Listen to the SAP Security & GRC podcast – helping you on your journey to effective access risk management in SAP.

In this session Ross Robertson focuses on the creation, maintenance, and administration of Fiori Spaces and Pages, which determine how SAP Fiori applications are organised and presented to end users.

🔑Key Takeaways:

• Fiori Spaces are the top level of the Launchpad structure and are used to organise business functions for end users.

• Pages and Sections help structure apps within a Space, making it easier for users to navigate and access the tools they need.

• Fiori Tiles are placed inside Sections and represent the individual applications users interact with.

• Keeping configurations lean and well-structured improves SAP Fiori Launchpad performance and reduces load times.

• Both Fiori Catalogues and Spaces must be assigned to roles to ensure users can access the correct apps in the Launchpad.

Through this walkthrough, viewers gain a practical understanding of how to configure Fiori Spaces and Pages effectively, ensuring users can quickly access the applications they need while avoiding performance issues caused by over-allocation of tiles and target mappings.

Don’t miss out on insights from:

• Ross Robertson – Senior SAP Authorisations Consultant - Soterion

For more episodes visit: https://soterion_sapsecuritygrc.buzzsprout.com/

Listen to the SAP Security & GRC podcast – helping you on your journey to effective access risk management in SAP.

In this short, practical session, Ross Robertson will walk through how to create a custom SAP Fiori catalog to give users access to specific apps, tiles, and target mappings — using SAP-recommended best practices.

Key takeaways:

· An overview of SAP Fiori catalogs and their role in authorisation and UX

· How to create custom catalogs using Fiori Content Manager

· Why SAP technical catalogs should be used as references

· How to identify the correct tiles and target mappings via the SAP Fiori App Library

· A simple but critical service check to prevent broken navigation and OData issues

Don’t miss out on insights from industry expert:

· Ross Robertson – Senior SAP Consultant - Soterion

For more episodes visit: https://soterion_sapsecuritygrc.buzzsprout.com/

Listen to the SAP Security & GRC podcast – helping you on your journey to effective access risk management in SAP.

In this session, we walk through a practical, real-world demonstration of how SU24 authorization defaults and SU24 variants can significantly reduce manual maintenance when building SAP roles.

Using the widely-used MIGO transaction as an example, we show you how different business processes (such as Goods Receipts and Goods Issues) often require different movement types — and how SU24 variants make it possible to standardise and automate these differences cleanly.

What you’ll learn from this episode:

🔹 How SU24 authorisation defaults work and why they’re essential for effective SAP design, with a low support burden.
🔹 The problem with repeated manual maintenance when using MIGO across multiple roles
🔹 How to create and transport SU24 variants for different business scenarios
🔹 How variants ensure consistency across role builds while reducing effort and risk
🔹 A step-by-step walkthrough of building two roles using variants for GR and GI

Don’t miss out on insights from:

• Emile Steyn - Business Unit Manager – Soterion Benelux
• Ross Robertson – Senior SAP Authorisations Consultant - Soterion