SAP Security Roles and Authorisation
Every SAP project involves security — roles, profiles, authorization objects, SU24, PFCG. But very few people have a clear mental model of how they fit together. This post explains SAP's authorisation concept from the ground up: what an authorization object is, how roles work, what PFCG and SU24 do, and how Fiori adds a layer on top — written for consultants at every level.