SAP GRC Consultant

Responsibilities and Duties:
1) User Administration:
a. Providing user administration, authorization administration, monitoring and security concepts in different systems.
b. Managing super user administration and monitored technical firefighter activity.
c. Performing user Administration & adding authorization to users.
d. Providing role maintenance and user administration support.
e. Creating/Modifying users via GRC 10.1 User access Templates

2) Role creation/ Management (PFCG):
a. Performing Profile Generation PFCG to create roles/profiles for various modules such as MM, FI/CO, and SD.
b. Creating single roles, Composite roles, and parent & derived roles as per company requirement using PFCG.
c. Creating new role sets for new companies/roll out projects
d. Creating single roles, composite roles and derived roles as per organizational structure in R/3systems using PFCG.
e. Assigning/Removing roles to/from users using the GRC 10.1 tool
f. Importing newly created roles into the GRC 10.1 system with the appropriate approvers and functional areas as per business requirements

3) Authorization Checks (Su53):
a. Assisting users in troubleshooting and identifying authorization issues using authority checks (SU53), system trace (ST01) and STAUTHTRACE transactions.
b. Working on access/authorization related issues using SU53 report.
c. Identifying missing authorizations with the use of SU53; upon seeking manager approval, maintained those using SU24, PFCG and role assignment.
d. Creating & managing the scheduling of batch jobs working with T-Codes SU53 and SUIM for giving authorizations.

4) Authorization Objects:
a. Testing customized Z transactions for functionality and added manually the authorization objects and field values as per security guidelines.
b. Checking for authorization objects in ABAP code for Z-transactions and maintained them in SU24 for the respective Z-transactions
c. Regenerating profiles of all associated roles after maintaining new authorization objects/values in SU24
d. Protecting critical t-codes and critical authorization objects against unauthorized access.
e. Working effectively with functional team MM, FI, SD to maintain correct authorization objects into newly developed transactions

5) GRC 12:-
a. Firefighter creation and assignment, log checking
b. ARM request monitoring and processing
c. Understanding of Workflows and experience in configuring Workflows in GRC
d. Hands on experience in GRC MSMP configurations

Skills : - SAP GRC 10.1/12, User Administration, Role Management (PFCG), Authorization Checks (SU53), MSMP Workflow Configuration.