S/4HANA is not only a technology migration

A move to S/4HANA changes a lot.

Processes change.
Transactions change.
Responsibilities change.
Roles change.

But one thing often survives longer than it should:

๐—ข๐—น๐—ฑ ๐—ฎ๐—ฐ๐—ฐ๐—ฒ๐˜€๐˜€ ๐—น๐—ผ๐—ด๐—ถ๐—ฐ.

There is a natural temptation during a large transformation to move existing roles forward because they already work.

Sometimes that makes sense.

Sometimes it carries years of:

โ€ข Excessive access
โ€ข Outdated assignments
โ€ข Wildcards and broad ranges
โ€ข Redundant roles
โ€ข Old SoD conflicts
โ€ข Historical exceptions into the new environment.

That means an S/4HANA program is not just a migration project.

It is also an opportunity to ask:

โœ… What access should survive?
โœ… What should be redesigned?
โœ… What should be removed?
โœ… Which controls need to change?
โœ… What risk are we carrying into the new system?

The worst outcome is completing a major transformation and discovering that the access model underneath it still reflects the old organization.

Written by Cyril Hauppert

Helping protect companies by providing unparalleled visibility over user authorizations and the timely identification of incorrect and excessive access to critical IT systems

November 11, 2026

Tags: Audit | Compliance | S4HANA | SAP | SOD

You may also like…

Loading...