Korrapati

SAP Security and GRC Consultant with 5+ years of experience in SAP Security Administration in ECC6.0, SAP GRC Access Control in 12.0, SAP Fiori Security, and SAP ECC environments. Experienced in user administration, role design, authorization concepts, SU24, PFCG, GRC ARM, ARA, EAM, BRM, and Fiori catalog and group management. Skilled in implementing SAP security best practices, resolving authorization issues, performing audits, and supporting end-to-end security operations for ECC and S/4HANA landscapes.

SAP GRC Consultant Senior Software Engineer - Arcelor Mittal Global Business - Hyderabad

(2025-07 - 2026-03)

• Managed end-to-end User and Role administration across SAP ECC, S4HANA, FIORI environments.
• Resolved P1 and P2 incidents on authorization and roles within SLA using ServiceNow ensuring minimizing business disruptions.
• Implemented and Managed SAP GRC access control modules, including Rule set customization and SOD conflict analysis.
• Designed, Created, and Maintained Single, Derived and Composite roles as per business requirements, adhering to lease privilege and SOD principles.
• Handled authorization issue analysis and resolution using SU53, STAUTHTRACE, ST01, SUIM and other standard tools.
• Conducted GRC risk analysis, mitigation, and remediation activities for both new and existing users/roles.
• Facilitated role redesign and cleanup activities to align with business changes and audit compliance.
• Maintained and monitored Firefighter IDs and logs through GRC Emergency Access Management (EAM).
• Created and Supported Mass user and role changes using SU10 and PFCG. Integrated and Supported FIORI Security by managing OData services, Catalog and Group authorizations.
• Implemented FIORI Security architecture including role mapping for catalogs, Groups with Odata service authorizations.
• Troubleshooting Backend & Frontend Authorization issue.
• Provided audit and compliance support including Security documentation.
• Restrict table access using S_TABU_DIS through Authorization groups and knowledge on S_TABU_NAM. Role modifications based on proper approvals and creating transport request for roles.
• Participating in internal training/knowledge transfer to new team members and providing hands on experience. Handling support tickets- related to issues like user Deprovision, missing authorization, logon failures, password reset etc.
• Effective communication, oral and written skills, to complement client management and delivering excellent customer support.
• Troubleshooting and analyzing as per request/ error screenshots and resolving tickets within SLA limit.

SAP Security & GRC Consultant - Capgemini - Hyderabad

(2022-03 - 2025-05)

• Managed SAP Security across Development, Quality, and Production systems.
• Created and maintained Single, Composite, and Derived Roles using PFCG.
• Performed user administration including creation, modification, lock/unlock, and deletion.
• Assigned roles based on business requirements.
• Conducted Segregation of Duties (SoD) analysis using SAP GRC ARA.
• Processed user access requests through ARM workflow.
• Managed Firefighter IDs and Emergency Access Management.
• Performed periodic user access reviews.
• Worked with business teams to resolve authorization issues.
• Used SU53 and ST01 for authorization troubleshooting.
• Maintained SU24 authorization proposals.
• Configured organizational level restrictions.
• Created transport requests and migrated security roles.
• Supported SAP Fiori security by assigning catalogs, groups, and OData services.
• Activated SICF services required for Fiori applications.
• Worked with Basis team during system refreshes and client copies.
• Participated in SAP security audits and compliance activities.
• Supported production incidents within SLA timelines.

SAP Security - Sysarket Datasol Private Limited - Hyderabad

(2020-08 - 2022-02)

• Worked in Security part like Create/ Add/Delete/Manage Users, Assigning roles and space management.
• Supported audit activities and prepared security reports.
• Resolved authorisation issues and production incidents.
• Worked closely with business users and functional consultants.
• Participated in system enhancements and go-live activities

B. Tech - Technology - Narasaraopet Institute of Technology (2018)