SAP Security & GRC

Technical Series: How to Make use of SAP SU24 Variants

Soterion Season 2 Episode 4

Listen to the SAP Security & GRC podcast – helping you on your journey to effective access risk management in SAP. 
 

In this session, we walk through a practical, real-world demonstration of how SU24 authorization defaults and SU24 variants can significantly reduce manual maintenance when building SAP roles. 
 

Using the widely-used MIGO transaction as an example, we show you how different business processes (such as Goods Receipts and Goods Issues) often require different movement types — and how SU24 variants make it possible to standardise and automate these differences cleanly. 

What you’ll learn from this episode: 

🔹 How SU24 authorisation defaults work and why they’re essential for effective SAP design, with a low support burden.
🔹 The problem with repeated manual maintenance when using MIGO across             multiple roles
🔹 How to create and transport SU24 variants for different business scenarios
🔹 How variants ensure consistency across role builds while reducing effort and        risk
🔹 A step-by-step walkthrough of building two roles using variants for GR and GI 
 
Don’t miss out on insights from: 

  • Emile Steyn - Business Unit Manager – Soterion Benelux 
  • Ross Robertson –  Senior SAP Authorisations Consultant - Soterion