Bethel Shumba

A Certified and Resourceful SAP Security & SAP GRC AC Consultant experienced over 10 years. Hands-on understanding of SAP Security aspects like User and role administration, 

SAP Authorizations, SAP BW/BI Security, SAP S/4 HANA Security, SAP HANA Database Security, SAP GRC Access Control Implementations with modules FICO, SD, MM, PP, QM, SCM, CRM, HCM (Payroll, TM, OM and Talent), SAP Security Upgrades, Security and SAP Audits. Troubleshooting, tracing, and GRC components like ARM, BRM, EAM & ARA. Skilled team player with a strong understanding and can act depending on the complexity of the situation to support Go-live and post-live situations.

• Required to work as a SAP Security & GRC Consultant, for User and Profile Maintenance in (SAP ERP/S/4 Hana)
• Understanding the Role design Methodology and identifying the client’s requirements.
• Worked on Role Maintenance, Transaction codes, Profiles, Authorization objects, Authorization groups, Single Roles, Composite Roles, Derived Roles, and User Maintenance.
• User administration involving creation/deletion/locking/modifying users- using SU01, SU10 
• Role Administration using HR Role Position Assignment (PO13) PFCG, Profile comparisons using PFUD
• Worked with security related tables such as AGR_TCODES, AGR_USER, and AGR_DEFINE etc.
• Used AGR*, USR*, USH* Tables and SUIM for different reporting and analysing purposes.
• Restriction of Org and Non-org authorization values in Master and Derived roles
• Good experience in structural authorization security of HCM module and troubleshoot user ESS/MSS Portals
• Experience in PA20, PA30, PA40, PO03, PO10, PO13, PPOSE.
• Redesigned and developed roles and moved it to Quality for UAT.
• Extensively used the following transactions on daily basis - SU01, PFCG, SU53, SU56, SU24, SUIM, SUGR, SE16 and ST01, Stauthtrace for providing technical support to users.
• Monitoring of critical transaction codes and ensures that they are assigned to correct users only.
• Schedule the various background jobs to perform the risk analysis based on business unit. 
• Extensive knowledge in using ChaRM in Solution Manager (SolMan) for change requests.
• Worked with USSM User - System Licence report based on Business Requirements.
• Supporting of SAP S/4 Hana Spice Project: Project Completed
• Experience in working as a Fiori and SAP S/4Hana Security and Authorisation Consultant.
• Well versed in - /UI2/FLPD_CUST, /UI2/FLPD_CONF, /UI2/FLP, /n/IWFND/ERROR_LOG, etc
• Worked in SAP S/4 Hana Security using Hana Studio - configured standard and assigned. Technical and restricted users. 
• Working closely with Business Process owners (BPOs)/SMEs, Technical teams, Basis Team, Functional teams, COUPA, OSGD Projects, and Open Text to understand security requirements and recommend best security practices.
• Role administration, designing, implementing, testing (UAT), and change management in Master/Derived Roles, Single roles, and composite roles.
• Experienced in the areas of User administration, Role management, development, and troubleshooting, Testing, and reports generation in Security environment.
• Experience includes analysis, development, and maintenance of SAP Security in SAP R/3, S/4 HANA, and Fiori.
• SAP Fiori Security – Role Administration with catalogs and groups, troubleshooting authorization issues with Fiori apps.
• Fiori role design - Catalogues, Groups, 0DATA services, Tiles, Apps, and Enterprise Search entities.
• Troubleshooting, Identifying, and activating the missing OData Services, and authorization issues in /IWFND/ERROR LOG.
• Optimizing the User Experience by reducing or removing unwanted groups and tiles within the groups to improve performance.
• Working with the Fiori Config team to identify the areas where the inactive apps are generating frontend or backend authorization issues and customizing the Catalogues to remove inactive apps.

Implementation and Configuration of SAP GRC AC 12 

• Implementation and configured all four components ARA, ARM, BRM, and EAM during GRC Projects.
• Experience in management of (ARM) and Emergency Access Management (EAM)
• Supported Emergency Access Management, Access Risk Analysis & Business Role Management in GRC 12.0 Access Control.