SAP Security & Position Mapping · Project Olympic (ID 121)
Generated June 25, 2026

Project Olympic — Mapping Analysis Report

This S/4HANA implementation carries 149 Business Roles across 11 business processes, but only 6 roles (4%) are linked through to a SAP Task Code — leaving 143 roles without a security chain. Three roles are fully deployed end-to-end (Contract Admin, Internal Sales Admin, Finance Controller) to 5 employees, but all 15 employee mappings sit in Pending status, and every mapped employee holds concurrent access across Construction Accounting, Order-to-Cash, and Record-to-Report — a segregation-of-duties flag ahead of go-live.

Custom labels: Business Role (Position) · SAP Task Code (Security Role) · Tcode and App (Transaction Code)

Quick actions

Jump straight to the section that matters
Key Performance Indicators
Business Roles
149
Across 11 business processes
Roles with SAP Task Code
6
4.0% coverage — 3 live + 3 global variants
Missing Task Code Link
143
96% of Business Roles have no SAP Task Code
SAP Task Codes
235
Unique security roles in project
Tcodes & Apps
599
Total unique across all chains
Employees Mapped
5
15 mappings · All status: Pending
Pending Approvals
15
0 Approved · Approval queue open
Full Chain Complete
3
Employee → Role → Task Code → Tcode
Business Process Coverage Matrix — Chain Completeness
Business Process Total Business Roles Roles with SAP Task Code SAP Task Code → Tcode & App Employees Mapped Chain Status
CA Construction Accounting 15 2 (Contract Admin variants) 136 tcodes across 2 roles 5 ✓ ✔ Full Chain
OTC Order to Cash 21 2 (Internal Sales Admin variants) 142 tcodes across 2 roles 5 ✓ ✔ Full Chain
RTR Record to Report 43 2 (Finance Controller variants) 392 tcodes across 2 roles 5 ✓ ✔ Full Chain
PTP Procure to Pay 20 0 0 ✗ No Mapping
IT IT / BASIS 23 0 0 ✗ No Mapping
PM Plant Maintenance 7 0 0 ✗ No Mapping
PTD Plant to Deliver 8 0 0 ✗ No Mapping
TM Transport Management 9 0 0 ✗ No Mapping
HTR Hire to Retire 1 0 0 ✗ No Mapping
TAX Tax 1 0 0 ✗ No Mapping
EPM Enterprise Perf. Mgmt 1 0 0 ✗ No Mapping
TOTAL 149 6 670 tcode mappings 5 employees 3 Full · 8 Gaps
SAP Task Code Mapping Volume by Business Process
RTR
392
392
OTC
142
142
CA
138
138
PTP*
0
IT*
0
PM*
0
PTD*
0
TM*
0
* Tcode & App data exists in Stracl but no Business Role → SAP Task Code link yet established
Business Role Count by Process
RTR
43
43
IT
23
23
OTC
21
21
PTP
20
20
CA
15
15
TM
9
9
PTD
8
8
PM
7
7
Top Business Roles by Headcount (Deployed)
Business Role BP SAP Role Code Employees
CA - Contract Admin (D) CA ZC0_CA_CON_ADM_A012 5
OTC - Internal Sales Admin (D) OTC ZC0_OTC_INL_SAL_ADM_A012 5
RTR - Finance Controller (D) RTR ZC0_RTR_FIN_CRL_1360 5
All other roles (146) 0
Only 3 of 149 Business Roles have employee assignments. All 15 mappings are in Pending status.
Multi-Role Employee Distribution
Employee ID Roles Assigned Processes
Aalijah Hooks 00036852 3 roles CA, OTC, RTR
Kasra SM 182291 3 roles CA, OTC, RTR
Gabriel Romero 178538 3 roles CA, OTC, RTR
Douglas Chang 158567 3 roles CA, OTC, RTR
Ashley Smallwood 182498 3 roles CA, OTC, RTR
⚡ All 5 employees hold 3 roles each, spanning CA + OTC + RTR — flag for SOD review.
Tcode & App Type Breakdown (2,352 total mappings)
2,352 mappings
Unclassified: 1,633 (69.4%)
S4 / Fiori: 308 (13.1%)
EWM: 118 (5.0%)
SAP GUI: 153 (6.5%)
BlackLine: 59 (2.5%)
Other (TM, EPM, SAC…): 81 (3.5%)
⚡ 69% of Tcode & App mappings have no type classification — type tagging recommended before training curriculum design.
Chain Completion Progress
Business Roles → SAP Task Code coverage4%
6 of 149 Business Roles linked
SAP Task Codes → Tcode & App coverage100%
All 6 mapped roles have Tcode & App assignments
Employee → Business Role assignments~3%
5 unique employees assigned across 3 roles
Mapping Approval Rate0%
0 of 15 employee mappings approved · All Pending
Full 4-Layer Chain (of 3 deployed roles)100%
All 3 deployed roles have complete Employee → Tcode chain
⚠ Role Assignment Gaps — Missing SAP Task Code Links
🚨

143 Business Roles have no SAP Task Code assignment

These roles exist in Stracl but have no Business Role → SAP Task Code mapping established. Affected processes: PTP (20), IT (23), PM (7), PTD (8), TM (9), HTR (1), TAX (1), EPM (1) plus unlinked variants in CA, OTC, RTR. Without this link, training curricula cannot be generated, employees cannot be assigned, and the security chain is incomplete for go-live readiness.

