Md Umer Email & Phone Number

Kolkata, West Bengal, India

India

SAP Security consultant with responsibilities of ARA, EAM, BI, HR, Role Management, authorization issue, T Code maintenance, transport request and User maintenance.● User administration involving creating users, modifying users, copying users, deleting users, assigning roles & profiles using SU01.● Responsible for day-to-day technical support and resolution of security authorization issues, troubleshooting SAP R3/ECC and BI related security problems.● Creation and maintenance of Single, Composite and Derived roles.● Preparation of Users/Role Report via SUIM/USR02 table based on the client requirement● Locking/unlocking of users during refresh, cutover activities etc.● Support for role upload/download to/from the system.● Good experience in user administration activities through CUA.● Day to day technical support and resolution of issues and the missing Authorizations after analyzing the SU53 dump.● Worked with the P_PERNR, P_ORGIN, P_ORGINCON, P_ORGXXCON objects in designing the HCM Roles● ● Troubleshoot user roles, tracing the users, security authorization objects and custom reporting authorization objects using (SUIM, SU53, RSECADMIN, and ST01) in different modules● Restricted and monitored critical authorization objects such as S_DEVELOP, S_PROGRAM and S_TABU_DIS etc.● Securing SAP* against misuse.● Transport creation for roles and move to other systems.● Configured GRC AC Emergency Access Management (EAM), Access Risk Analysis (ARA).● Mitigation and remediation of users and roles for SOX using User/Role Analysis in ARA.● Producing SOD Analytical Reports (both Summary and Detail) against Users, User Groups, Roles and profiles using RAR.● Identifying potential SOD issues before assigning new roles to the user.● Designed roles for new projects following proper naming conventions and robust security standards.● Re-designed existing roles which were poorly designed

India

Sap security Consultant with GRC, Authorization, EAM, ARA, HI, BI. ● Trouble shooting and fixing authorization issues in production, Quality, Development ● Creation of Roles (Single, Composite & Derived, Master, object type roles).● Identified existing SOD violations under risk analysis and remediation including evaluation of users & roles.● Worked on standards/ conventions encompassing role development & support.● Maintained updated knowledge of SOD (User & Role) level analysis, sensitive transactions analysis.● Supporting GRC Development and Production systems.● Administration of EAM and ARM in GRC 10.0.● User creation in NWBC using new user account form or access request creation form and change user request form.● Role import from backend systems using Role import option in NWBC (Using Role attribute template).● Run Risk analysis on user level and role level.● Run back ground jobs in full sync mode and incremental mode.● Firefighter assignment to FF ID.● Controller assignment to FF ID.● Owner Assignment to FF ID.● Create mitigation control id and update mitigation approver and mitigation monitor.● Perform user terminate activity as per the reports from managers.● Create customizing, workbench request using SE09/SE10.● Checking transport dependency using SE03.● Role comparison from ECC Development to Production in solution manager to ensure that there should not be any additional objects in the role (production system).● Table level and program level access restriction using S_TABU_NAM, S_PROGRAM.● Maintain role owners in Access control owners (NWBC).● Setup FF IDs and run FF LOG SYNC Update.● UAR reviews and access removal based on the UAR Report during annual access review.● MSMP Workflow updates as and when required.● Update role owners and approver delegation.● Role remediation and mitigation as per SOD Management process.● Perform role level and user level simulation.

India

● Locking/unlocking of users during refresh, cutover activities etc.● Support for role upload/download to/from the system.● Good experience in user administration activities through CUA.● Firefighter assignment to FF ID.● Controller assignment to FF ID.● Owner Assignment to FF ID.● Day to day technical support and resolution of issues and the missing Authorizations after analyzing the SU53 dump.● Worked with the P_PERNR, P_ORGIN, P_ORGINCON, P_ORGXXCON objects in designing the HCM Roles● Create mitigation control id and update mitigation approver and mitigation monitor.● Create customizing, workbench request using SE09/SE10.● Table level and program level access restriction using S_TABU_NAM, S_PROGRAM.● Maintain role owners in Access control owners (NWBC).● Restricted and monitored critical authorization objects such as S_DEVELOP, S_PROGRAM and S_TABU_DIS etc.● Checking transport dependency using SE03.● Role comparison from ECC Development to Production in solution manager to ensure that there should not be any additional objects in the role (production system).● Update role owners and approver delegation.● Role remediation and mitigation as per SOD Management process.