Role Mapping Process

8/11/2019 Role Mapping Process

1/17

Role Mapping

What rolewill you play


2/17

Role Mapping Purpose

RoleMapping

Business

ChangeManagement

BusinessProcess

Team

Training

Security

Role Mapping must be a

collaborative effort

Role Mapping ensures we understand who our users are and what they

need to do Role Mapping results are a critical part of the project and the sustain model

Defines the responsibilities related to the new business scenarios

Identifies impacted audience

Is the basis of the Training Curriculum and end user training

Defines security profiles


3/17

CCA Methodology and Role Mapping


4/17

Role Mapping Deliverables

A standard SAP Job Catalogue to be used by the collaborative group

Is the basis for security Provide the framework for the Training Curriculum

Is the basis for end user readiness

The catalogue will provide the relationship connecting:

HR PositionSAP JobSAP Role

HR Position = Job Title

SAP Job = Functional Business Job

SAP Role = Physical Security Business Job

HR

Employee

Tables

SAP User

Tables

Owner HR

Owner IT


5/17

Role Mapping Tools

An Access Database will be used for recording

Audience Analysis Mapping HR Positions to SAP Jobs

Mapping SAP Jobs to Training Courses

An Excel Spreadsheet will be used to complete the design of the SAP Roles

People, Positions,Impacts

End User TrainingRequirementsIdentified

Role MappingDatabase

Jobs, Scenarios,Transactions

SecurityRequirementsIdentified

SAP JobCatalogue


6/17

Role Mapping Phases

Gather information from the business - Who, When, Howwill be impacted

Identify HR Positions, People, Jobs and Scenarios

Business Process and Audience Analysis

Create SAP Jobs based on the audience analysis and the identified scenarios

Identify Transaction Codes and Authorisation Objects

Build SAP Job Catalogue

Build SAP Roles and Assign Transactions

Unit Testing

SAP Role Build

Map HR Job Titles to a SAP Job

Map HR Positions to a SAP Job

Map SAP Jobs to training courses

Map SAP Jobs to Training Curriculum

Assign SAP Roles to SAP Jobs

DILO Testing

Assign SAP Role to SAP Job

Concurrent


7/17

IT Role Mapping Responsibilities

Audience Analysis

Drive communication of Role and Responsibility changes Map HR Positions to SAP Jobs

Change

Management Team

Audience Analysis

Identify transactions to support the process in SAP

Create SAP Jobs

Map SAP Jobs to Training Curriculum Map HR Positions to SAP Jobs

Business Process

Team

Build Training Curriculum

Map SAP Jobs to Training Curriculum

Map HR Positions to SAP Jobs

TrainingTeam

Build SAP Roles (Y Roles and Z Roles )

Identify transactions to support the process in SAP

Identify Segregation of Duty conflicts

Unit testing

Assign SAP Roles to Job / Person

Security Teamand

Systems Admin


8/17

Role MappingPhases and Collaboration

AudienceAnalysis

BusinessProcess Team

ChangeManagement

Team

Business

Build SAPJob

Catalogue


Security Team

SAP RoleBuild

Security Team


Map HRPositions to

SAP Job


Training Team

Change

ManagementTeam

Map SAPJobs toTraining

Curriculum


Training Team

AssignSecurityProfiles

Security Team


O

W

NE

R

Design Build Deploy


9/17

Role MappingAudience AnalysisDesign Phase

Business Process team to acquire overview of all scenarios

Change Management and Business Process team identify

Who, Where and How

Positions/people that perform tasks within a function/location

Transactions that will support the process in SAP

Authorisation Objects

Keep data secure (Users should only be able to maintain and view data

for which they are authorised and have received training)

