Neeraj Uppal

Cell: 503-333-4373

SAP Security Consultant

Email: uppal.sap@gmail.com

SAP SUMMARY: Over 7 yrs of SAP Security experience on various SAP modules such as FI/ CO, MM, POSDM, MAP, BW/BI, BPC, BOBJ, PP, P&D, SD, HR, GRC Experience in full life cycle Implementation using ASAP Methodology in various versions of R/3 including 4.5B, 4.6C, R/3 4.7, ECC 5.0 and ECC 6.0 Extensive experience with Automatic Profile Generator (PFCG), User Administration, Central User Administration (CUA), Authorization object maintenance, Problem analysis and troubleshooting, SAP GUI & CATT and ECATT Scripts, transporting roles, HR Security, Auditing, Segregation of Duties (SOD) and Sarbanes-Oxley Compliance etc. Experience in performing SAP Security upgrades from 4.7 to ECC 6.0 and BW 3.5 to BI 7.0 Experienced in leading SAP security teams in audit efforts by helping in defining the audit rules and automating the reports by defining the programs specifications Experience in setup of BI security for user roles (query users, administrative users and power users) Experienced in leading and guiding the security teams in unit testing of the roles using the business process procedure (BPPs) Experienced in Strategizing and implementation of SAP Security model, processes and procedures, defining various Role Matrices and designing templates. Experience with helpdesk, resolving ticket issues and troubleshooting support problems using Remedy, Peregrine and Lotus Notes. Experience on Audit projects and working as a liaison between the security team and auditors. Administration in assigning the Automatic Profile Generator and Authorization object maintenance. Experienced extensively in creating and modifying Single Roles, Composite roles and Derived roles Strategizing and Implementation experience in Central User Administration (CUA) in both single and multi system landscapes. Experience in implementing Line Authorizations and troubleshooting of authorizations. Strong experience in implementing and working with HR Security including Structural Authorizations and Position Based Security (PBS). Experience with using Audit Information Systems (AIS) logs (SM19, SM20 and SM18). Experience in implementing security in BW including infoobject level security and BI 7.0 Solving ticket issues in Security related tables and reports/programs. Problem fixing in assign of Authorization Groups, User Groups and User Administration. Documentation in various security processes, procedures, auditing; knowledge transfer and an active team player.

Technical skills SAP : Front End : Data Warehouse : Language : Database : Operating System : SAP R/3 4.6B, 4.6C, 4.7, ECC 5.0, ECC 6.0, MM, FI/CO, HR, SD, PP SAP Enterprise Portals 7.0 SP2/SP4, Sabrix SAP BW 3.5 and BI 7.0 ABAP/4, Java 2.0, Unix Oracle 11g, MS Suite Windows NT, Windows 2000, UNIX

Completed Bachelors of Science from India.

Neeraj Uppal
Cell: 503-333-4373 Project Details Client Role Version Industry : Dawn Foods, MI (Oct 2011 Present) : SAP Security Lead (Implementation) : ECC 6.0, BI 7.0, BPC, HCM, Sol Man : Manufacturing

SAP Security Consultant

Email: uppal.sap@gmail.com

ECC 6.0 Involved in gathering end user requirements and implement SAP R/3 security authorizations. Building SAP roles and define jobs by coordinating with functional project team members. Work with business owners to define the authorizations needed for users. Set-up SAP authorization profiles and roles that represent the different end users job definitions. Use SU02 to examine authorizations in existing roles to identify improper authorizations and correct them. Created CATT scripts for creating mass users, deleting mass users, assigning roles to users, locking and unlocking mass users in a CUA system. Worked on critical authorization Objects like S_TABU_DIS, S_DEVELOP, S_RZL_ADM, S_ADMI_FCD and S_TRANSPRT. Worked on SU24 to maintain Check Indicators for the Transaction Codes. Extensively used tables like AGR_USERS, AGR_TCODES, AGR_1251, AGR_DEFINE etc. Resolved daily SAP Security issues. Maintain various role matrices for roles, authorization objects to keep track of the modifications made the roles. Maintenance of User Master Record & Support End Users with Security issues. Restrict open authorizations to sensitive Transaction codes. Perform UNIT testing on created roles. Effectively analyzed trace files and tracked missed authorizations for users ac cess problems and inserted missing authorizations manually. Used SU24 to maintain Check Indicator Defaults and Field values, reduced the scope of Authorization checks. Extensively used SU53 and ST01 for analyzing the authorization errors BI 7.0 / BPC Built Analysis Authorizations using the transaction RSECADMIN. Build and tested BPC roles and provide Security appropriate authorizations to the team. Setup security at the Info objects level (field-level security). Created Custom Reporting Authorization Objects using transaction RSSM. Linked the Custom Authorization Object to the Info provider Created roles restricting access to Info cubes, ODS objects, specific queries and workbooks. Assigned the Analysis Authorizations to the role using the object S_RS_AUTH. Troubleshoot authorizations related problems using RSECADMIN Made the info objects 0TCAACTVT, 0TCAIPROV, 0TCAVALID authorization-relevant in the info object maintenance tool RSD1. Troubleshoot analysis authorizations related problems using RSECADMIN. Build security and successful testing of various objects related to Dashboard. HCM: Worked with Dynamic actions and info types tables. Worked on Authorization Objects P_ORGIN, P_ABAP, P_PERNR, P_ORGXX etc. Assigned structural profiles to users using the program RHPROFL0 Maintained authorization profiles using OOSP. Experience on NWBC and fixing Security related issues. Setup and maintained Organizational Structure including Organizational Units, Jobs, Positions, Cost Center assignments etc. Assigned tasks to positions and integrated all these into the enterprise organizational plan. Assigned the various organization units and positions to cost centers.

