SAP Authorization Support Consultant

What you will do

The SAP Authorization Support Consultant ensures secure and efficient access to SAP systems by managing user authorizations and permissions.

What you will need

Core SAP Authorization Skills

• SAP Roles and Authorizations
• Deep understanding of role design (single/composite/derived roles)
• Experience with role creation, modification, and transport
• Knowledge of authorization objects and field values
  
  
  
  

• User Administration
• User creation, locking/unlocking, password resets
• Assignment/removal of roles and profiles
  
  
  
  

• Authorization Troubleshooting
• Reading SU53, running STAUTHTRACE/ST01 properly (filters, work process traces), using SUIM for analyzing missing fields vs missing objects, avoiding over-authorizing
• Understanding how to analyze authorization issues
• Ability to interpret logs and trace results
• Knowledge of implementing least-privilege fixes
  
  
  

🛠️ Technical Skills

• Authorization Trace and Analysis
• Use of SU53, SUIM, etc. to analyze authorization issues
• Use ST01/STAUTHTRACE to evaluate logs and trace results
• Role Design and Maintenance
• Creating and maintaining roles in PFCG with focus to avoid over-authorizing
• Understanding organizational levels and role derivation
• SAP Modules
• Familiarity with modules like FI, MM, SD, PP, etc., to understand business context
• SAP Fiori and S/4HANA
• Understanding of Fiori app authorizations and catalog/group management
• Transport Management
• Knowledge of role transport procedures and change management
  
  
  

📋 Compliance and Process Knowledge

• Audit and Compliance
• Familiarity with SoD (Segregation of Duties) principles and conflict resolution
  
  
  
  

• Understanding of company-specific and SAP best practices for security
• Supporting internal/external audits with authorization data
• Change Management Processes
• Knowledge of role transport procedures and change documentation
  
  
  

🤝 Soft Skills

• Communication Skills
• Ability to explain technical issues to non-technical users
• Problem Solving
• Ability to analyze complex authorization issues and propose solutions
• Diagnosing and resolving authorization issues efficiently
• Documentation dscipline regarding role design docs, SoD decisions, transport notes, ticket worklog
• Team Collaboration
• Work with functional and technical teams to align role requirements
• Customer Service Orientation
• Responsive and helpful in user support scenarios
• Ability to translate business requests into secure, least privilege designs
• Proactive Posture
• Clean up over-authorized roles, reduce duplicates and propose standardization
  
  
  

What you can expect

tesa is one of the worlds leading manufacturers of adhesive tape solutions, with a range of more than 7,000 products. With passion for technology, we drive innovation, reliability, and sustainability to shape a better future.

Our solutions make a difference in the work, products, and lives of our customers across a variety of industries, including Automotive, Electronics, and Home applications. With this, we address a broad segment of business customers, but also you as a private consumer.

You might be surprised to discover the many places where our adhesive solutions are at work, from the battery in your electric car, to the display of your mobile phone, and even in the elevator in your building. Wherever you look, youll find tesa - holding the world together since more than 125 years.

---