If your organization has run an SAP system for three years or more, you probably suffer from what we like to refer to as "Deceiving Authorization Roles syndrome."Whether you're familiar with this pesky problem or not, maintaining authorization roles for a few years, adding and removing activities and authorization objects, and creating new ones and deleting others all create situations in which authorization roles have names that incorrectly represent their content. This can lead to SAP admins unintentionally granting users with the wrong authorizations. Read more