ArchiTech IT

Course information

SAP S4 HANA and Fiori Security: Securing SAP Fiori system ensures that the information and processes support your business needs, are secured without any unauthorized access to critical information. You must ensure that the user errors, negligence, or attempted manipulation of your system must not result in loss of information or processing time.

SAP HANA provides a facility i.e. Multitenant database, in which multiple databases can be created on single SAP HANA System. It is known as multitenant database container. So SAP HANA provide all security related feature for all multitenant database container.

SAP HANA Provide following security-related feature –

• User and Role Management
• Authorization
• Authentication
• Encryption of data in Persistence Layer
• Encryption of data in Network Layer

SAP HANA Authentication

Database user identifies who is accessing the SAP HANA Database. It is verified through a process Named “Authentication.” SAP HANA support many authentication methods. Single Sign-on (SSO) are used to integrate several Authentication method.

SAP HANA Authorization

SAP HANA Authorization is required when a user using client interface (JDBC, ODBC, or HTTP) to access the SAP HANA database.

Depending on the authorization provided to the user, it can perform database operations on the database object. This authorization is called, “privileges.

The Privileges can be granted to the user directly or indirectly (through roles). All Privileges assign to users are combined as a single unit.

SAP S/4HANA uses the same security model as traditional ABAP applications. End users in S/4HANA Application are associated with NetWeaver security functions. SAP S/4HANA Authorizations are based on “classical” ABAP like PFCG / SU01 / SU22 but there are many top

SAP S/4 HANA Course Content

• Introduction to SAP S/4 HANA
• Versions of SAP S/4 HANA
• Difference between SAP S/4 HANA, SAP ECC and SAP HANA DB
• Architecture of SAP S/4 HANA

SAP S/4HANA System Landscape

Authorizations in SAP S/4 HANA Projects

• Authorization Object S_SERVICE for OData in general (OData Service, TADIR IWSG, *)
• Transactions
• General maintenance roles, e.g. PFCG, SUIM, SU22, SU24, SU25, STAUTHTRACE ...
• /IWFND/MAINT_SERVICE
• /Ul2/FLPD_CUST
• /UI2/FLP
• /Ul2/PAGE_BUILDER_PERS
• /UI2/PAGE_BUILDER_CONF
• /UI2/PAGE_BUILDER_CUST             
• /UI2/TRANSPORT                               
• /UI2/INTEROP      
• SICF (Activity03- Display)
• Authorization Object
• S_RFCACL for Trusted Connections
• S_SERVICE for OData in general (OData Service, TADIR IWSV, '')

Transport Authorization components

New Features for Role Development

• Enhanced Functions
• Search Authorizations to start applications
• Mass update of role menu 
• Create Back-end roles following Front-end Roles

SAP Fiori and the Evolution of User Experience 

• Strategy
• SAP Fiori UX Design Principles

Architecture and Integration 

• SAP Fiori Launchpad
• SAP Web Dispatcher
• Communication Channels
• SAP Fiori App-Supported Browsers and OS 
• SAP Fiori, Cloud Edition

Types of SAP Fiori Apps 

• Transactional Apps
• Fact Sheet Apps
• Analytical Apps
• SAP GUI

Related SAP Technologies 

• SAPUI5
• OData and SAP Gateway
• SAP HANA XS

Implementation Options 

• ABAP Environment
• SAP HANA Database
• SAP HANA XS
• SAP S/4HANA           

Deployment Options

• Central Hub Deployment 
• Embedded Deployment

Apps Reference Library 

Configuration

• SAP Fiori Launchpad
• SAP Gateway 
• Embedded Search 
• SAP S/4 HANA 
• Configuration Using the Task List

User Authorizations and Management 

• User Management
• User Authorization

Implementing Transactional Apps

• Activating the SAPUI5 Component 
• Activating the OData Services 
• ABAP Front-End Roles 
• Copy Business Catalog Role 
• Start Authorization
• Assign Roles to Users
• S/4 HANA Back-End Roles 
• Copy the Back-End Role
• Assigning Roles to Users
• Running the App 

Custom Business Catalogs and Roles

• Create a New Launchpad and Application
• Create and Assign a Transport Request
• Create a New Catalog
• Create New Target Mapping
• Add a Static Tile
• Create the Custom Role and Add the Catalog 

Implementing Fact Sheet Apps

• App Activation Tool 
• Activating the SAPUI5 Component  ?Activating OData Services 
• Assign S/4 HANA Back-End Roles 
• Creating Search Connectors  ?Create Connectors Manually
• Create Connectors Automatically
• Indexing Search Connectors 
• Running the App 

Implementing Analytical Apps

• Overview 
• Implementation Prerequisites 
• Analytical Apps
• Activate the SAPUI5 Application  ?Assign the SAP HANA Role
• Assign the App-Specific Catalog Role
• Add the App to SAP Fiori Launchpad