It is important to note that
- Protection of unity in chain of command I.e there should not be too many checkers for one maker. The definition of role should be functional not individual.
- Removal of excess authorization should not lead to misuse of passwords. Increase of SAP users with suitable access rights is key to success of optimum SOD