SAP security is based on 

  1. System
    1. D = Development
    2. Q = Quality
    3. P = Production
  2. Company Code
  3. Role
  4. Userid


A user is provided with 

  • a Userid which gives access to a system (typically 'P') and 
  • one or more Company Codes and
  • one or more Roles
  • access to one or more Cost Centre groups


When asking for a new userid, it is helpful to provide these details in the body of the FD ticket, that is (a) the company code(s), the role(s) and the cost centre group(s)


The Roles are based on

  1. SAP Transaction codes
  2. Functional Roles
  3. Job Roles


SAP Transaction codes are assigned to functional roles; the functional roles are then assigned to job roles


eg The operation to void checks/cheques has the transaction code FCH3. This code is assigned to the functional role AP Check Processing. The functional role AP Check Processing is assigned to the job roles of AP Payments and AP Manager. If a user requires the code FCH3, then they need to ask for the role of AP Payments or AP Manager.