Launchpad Security
    • CDS Authorization
    • Application Authorization
    • Role Testing
    • Authorization Analysis

    Phase 4 – Cloud Identity Management

    Implement:

    • Business Users
    • IAM Business Roles
    • Business Catalog Assignment
    • SAP Cloud Identity Authentication
    • Identity Provisioning Service (IPS)
    • Identity Federation
    • SAP BTP Integration
    • User Lifecycle Management

    Phase 5 – SAP HANA Security

    Configure:

    • SAP HANA Users
    • Roles
    • System Privileges
    • Object Privileges
    • Authentication Policies
    • Audit Policies
    • Security Monitoring
    • Compliance Reporting

    Expected Project Outcome

    Upon successful completion of this implementation project, learners will be able to:

    • Configure SAP Security.
    • Manage enterprise authorization concepts.
    • Create and administer SAP users.
    • Configure SAP Fiori security.
    • Implement Identity and Access Management (IAM).
    • Configure SAP Cloud Identity Services.
    • Manage SAP HANA users, roles, and privileges.
    • Configure authentication and Single Sign-On (SSO).
    • Troubleshoot authorization issues.
    • Secure enterprise SAP landscapes using industry best practices.

Jittesh Purrohit

Lectures

50

Skill level

Intermediate

Expiry period

Lifetime

Related courses