- Home
- Glossary
Glossary
Security terms in plain language
What these words actually mean, without having to ask.
SAP Security
- Authorization object
- The check SAP runs before allowing an action. It has fields, such as activity or company code, and a role supplies the allowed values.
- Business role
- A role built around a job, often combining technical roles. In Fiori, the term usually means a role that gives access to apps through spaces and pages.
- Compensating control
- A check that reduces a risk when a conflict can't be removed, such as an independent monthly review. It only counts if it is carried out and documented.
- Composite role
- A container that groups several single roles, so that they can be assigned together.
- Derived role
- A copy of a master role that inherits its transactions and only differs in organisational values, such as company code or plant.
- Fiori catalog
- A collection of Fiori apps that a role can grant. What people see in the launchpad is arranged separately in spaces and pages.
- Firefighter ID
- A temporary account with elevated access for emergencies, with a reason, an owner and a log that gets reviewed. See SAP firefighter access.
- PFCG role
- A role as maintained in SAP transaction PFCG. It is what you assign to users, and it generates the profile that holds the authorizations.
- Ruleset
- The list of task combinations that an organisation treats as conflicts. A good one is based on transactions and authorization objects, and fits your own business.
- SAP Access Control
- The SAP GRC product for access risk analysis, access requests, emergency access and access reviews.
- SAP_ALL
- A standard SAP profile that gives almost every authorization. See SAP_ALL in production.
- Segregation of duties (SoD)
- The principle that no single person can complete a sensitive process alone. See segregation of duties in SAP.
- Spaces and pages
- The way the Fiori launchpad arranges apps for a role. They decide layout rather than what someone is allowed to do.
- Transaction code
- A short code that starts a function in SAP, such as FK01 or PFCG. Holding one doesn't always mean a user can do anything: authorization objects decide that.
- User access review
- A periodic check in which business owners confirm who still needs which access. See access reviews.
Cybersecurity
- DKIM
- A digital signature on outgoing email, published through DNS, that lets the receiver check that a message wasn't changed.
- DMARC
- A DNS record that says what receivers should do with mail that fails SPF and DKIM checks, and where to send reports. See how to set up DMARC.
- Extranet
- The partner login of a booking platform, where a hotel manages rates, reservations and guest messages.
- MFA
- Multi-factor authentication: a login that needs a second factor besides a password, such as an app on your phone.
- Security headers
- Instructions a website sends to the browser, for example about which scripts may run. A missing header doesn't by itself mean a site can be attacked.
- SPF
- A DNS record that lists which servers may send mail for your domain.
- TLS
- The encryption behind HTTPS, which protects traffic between a visitor and a website.