SOD Risk: All 5 employees hold concurrent CA + OTC + RTR roles

Every mapped employee (Aalijah Hooks, Kasra SM, Gabriel Romero, Douglas Chang, Ashley Smallwood) is assigned to Business Roles spanning Construction Accounting, Order-to-Cash, and Record-to-Report simultaneously. The CA - Contract Admin role explicitly notes SOX SOD conflicts with Construction Accountant. Cross-stream access at this breadth requires formal SOD conflict analysis and documented mitigating controls before go-live approval.

All 15 employee-role mappings remain in Pending status

No mappings have been approved. With go-live approaching, approvals must be progressed through the workflow. Recommend prioritising approval of the 5 employees in RTR - Finance Controller (D), which carries the largest Tcode & App footprint (196 SAP Task Codes, 541 Tcode & Apps).

★ T-Code Spotlight — Top 3 Deployed Business Roles

For each deployed Business Role, three highlighted Tcode & Apps: ★ train first, ⚡ training risk, ⚠ handle with care.

CA - Contract Admin (D)
CA
ZC0_CA_CON_ADM_A012 · 69 SAP Task Codes · 156 Tcode & Apps · 5 employees
Train First
F2133
Commercial Projects – Multiproject Overview
ZD2_CA_CA_DSP_PRJ_A012
This Fiori tile gives the Contract Admin their primary project visibility — seeing all construction jobs, budget vs actuals, and billing status in one place. It's read-only and low-risk, making it the ideal first session in any training plan. Mastery here unlocks understanding for every other CA tcode.
Hardest to Learn
AKE7
PCA Transfer Prices: Display Prices
ZD3_CA_CA_MNG_PRJ_A012
Profit Centre Accounting transfer pricing sits at the intersection of CA and controlling, and requires solid understanding of internal cost allocation, legal entity structures, and elimination rules. Misreading these values is a common source of period-close confusion. Allocate dedicated training time; don't assume FI background covers this.
Handle With Care
F0862
My Inbox – Approve Sales Orders
ZD3_CA_JB_MNG_SAL_ORD_A012
This is an approval action, not just a display. A Contract Admin who also holds OTC Sales Order creation access (as all 5 employees do) creates a SOD conflict — the same person can create and approve a sales order. Recommended control: two-person review for any approvals, and GRC risk exception documentation before go-live.
OTC - Internal Sales Admin (D)
OTC
ZC0_OTC_INL_SAL_ADM_A012 · 71 SAP Task Codes · 104 Tcode & Apps · 5 employees
Train First
VF03
Display Billing Document / Customer Hierarchy
ZD2_OTC_BL_DSP_BL_A012
VF03 is the most frequently referenced OTC display transaction — every other billing or AR task feeds from understanding what a completed billing document looks like. It's display-only, safe for early training, and gives the Internal Sales Admin the context to navigate disputes, reconciliation queries, and cash application questions.
Hardest to Learn
VA01
Create Sales Order
ZD3_OTC_SO_MNG_SAL_ORD_A012
Sales order creation in S/4HANA involves pricing conditions, availability checks, shipping point determination, and credit limit evaluation — all of which behave differently post-migration. Users coming from legacy ERP often assume their prior approach still works. Budget 2–3 hands-on exercises in a training environment; do not skip end-to-end scenario practice.
Handle With Care
S_ALR_87012182
Display Changes to Customers
ZD2_OTC_ALL_DSP_RPT_A012
This report exposes full customer master change history including credit limits, payment terms, and account group changes. In the wrong hands it enables targeted data harvesting for fraud or social engineering. Ensure users understand the data privacy and GDPR sensitivity of customer change logs; access should be reviewed quarterly against user justification.
RTR - Finance Controller (D)
RTR
ZC0_RTR_FIN_CRL_1360 · 196 SAP Task Codes · 541 Tcode & Apps · 5 employees
Train First
AB03
Display Asset Document
ZD2_RTR_MD_DSP_AST_MD_1360
With 65 Tcode & Apps, the asset display role is the backbone of the Finance Controller's read access across fixed assets. Starting training here gives controllers orientation across the full asset master — useful as a reference point when they later navigate depreciation runs, capitalisation postings, and period-close. It is entirely read-only and zero-risk for an initial session.
Hardest to Learn
ZR2R_E_MR21
Material Price Change
ZD3_RTR_MD_MNG_MAT_PRC_1360
A custom Z-transaction for material price changes, this carries irreversible financial impact — it reprices inventory at standard cost across all valuated stock. Running it incorrectly or at the wrong period can trigger massive COGS restatements. Training must include a controlled simulation, clear period-lock context, and mandatory dual-approval process sign-off before any live execution.
Handle With Care
S_ALR_87013571
Project Revenues and Earnings – Actual/Planned Period Comparison
ZD2_CA_CA_DSP_PRJ_A012
This report exposes unreleased project revenue forecasts and internal margin data — highly sensitive for a publicly listed company. The Finance Controller holds this alongside full RTR access, meaning they can correlate project profitability with GL postings. Classify as material non-public information (MNPI) sensitive; restrict ad-hoc export and ensure insider trading policy acknowledgement is part of go-live clearance.
Prepared by the Stracl Mapping module · Project Olympic (ID 121) · S/4HANA Implementation · Generated June 25, 2026 Labels: Business Role (Position) · SAP Task Code (Security Role) · Tcode and App (Transaction Code) — Project Olympic custom labels