The JAM Toolkit is a central repository for SAP Access Design and can be delivered pre-populated with an S/4 HANA (1809) and Task-Based ECC template to accelerate the access design and implementation process.

Whether a business is undergoing a greenfield or brownfield access design journey, deciding on the correct design strategy is paramount. Once projects are underway, changing or implementing a new SAP security design will be costly and will add addional risk. Very few will have the appetite to put it right and often suffer the pains of managing an inefficient design for many years as a result.

The JAM Toolkit supports three maturity steps for ERP Access, Design, Deployment and Operations; the first of which is key to any successful access management future.

JAMTEC have defined two design templates which can be adopted to deliver an efficient access design with minimal customisation; the S/4 HANA template for customers on the implementation journey and the Business Suite ECC task-based template for customers looking to gain control and relieve the pains of their existing access design.

Key factors that should influence access design strategy:

  • What is the Access Design RACI of the business? This can vary considerably between companies.
  • What is the Operating Model in relation to high level organisation responsibilities and transactional data control?
  • Business Processes: Are they documented and what level of detail is available to support access design?
  • How complex is the ERP landscape? NetWeaver, S/4 HANA. ECC and cloud applications.
  • Which access and identity management tools are available (GRC, IdM, IAM, SailPoint etc.)
  • What compliance regulations are mandatory and what operating standards need to be met?
  • What is the depth and skill level of the access support model?
  • What is the expected volume of change management due to acquisitions, joint ventures and divestments?

The introduction of S/4 HANA provides an opportunity to approach access design with a new and effective strategy.

‘Model Company’ is a term often used when implementing S/4 HANA and encourages customers to adopt rather than adapt the S/4 template. The JAM Toolkit can be delivered prepopulated with the S/4 HANA access design allowing those customers following ‘Model Company’ to accelerate their access deployments.

S/4 HANA access is heavily influenced by the user experience (UX) with intuitive Fiori apps and simple navigation paths, all of which is configured within the authorisation role. As a result, adopting the S/4 HANA role templates becomes an attractive option.

Existing Business Suite SAP Customers have until 2027 (with optional extension to 2030) to implement of S/4 HANA which demonstrates that ECC still remains a big part of the SAP community.

There are several effective access design strategies that can be used by a business. The two most common are process driven and task based.  Both of these bring their own benefits and should be chosen using the key factors and influences listed above. Process driven designs vary considerably across industry and businesses and cannot be templated effectively for general use. Task-Based design are more standardised and easier to adopt.

The JAM Toolkit repository can be pre-populated with a task-based access design. Roles come free of segregation of duty violations due to the nature of a task-based strategy and can be loaded directly into PFCG if required. Jobs are also available to guide customers of potential role grouping to reflect their end-users’ roles and responsibilities.

On February 4, 2020, …. “SAP will provide mainstream maintenance for SAP Business Suite 7 core applications until end of 2027. This offboarding phase will be followed by optional extended maintenance until end of 2030.” (reference:

If you’re interested in a demonstration of the JAM Toolkit features and reviewing the S/4 HANA or Business Suite (ECC) task-based design please contact us for further details. Thanks.