Neeraj Uppal
Cell: 503-333-4373

SAP Security Consultant

Email: uppal.sap@gmail.com

Central User Administration Implemented Central User Administration (CUA) within R/3 and BW system landscape Performed user administration activities in the CUA System landscape Troubleshoot CUA related issues Delinked/Linked child clients from CUA setup during client refreshes using the program RSDELCUA Client Role Version : P&G, OH (March11 Sep 11) : SAP Security Analyst (Implementation) : ECC, BI 7.0, BOBJ, Portals

ECC 6.0: Worked on SU10 to perform mass operations. Analyze and troubleshoot security issues using SU53 , ST01 and SUIM Worked closely with Audit team for SAP Security Audit and generated Audit Information Systems (AIS) logs (SM19,SM20 and SM18) Managed and maintained USOBT_C and USOBX_C tables by using SU24 /SU25 Create and maintained custom transactions by using SE93. Performed user administration activities such as creating, deleting, renaming, locking and unlocking users, and resetting passwords, maintaining logon data and assigning roles to the users. Created User Groups by using transaction code SUGR. Fix the bugs related to roles and authorizations in order to build security in R/3 Experience in Transport Authorization and provided production support for roles. Managing Standard and Custom Authorization Object. Transport Roles using the change request method and also the Download/Upload method for transporting the roles to systems not in the transport landscape. Transported the generated roles and profiles using SCC1 and SE09/SE10. BI 7.0 / BOBJ Created Analysis Authorizations to compensate for deactivated objects such as S_RS_ICUBE, S_RS_ODSO etc. Built Analysis Authorizations using the transaction RSECADMIN. Assigned the Analysis Authorizations to the role using the object S_RS_AUTH. Troubleshoot authorizations related problems using RSECADMIN Made the info objects 0TCAACTVT, 0TCAIPROV, 0TCAVALID authorization-relevant in the info object maintenance tool RSD1. Created and loaded profiles as per the requirement from the Cube DSOs Involved in BAT, UAT and GO-LIVE activities. Worked with the Business Objects team to create authorizations for the financial reporting. Involved in testing crystal reports, live office connections/bindings and X-Celsius reports for the dashboard. Worked closely with the business teams to fix authorization on Business Objects, Advanced Analysis and Dashboard. Build and maintained BW hierarchies as per requirement for various dimensions. Build security and successful testing of various objects related to Dashboard. PORTALS Working on creating and transporting roles. Created transport packages to move roles from development portals to other systems in the landscape Performed user administration activities such as creating user ids, copying user ids, assigning roles, assigning groups etc. Created groups and assigned roles to groups.

Neeraj Uppal
Cell: 503-333-4373 Client Role Version Industry : Nike, OR (Feb 2010 Feb2011) : SAP Security Analyst (Implementation) : ECC 6.0, BI 7.0, GRC, Sol Man, MAP, POSDM : IS-Retail

