Skip to main content

STAR role evaluation

Access through: Reports > Reports for ABAP systems > S/4HANA Trusted Authorization Review (STAR) > STAR role evaluation

The STAR role evaluation report is a part of the S/4HANA Trusted Authorization Review (STAR) feature in Snow Optimizer for SAP® Software. It shows a simulation of the S/4HANA license requirements based on roles by comparing the current ECC roles and profiles to an authorization object classification on the selected data sources. This allows you to analyze and optimize the roles. For example, you can check which role might result in a high license type and adjust the role objects to match a less expensive license type. After executing the report, you can save and export the report results.

note
  • To execute this report, you have to classify the selected system according to the selected authorization object classification.
  • We strongly recommend that you carefully review the S/4HANA license types suggested by the report result.

Selection criteria​

In addition to the standard selections, the selection screen of the report has the following selections:

Classification

You can select the authorization object classification.

Roles and profiles

You can select the roles and profiles to be evaluated. You can select to also show roles that are not assigned.

You can execute this report in the background.

Result​

The report result shows the roles and profiles per system with the suggested target license type based on the included authorizations. It also shows how many users have the role or profile assigned. Composite roles are resolved to display the classification of the contained single roles.

  • The Ratio column shows how many of the assigned objects match the target license type.
  • The Quick win column shows how many users have this role and only this role leads to a higher license type. If the role was deactivated for an account, it resulted directly in a lower license type.
  • The Possible use determined column shows if at least for one authorization object usage is detected.
  • The Possible usage target classification column shows if at least one of the used objects is classified with the target license type.
  • The No usage check column shows whether a usage check was performed. If no usage check was performed, either no usage check with the STAR execute classification report was performed, or the checked object has no recommended license type. Only classified objects are checked.

Functions available in the report result:

  • Select Export for SAP STAR Service to export the report results to a file with encrypted user IDs and blank user names.

    note

    • A single export file is created for each analyzed system.

    • You can optionally encrypt the output files with a password.

  • Select Export Snow Optimizer role classification to save the report results in an ABAP role classification.

  • Select a role or profile to show an Object list with all objects assigned to the selected role or profile. In addition object information, the table columns show the following information:

    • Possible usage shows if at least for one authorization object usage is detected.
    • Transactions: Select the icon to show the transactions linked to the object.
    • Services: Select the icon to show the OData services and Web Dynpro applications linked to the object.