Change Management enter Audience Analysis into Role Mapping database

Change Management to drive communication of role and responsibility

changes


10/17

Role MappingBuild SAP Job CatalogueDesign Phase

Business Process team complete SAP Job Catalogue for New roles and

Additions to an existing role1. The positions/people that perform the task

2. Which transactions and programs support the process in SAP

3. Determine authorisation and organisation level restrictions

Create SAP Jobs based on the Audience Analysis and the identified

business scenariosPosition Process

Description

SAP Job Transaction

Code

T-code

Description

Activity Auth

Objects &

Values

Program/

Table

Organisation

Levels

Client

System

FinanceFI

- Assistant

Accountant

Prepare

monthly

financial

reports

Finance

Assistant

Accountant

VF31 Output from

Billing

Documents

Display Default CC00, BV00,

CL00, FS00

PARCL

NT100

FinanceFI

- Assistant

Accountant

Prepare

monthly

financial

reports

Finance

Assistant

Accountant

F.20 A/R: Account

List

Change,

Display,

Execute

Default CC00, BV00,

CL00, FS00

FinanceFI

- Assistant

Accountant

Prepare

monthly

financial

reports

Finance

Assistant

Accountant

/ama/rtr_pro

c

RTR Process

Run

Execute F_FKAL_KOA ZRTR-

PROC

CC00, BV00,

CL00, FS00

SAP Job Catalogue - J:\IS\Programs\OAisys\OR3\70 - Security\Job Catalogues (New & Additional)


11/17

Role MappingBuild SAP Job Catalogue Details

Position Persons positionAuth Objects &

Values

The field(s) against which

activities are performed

Process

DescriptionJob task description

Program /

Table

Specific programs or tables

required while executing the

transaction

SAP Job Functional Business JobOrganisation

Levels

An employees area ofresponsibility

Transaction

Code

Transactions required for the

processClient System System required for this process

T-code

DescriptionTransaction description

ActivityWhat type of access required

when executing the transaction


12/17

Role MappingDerived SAP RoleDesign Phase

Business Process team complete Derived Role request for:

Existing role requiring new Organisation Level

Details taken from SAP Role master catalogue

SAP Job Organisatio

n Level

Org Level Field & Value Composite Master Role C. Role

Description

Single Master Role S. Role

Description

Payroll Officer NZ00 Company Code = 4000 - 4999 YRHRM-PY-OFFICER_CC00 Payroll Officer

ZRHRM-PY-

DISPLAY_MD_CC00

Display Payroll

Master Data


ZRHRM-PY-

MAINTAIN_MD_CC00

Maintain Payroll

Master Data


ZRHRM-PY-

PAY_SUMM_CC00

Prepare Payment

Summaries


ZRHRM-PY-

REPORTING_CC00 Payroll Reporting


ZRHRM-PY-

RUN_PAYROLL_CC00 Run Payroll


ZRHRM:PY-

SPINIFEXGRTK_CC00

SpinifexIT Generic

Reporting Toolkit

SAP Role Catalogue - J:\IS\Programs\OAisys\OR3\70 - Security\SAP Roles (Existing)


13/17

Role MappingSAP Role BuildBuild Phase

Security team and Business Process team review SAP Job Catalogue

Keep the number of roles to a minimum (less maintenance) Security team combine processes into SAP Roles

Business Process team prepare files for import into Role Mapping database

Security team build and unit test SAP Roles

Business Process team execute functional and DILO testing

Business Process Team

Support Variant Maintenance

Table Display

IT Security Team

Cross Stream Consolidation Naming Conventions

SoD Conflicts


14/17

Role MappingMap HR Positions to SAP JobsBuild Phase

Business Process team, Change Management and Training team

workshop Map HR PositionsSAP Job

Use Role Mapping database

Import HR Details

Import SAP Jobs

Map HR Positions to SAP Jobs

Run reports to identify people


15/17

Role MappingMap SAP Jobs to Training CurriculumBuild Phase

Training team build Training Curriculum based on Audience Analysis

and identified transactions

Business Process team and Training team workshop

Map SAP JobsTraining Courses

Complete details in Role Mapping database

SAP Jobs to Training Courses

Run report to identify end user training & logistics

Business Process team to sign-off Training Curriculum


16/17

Role MappingAssign Security ProfilesDeploy Phase

System Administrators:

Create new network and SAP accounts Manually assign roles to SAP accounts based on SAP Job

Run audit report on Segregation of Duty conflicts for Security

Update UAR database with SAP Jobs

Exception Cases

2IC Delegation assign authorisationspermanently

Temporary assignments Transition periods between jobs


17/17

Whats Next Role your Sleeves Up

Build SAP Job Catalogues for 2010 OAisys projects

Business Process team to assign a resource to this task

Jan

Feb

Mar

Apr

May

Jun

Jul

Aug

Brewery

New Zealand (OR1/OR2) Deployment

OR3 Finance (Q1 & Q2)

OR3 Human Resources Deployment CM

OR3 Rebates Deployment

OR3 Sales & Customer Service Deployment

OR3 Supply Chain Deployment

OR3 Finance (Q3)

OR3 Finance (Q4)

Role Mapping Process

Documents

Transcript of Role Mapping Process