Monitoring finding · EXC-001
Mover retained Finance access after transfer to Operations
Control JML-02SAP S/4HANADetected 9 Oct 2026Severity high
JML-02 · monitored control
Mover access is recertified on role change
Role assignment · Principal · P-06C8
automated test
- Reasoning
- R.G. · P-06C8 moved Finance -> Operations effective 2026-09-15. 8 business days later SAP still assigns Z_FI_PAY_APPROVER (payments approval) and Z_FI_GL_POST (general ledger posting); Concur expense admin and vendor portal access also retained. Payments approval + GL posting is an unmitigated SoD conflict.
- expected
- Previous-role roles removed by 2026-09-22
- observed
- 4 previous-role entitlements active on 2026-10-09
- Action / owner
- ○ No data available
None
No review signal applies to this finding.