Summary

In the middle of May 2022, SAP introduced into the market “S/4HANA Trusted Authorization Review (STAR)” service that is well described in the following blog:

https://blogs.sap.com/2022/05/18/s-4hana-trusted-authorization-review-star/

Considering that STAR service outcome is the static report from SAP with valuable recommendations about roles and profiles adjustment, it is also beneficial to have a tool where SAP Clients can model SAP STAR service results with their business users or IT staff, so that they could adjust SAP STAR recommendations and map them to the Client’s company’s business processes.

What is the tool?

The tool that can be used to upload STAR service results and model them is described in detail in this blog article:

https://blogs.sap.com/2022/09/23/review-sap-users-authorizations-and-prevent-license-compliance-gap/

It is possible to analyze the result for a single SAP system or create a consolidation of SAP systems for reliable aggregated analysis.

The demo tenant of Skybuffer tool for SAP Landscape Potential Use analysis is publicly available at:

https://www.skybuffer.com/sap-landscape-potential-use-demo-tenant/

Datasets

In case SAP Client would like to order SAP STAR service, it is necessary to install SAP Note 3113382 that is used to collect and extract data from the Client’s system.

Skybuffer solution supports two interfaces of data load into the tool:

• File generation by ABAP report from SAP Note 3113382. In this case it is also possible to mask usernames, so that no sensitive data could be transferred out of the system
• Direct connection to SAP on premise system via SAP Connectivity and SAP Integration Suite services from SAP BTP

The present article describes file transferring interface, so the dataset for the tool is the same as the dataset for SAP STAR service.

How to upload?

You can play with SAP STAR integration even in the public tenant; however, we recommend requesting your private tenant to prevent public access to sensitive data.

In your tenant, start SAP Landscape Potential Use application from the Launchpad:

Figure 1 SAP Landscape Potential Use application in Fiori Launchpad

Once the dashboard of systems and consolidations is opened, you can import your STAR file that is downloaded via ABAP report from SAP Note 3113382.

Figure 2 STAR File Importing Interface

The pop-up is opened to choose ZIP archive from your local PC or network:

Figure 3 STAR File Selection Screen

During importing, the information will be displayed, so you can always see which dataset is being currently imported:

Figure 4 Information about STAR file importing

Once data is uploaded, you will see the dataset number that is created for the system ID that is read from STAR file:

Figure 5 Successful data import message

Note: In case a system is new for SAP Landscape Potential Use solution, there is no need to manually create it, the tool is getting the system information from STAR file and creates system master record automatically when importing.

What can I model?

Once the dataset is uploaded, you can find it in the list of datasets for SAP system:

Figure 6 Datasets Overview

You can drill down to the dataset to see the list of users, their classification according to the roles assigned in SAP, contractual user type, date of the last login to the system:

Figure 7 List of SAP Users and Their Characteristics

When choosing the user ID, it is possible to see why, for example, the user with contractual user type “Operational” is classified as “HB-Professional”:

Figure 8 User’s SAP Roles and Profiles Analysis

Moving to the roles in Fiori view, it is possible to drill down to the roles or profiles authorization objects, review them, make changes, add new authorization objects, or mark some records as deleted. Delta records are highlighted, and it is easy to see the changes. It is also always possible to revert the changes back in one click:

Figure 9 Modeling SAP Role Changes in SAP Landscape Potential Use Tool

Influencing SAP roles or profiles context, it is possible to immediately see the recalculation of Full Use Equivalents and estimated annual costs, according to your country price list.

It is always possible to see changes in the list of users, or in the list of roles and profiles, so you will never miss your changes and you can always revert changes back to the original.

Figure 10 Delta Highlighting in the Roles View

Once your modeling is completed, it is possible to see the snapshot that is created automatically with the assignment to the dataset you have been working with, so you can compare how optimization agreed with business users that consider your company processes influences the estimated total number of FUEs and landscape costs:

Figure 11 Comparison of the Modeling Results with the Dataset

Conclusion

Using Skybuffer solution it was possible to load data from STAR file generated by SAP Note 3113382 and:

• Try changes recommended by SAP STAR service
• Model roles, profiles, and users’ authorization in the tool to tune them in to the company’s business processes in mind
• Compare the result of the modeling with the original evaluation of the dataset that is imported from SAP system