Bala Tripura Sundari R

• Experience in SAP-based applications like SAP S/4 HANA, SAP ECC, SAP GRC, SAP Fiori, SAP BW, SAC, SAP Solution Manager, and HANA Analytics.
• Implement SAP GRC AC (Access Control) tool for SAP-based solutions to automate user access management, emergency access management, access risk analysis, and business role management.
• Extensive experience in Requirement gathering, Design, Development, and Maintenance of SAP application security.
• Interfaced extensively with clients to gain insight and develop solutions to meet customer business needs across the entire SAP landscape.
• Extensive user and role maintenance experience.
• Broad experience in maintaining single, composite, and derived roles using Profile Generator (PFCG).
• Performed User Administration including creating users, creating roles, assigning profiles, and assigning roles.
• Assigning authorization objects to roles using a profile generator.
• Good knowledge of recording and running GUI scripts for mass role creation.
• Created RFCs and maintained connectors in the GRC system.
• Implement the GRC 12.0 suite of applications to automate the below modules.

o User access management (to automate user access provisioning)
o Emergency access management (to automate firefighter access provisioning)
o Business role management (to automate role changes)
o Access risks analysis (to analyze segregation of duty violations).

• Managed SAP Datasphere role changes and resolved connectivity issues to ensure secure and seamless data integration within SAP environments.

• Supported security for SAP S/4 HANA, SAP ECC, SAP Fiori, SAP BW, SOLMAN, SAC, GRC Access Control, MDG, and HANA database solutions for business processes.
• Design business and task roles for reporting applications, like ECC, GRC, and SAC.
• Created roles for Central Hub, Fiori, and S/4 HANA.
• Extensively worked in SAP Security Administration and Authorization, including Activity Groups, Profile Generator (PFCG), Role/Content Administration, and User Administration, and extensive use of transactions like SUIM, PFCG, SU01, SU10, SU24, ST01, and SU53.
• Created authorization groups to restrict table access and review/correction of sensitive authorizations (S_TABU_DIS, etc.), including the assignment of authorization for sensitive tables.
• User maintenance (user creation, deletion, lockdown, activation, password management).
• Risk analysis at the user level and role level.
• Performed mass user lock using SU10, except for the Basis and security team for Basis-related activities.
• Used transaction RSECADMIN to create analysis authorization, and S_RS_AUTH to assign analysis authorization to end-user roles.
• Updated org values using PFCGMASSVAL in S/4HANA, and used GUI scripts for role creations.
• Collaborated with cross-functional teams to design secure solutions for new business initiatives, ensuring compliance with industry standards.