Manish Purkayastha

Package App Development Analyst – SAP Security & GRC - Accenture

(2022-02)

Delivered SAP Security & GRC engagements across three global clients — Microsoft, Carlsberg, and Indorama Ventures

SAP Fiori & S/4HANA Security Consultant - Accenture (Microsoft Corporation)

(2026-01)

Designed and maintained SAP Fiori Business Roles by configuring Business Catalogs and Business Groups in the SAP Fiori Launchpad, ensuring role-based app access aligned with business requirements.
Performed OData Service registration and troubleshooting via SAP Gateway (transaction /IWFND/MAINT_SERVICE).
Created, modified, and transported Single, Composite, and Derived roles in PFCG; maintained authorization default values in SU24 for custom transactions and Fiori apps.
Performed RFC role design and maintained RFC Function Module-level authorizations (S_RFC) to secure cross-system integrations between S/4HANA and connected systems.
Conducted SoD risk analysis using GRC Access Risk Analysis (ARA), identified critical and high-risk violations, and worked with business stakeholders to design and implement Mitigation Controls.
Supported SAP Cloud application security scoping for SAP IBP, SAP Ariba, and SAP Concur — reviewed access models, role assignments, and performed access reviews for cloud platforms.
Collaborated with audit and compliance teams to support SOX-aligned access governance activities including periodic access reviews, role certification, and compliance documentation.
Resolved complex authorization failures in SAP Fiori and backend S/4HANA by analysing STAUTHTRACE, SU53, and ST01 trace outputs; supported production go-live and post-go-live hypercare.

SAP Security & GRC Consultant - Accenture (Carlsberg Group)

(2025-01 - 2025-12)

Administered Business Role Management (BRM) in SAP GRC AC, maintaining role definitions, risk assignments, and role attributes across multiple system landscapes.
Configured and maintained BRF+ decision tables and MSMP workflow routing rules for Access Request Management (ARM), ensuring correct approval routing per business process and risk level.
Managed Emergency Access Management (EAM) — administered Firefighter IDs, Owner and Controller assignments, reviewed Firefighter logs, and reported access usage to compliance teams.
Executed PFCG role maintenance including mass role generation for Derived roles, role buffering, and transport management across development, quality, and production systems.
Performed periodic SoD risk analysis in ARA, identified access violations, coordinated SoD Remediation with role owners, and tracked Mitigation Controls through GRC workflow.
Produced weekly security operations status reports covering open tickets, SoD risk status, EAM activity, and pending access requests for client stakeholder review.

SAP Security & GRC Analyst - Accenture (Indorama Ventures)

(2022-02 - 2024-12)

Managed end-to-end user lifecycle management — user creation, role assignment, mass uploads via SU10, user deprovisioning, and periodic user access reviews in SAP ECC and S/4HANA.
Diagnosed and resolved authorization failures using SU53 trace analysis, ST01 system trace, and STAUTHTRACE; maintained SUIM reports for user and role auditing.
Supported GRC ARM workflows — processed access requests, resolved workflow errors, managed role mapping in ARM, and maintained requestor and approver assignments.
Administered EAM Firefighter IDs including ID creation, owner/controller setup, access log monitoring, and exception reporting per audit requirements.
Executed Access Risk Analysis (ARA) runs, generated SoD risk reports, and coordinated remediation activities with process owners and the compliance team.
Provided UAT support and hypercare security coverage during S/4HANA go-live, triaging authorization defects and co-ordinating fixes with the functional team.

About