SAP Security Consultant

Email: uppal.sap@gmail.com

Roles and Responsibilities: Provided SOD and Role matrices templates to the Business owners. Interacted with the Role owners and the team lead for maintaining the correct restrictions on the Transaction codes and the activities within the Transaction codes. Worked closely with ECC Developers on LSMW for Data migration. Extensively used Automatic Profile Generator (PFCG) to create and maintain Parent and Child/Derived roles and to Upload and Download of roles. Transporting the change requests from the Development environment to Testing/QA environments. Created custom transaction Codes for restricting access to custom tables, views and programs. Created transaction variants for SE16 and SM30. Created Authorization groups and assigned Tables and Programs to the groups. Implemented Line Authorizations to restrict records and transaction codes using the critical Authorization Object S_TABU_LIN. Worked on critical authorization Objects like S_TABU_DIS, S_DEVELOP, S_RZL_ADM, S_ADMI_FCD and S_TRANSPRT. Performed reconciliation of user master record and roles using PFUD. GRC 5.3: Working extensively on Compliance user provisioning (CUP) for access issues. Reviewed, Analyzed and manually removed the roles from the backend system using Access Control. Helped the users by role administration and guiding them on CUP usage. Worked with SAP Development on SAP GRC products for version 5.3 Extensive experience of role maintenance using Risk Analysis at object level. Have done risk simulation for impacting Composite roles with assigned users. Extensively used the GRC suite of products (Compliance Calibrator, Firefighter, Role Expert and Access Enforcer. BI 7.0 Created Analysis Authorizations to compensate for deactivated objects such as S_RS_ICUBE, S_RS_ODSO etc. Built Analysis Authorizations using the transaction RSECADMIN. Assigned the Analysis Authorizations to the role using the object S_RS_AUTH. Troubleshoot authorizations related problems using RSECADMIN Made the info objects 0TCAACTVT, 0TCAIPROV, 0TCAVALID authorization-relevant in the info object maintenance tool RSD1. Setup security at the Info objects level (field-level security). Created Custom Reporting Authorization Objects using transaction RSSM. Created roles restricting access to Info cubes, ODS objects, specific queries and workbooks. Troubleshoot authorizations related problems using RSSMTRACE and ST01 Worked closely with MAP team for Query Creation, Planning and Assortment issues. . SOLUTION MANAGER Created roles based on the requirements provided by the Solution Manager team. Developed Solution Manager roles by customizing the role templates provided by SAP Worked closely with Functional Team to fix issues related to Tech Specs and Func Specs. Developed roles for different functions performed in the Solution Manager like Implementation and Distribution, configuring the service desk, Change Request Management, Solution Monitoring and Job Schedule Management Resolved issues using SU53, ST01 and Debug mode.

Neeraj Uppal
Cell: 503-333-4373 Client Role Version Industry : Astra Zeneca, DE (Aug09 Jan10) : SAP Security Analyst (Production Support) : ECC 6.0, BI 7.0, PI/XI : Pharmaceuticals

SAP Security Consultant

Email: uppal.sap@gmail.com

Worked extensively on Automatic Profile Generator (PFCG) for creating single, derived roles for modules such as SCM, PP, MM, SD, and FI/CO. Extensive interaction with Business Organization Managers to understand User and Role Mitigations and Critical Transactions. Designed various forms and templates for new user requests, roles, modifications, change management process etc. Transported Roles Using SE10 and STMS. Worked on SU24 to maintain Check Indicators for the Transaction Codes. Created and maintained Authorization Groups for Tables and Reports and assigned them accordingly. Analyze and troubleshoot security issues using SU53 , ST01 and SUIM Supported other teams by providing requested information. Check Roles for Missing Objects, Maintained the display changed transaction codes using SU25. Supported the Testing Team according to request. Setting up SAP system for auto log-out, password length and expiration and specifying impermissible passwords. Maintained Authorization objects using the transaction SU24. Transported the generated roles and profiles using SAP transport management system. Worked with security related tables such as AGR_TCODES, AGR_USERS and AGR_DEFINE etc. Worked with table authorizations to control access to tables and created custom table authorization groups and assigned to tables using transaction SE54. Review and correction of sensitive authorizations such as S_TABU_DIS, S_ADMI_FCD, S_DEVELOP etc. AUDIT Reviewed the Organization structure, jobs, roles and the SOD matrix for the Security developed in SAP and handled SOD conflicts for Sarbanes Oxley Compliance. Supported audit team for generating audit reports as per the audit rules provided by the auditors Worked with process experts for SOD conflicts and assigned appropriate roles to the users Setting up SAP system for auto log-out, password length and expiration and specifying impermissible passwords. Worked closely with Audit team for SAP Security Audit and generated Audit Information System logs. Working closely with Audit team for user-role conflict removal in R/3 and BI. Perform regular system audits to detect deviations of established procedures, role mapping, unauthorized system activity and report findings to management Supported Internal and External security audits in the production system Created Security reports as Key Controls for SOX including critical transactions/objects and user administration. BI 7.0: Manually adjusted the BW roles to conform to BI 7.0 security. Setup BI security for user roles (query users, administrative users and power users) Built Analysis Authorizations using the transaction RSECADMIN. Assigned the Analysis Authorizations to the role using the object S_RS_AUTH. Created Custom Reporting Authorization Objects using transaction RSSM. Linked the Custom Authorization Object to the Info provider Created roles restricting access to Info cubes, ODS objects, specific queries and workbooks. Built authorizations to grant access to data on various levels of detail Setup security at the Info object level (field-level security) and key figure level.

