SoD Matrix on SAP transactions

Question

Hi all, 
 We are currently trying to configure the SoD matrix, but in our specific case we would like to configure this matrix based on SAP transactions instead of SAP roles. However, before importing the SAP transactions in One Identity Manager, we would like to be sure about the possibility to create the SoD matrix with transactions. 
 Is it necessary to configure it on SAP roles or we could also use transactions? 
 We are using Identity Manager On Demand - Starling Edition v.9.2. 
 Thank you in advance for any information, Michaela

Jos Groenewegen · Answer

Hi Michaela, 
 Assuming you also have the SAP module available, the short answer is: You can set up an SoD Matrix based on SAP Transaction's using SAP function's. 
 My main question would be if you've read this: https://support.oneidentity.com/technical-documents/identity-manager/9.0%20lts/administration-guide-for-the-sap-r3-compliance-add-on#TOPIC-1850366 as you can see there are a lot of options for SAP SoD matrixes. Take some time to read it as hopefully this'll point you in the right direction. Given the complexity of SAP systems primarily this isn't an item where I see a simple 10 line answer on how to do this (other then, yes it's possible ;) ). 
 
 But hopefully the 'how to' for SAP compliance is the starting point you need.

Endpoint Privilege Management

SoD Matrix on SAP transactions