SAP Security and SAP Licensing – Two sides of Due to the variety of user licenses and “vague” T&Cs companies have struggled for years to find a rational for SAP user license assignments, e.g. which T-Code is allowed, which one is not? Already in 2017 there were rumors that the SAP system measurement will include user authorizations to determine the required licenses. Now, everyone is afraid that due to complex authorization roles each user may require the most expensive license available, Professional User. We will show how an effective SAP GRC/SOD approach can help to reduce the risk of overpaying for SAP Named User licenses the same coin.