Neeraj Uppal
Cell: 503-333-4373 Client Role Version Industry

SAP Security Consultant

Email: uppal.sap@gmail.com

: SPX, WI (Aug 2007 to June 2009) : SAP Security Administrator (Implementation/Upgrade) : ECC 6.0, BI 7.0, GRC : Manufacturing

Roles and Responsibilities: Provided SOD and Role matrices templates to the Business owners. Interacted with the Role owners and the team lead for maintaining the correct restrictions on the Transaction codes and the activities within the Transaction codes. Maintained User Master Records including Address information, user groups, validity periods etc. Created ECATT scripts for creating mass users, deleting mass users, assigning roles to users, locking and unlocking mass users etc. in a CUA system, also used SU10 for other mass user related tasks. Analyzed and understand existing SAP security environment and design, business requirements to upgrade from SAP R/3 4.7 to ECC 6.0. Extensively used Automatic Profile Generator (PFCG) to create and maintain Parent and Child/Derived roles and to Upload and Download of roles. Transporting the change requests from the Development environment to Testing/QA environments. Created custom transaction Codes for restricting access to custom tables, views and programs. Created transaction variants for SE16 and SM30. Created Authorization groups and assigned Tables and Programs to the groups. Implemented Line Authorizations to restrict records and transaction codes using the critical Authorization Object S_TABU_LIN. Worked on critical authorization Objects like S_TABU_DIS, S_DEVELOP, S_RZL_ADM, S_ADMI_FCD and S_TRANSPRT. Worked on SU24 to maintain Check Indicators for the Transaction Codes. Extensively used tables like AGR_USERS, AGR_TCODES, AGR_1251, AGR_DEFINE etc. Extensively Used SUIM (User Information System) to pull various reports for audit monitoring Trouble shoot authorization errors using SU53 and by system trace Performed reconciliation of user master record and roles using PFUD. GRC 5.2 / 5.3 Working knowledge of Compliance user provisioning using GRC Access Control. Reviewed, Analyzed and manually removed the roles from the backend system using Access Control. Worked with SAP Development on SAP GRC products for version 5.3 Extensive experience of role maintenance using Risk Analysis at object level. Have done risk simulation for impacting Composite roles with assigned users. Extensively used the GRC suite of products (Compliance Calibrator, Firefighter, Role Expert and Access Enforcer Utilized the VIRSAs Compliance Calibrator tool to check for Segregation of Duties conflicts at transaction code level and authorization object level Maintained the Conflicting T-codes, Critical T-codes in the Rule Architect Created the Business Process, Functional Groups, Risk IDs, Rule IDs for the Compliance Calibrator according to the Organization Requirement Assigning the Mitigation control on the roles Worked with Role Expert to creating and modifying roles Worked extensively with Firefighter to resolve emergency and show stopping issues. Created Firefighter ids Processed production tickets in Access Enforcer (AE) Mitigated risks in AE Created users and provision access as requested. BI 7.0 Upgraded BW 3.5 to BI 7.0

Neeraj Uppal
Cell: 503-333-4373

SAP Security Consultant

Email: uppal.sap@gmail.com

Manually adjusted the BW roles to conform to BI 7.0 security. Created Analysis Authorizations to compensate for deactivated objects such as S_RS_ICUBE, S_RS_ODSO etc. Built Analysis Authorizations using the transaction RSECADMIN. Assigned the Analysis Authorizations to the role using the object S_RS_AUTH. Troubleshoot authorizations related problems using RSECADMIN Made the infoobjects 0TCAACTVT, 0TCAIPROV, 0TCAVALID authorization-relevant in the info object maintenance tool RSD1. Setup security at the Info objects level (field-level security). Created Custom Reporting Authorization Objects using transaction RSSM. Linked the Custom Authorization Object to the Info provider Created roles restricting access to Info cubes, ODS objects, specific queries and workbooks. Troubleshoot authorizations related problems using RSSMTRACE and ST01 Secured Reporting Users by using S_RS_Comp1 (Secure by query owner) and, S_RS_FOLD (Disable the Info Areas button) in the BEx Analyzer Open Queries dialog box.

Client : Alcatel-Lucent, NJ (March 05 to June 07) Role : SAP Security Analyst (Implementation) Version : ECC 5.0, GRC, BW, HR Industry : Telecom Roles and Responsibilities: Assisted in creating and maintaining security policies and procedures, and all SAP authorizations, profiles and roles Created and modified Single roles, Composite roles and derived roles using the Automatic Profile Generator (PFCG) from the Role Matrices provided by the functional team. Setup Traces for authorization purposes and Security Audit Logs for audit purposes. Used SU10 to perform mass operations. Created CATT scripts for creating mass users, deleting mass users, assigning roles to users, locking and unlocking mass users. Used Transport Management System (TMS) to perform transports and mass transports of roles. Modified Check Maintain flags in SU24 as needed Created and maintained table Authorization Groups SE54 and assigned Authorization Groups to tables Created Custom Transactions Code for tables and programs using SE93 Effectively analyzed system trace (ST01) and User Authorization data (SU53) and tracked missing authorizations for user access problems and inserted missing authorizations manually. Worked extensively on User Information System (SUIM) for audit purposes. HR Security Implemented Position Based Security by assigning Roles to Positions. Assigned users and roles to positions using both PFCG and PPOM_OLD Implemented Structural Authorizations by Evaluation path method in the Org Structure. Maintained Employee Master Data using transaction codes PA30, PA40 Experienced in creating Context-sensitive Authorizations using P_ORGINXX Developed enterprise structure to fit company needs including personnel area, personnel sub-area, employee group and employee sub-group. GRC 5.1 Extensively worked on Compliance Calibrator to identify, analyze and resolve all SOD and Audit Issues, simulate the role and assign the role to the user using PFCG Assisted Internal Auditors in framing new Rules for combination of new T-codes in ECC 5.0. Worked with Internal Auditors in creation of User and Role Mitigations and uploaded them. Configured and used Firefighter. Extensively worked on Firefighter tool (/n/VIRSA/VFAT) Giving emergency access to the required critical t-codes through Firefighter tool

Neeraj Uppal
Cell: 503-333-4373

SAP Security Consultant

Email: uppal.sap@gmail.com

BW 3.5 Worked with the Internal Audit team to prepare the BW systems for Audit for the current fiscal year. Identified gaps and problems in BW role designs and resolved some of the gaps Identified BW specific audit rules to generate reports for auditors Extensively used SUIM for getting these reports. Created an ECATT script for modifying 60 odd roles to add values to a field by making use of the program PFCG_ORGFIELD_CREATE Used transaction SUPC to generate the mass profiles Creating Custom Reporting Authorization Objects using transaction RSSM Created roles for restricting access to queries, workbooks, info cubes etc. Involved in testing of the roles along with the BW team members Troubleshoot authorizations related problems using RSSMTRACE and using RSSM Client Role Version Industry : NTUA, AZ (March 04 Feb 05) : SAP Security Consultant (Production Support) : 4.6C : Utility

Created and modified roles, and generated Profiles using Automatic Profile Generated (PFCG) in the Child Systems and assigned them to users in the Central System. Performed reconciliation of user master record and roles using PFUD and SUPC Gather Processes and Procedures documents, and Matrices to understand creation process, and naming convention of Manual Profiles, Activity Groups. Supported other teams by providing requested information. Converted the Manual Profiles created via SU02 to Roles using SU25. Handled the remaining missing Transactions in Menu Tab by analyzing table AGR_1251 Supported the Testing Team according to request. Created and modified Single roles, Composite roles and derived roles using PFCG. Maintained Users account by copying, renaming, change password, locking unlocking, assigning Roles etc. Perform Users Comparison to update User Master Record. Extensively used SUIM to analyze the user Authorizations. Created and handled transports from Development to QA boxes using SE09, SE10 and Upload Download Roles. Support Training Team to prepare documents for End User training GRC (Virsa) User/role remediation support for Sarbanes-Oxley Act (Section 404) using VIRSA Systems VRAT tool. Work with VIRSA systems VRAT tool in identifying conflicts single roles and composite roles. Detailed knowledge of SAP best practices for Application level security as well as segregation of Duties from standard rule set. Utilized the VIRSAs Compliance Calibrator (VRAT) tool to check for Segregation of Duties conflicts at transaction code level and authorization object level.