Integrated Risk Management
Through the application of technology and automation, we'll help you manage your risks efficiently and effectively across the entire enterprise.
Identity and Access Management
We'll help you ensure everybody within your organisation has access to the right systems and data, for the right reasons, and at the right time.
Cyber & Application Security
Our experts will uncover security weaknesses within your security design and business-critical applications. Helping you protect your organisation from both internal and external threats.
Bedrock Managed Service
Scalable support and on-demand expertise that seamlessly integrates with your existing operations.
About us
A group of passionate individuals with a shared purpose to help the world's leading companies embrace best practices for GRC and risk management.
Partners
Turnkey's strategic partner network consists of selected organisations that complement our capabilities.
Corporate Social ResponsibilityCSR
We are committed to being agents for change through our Climate Action Plan, championing diversity in our workplaces, and more.
Get in touch
We have operations in all corners of the globe, so see which office is nearest to you and connect with them.
Careers
We have operations in all corners of the globe, so see which office is nearest to you and connect with them.
Webinars & eBooks
All of Turnkey's webinars, guides and other insights available in one place.
Blogs
Read the latest insights from our experts on GRC and risk management, covering the latest industry topics.
Press Coverage
See all the publications where Turnkey, our experts and our successes have been noted.
Key events
See the key industry conferences on GRC, SAP security and risk management which we are attending.
Case Studies
Client satisfaction is of the utmost importance to us, and we strive to constantly deliver above expectations, going the extra mile at every opportunity.
22 November 2024

Turning the new SAP FUE license model into an opportunity

Navigating the complexities of SAP licensing can feel like decoding an intricate puzzle—especially when SAP shifts the model. Whether you're a seasoned IT professional or a business leader looking to optimize your budgets, understanding the nuances of SAP’s new Full Use Equivalent (FUE) licensing is crucial for maximizing the value of your investment while managing compliance. 

Under the new FUE licensing structure, users’ authorizations take on even greater importance. Every role granting authorizations to users within your SAP estate will factor into your license fees. This approach aims to simplify the license review process, but could lead to higher licensing costs if roles and authorizations aren’t optimized. 

In this blog, we'll break down what the new FUE licensing structure is and what it means for your organization, explain how it differs from previous models, and most importantly, show you how to turn this change into an opportunity. You'll learn how a strategic license review can not only help you optimize costs but also enhance your system security and support your migration decisions. Whether you're planning a cloud S/4HANA or RISE migration or are already using SAP cloud solutions, you'll gain practical insights into managing this transition effectively while avoiding unexpected costs.


What is the new SAP licensing structure? 

The biggest change to this SAP license fee model is that there is less room for negotiation without changing access users have. Instead, it will be fixed around the roles and authorizations assigned to users—whether they use them or not. It's not what users did do, but what they can do that will be taken into consideration. 

The FUE structure is broken into four user types: Advanced, Core, Self-Serve, and Developer, and costs are based on how many users it takes to get to a "Full Use Equivalent" license. Those utilizing complex and core SAP functionality will be considered Advanced users and will need a full license. Alternatively, those who use SAP less frequently, or only use non-core functionality, will only account for a fraction of one license. The exact ratios are:

  • Advanced: 1 user to 1 FUE  

  • Core: 5 users to 1 FUE  

  • Self-Serve: 30 users to 1 FUE  

  • Developer: 1 user to 2 FUEs  

This new system adds clarity and objectivity to licensing and pricing, making forecasting much easier. However, it also means that how users are categorized based on their authorizations will have a significant impact on your total fees. 

 

How do organizations calculate their FUEs? 

Under the old system, organizations could manually categorize users into lower license tiers by providing evidence that users were not using some of the functionality they had access to. While this method certainly helped organizations bring licensing costs down, it is not recommended from a security, risk, compliance, and efficiency standpoint. 

Under the new FUE model, organizations will need to utilize the STAR report to review and understand their current license position (for more information on the STAR report, see SAP Note: 3113382). This report applies SAP's predefined license Rule Set and categorizes users accordingly. To avoid common pitfalls, ensure your organization reviews this report and remediates any over-provisioned roles and authorizations internally before submitting it to SAP. Doing so allows you to re-categorize users by adjusting their authorizations to better align with their actual job functions, optimizing both license usage and compliance. 

 

When will FUEs apply and what impact will they have?

Every organization operating SAP should stay informed about the FUE license model, particularly in certain scenarios. SAP customers moving to S/4HANA on either the public (GROW) or private cloud via RISE will automatically be moved over to the FUE model. 

If you're considering your migration options, understanding the licensing implications of a brownfield (lift and shift) migration should be a critical part of your decision-making process. Many organizations are taking advantage of this opportunity to review and update their antiquated role designs and optimize their SAP security to fit not only the growing complexities of their business needs but also reduce the cost of SAP FUE licensing for years to come. 

SAP will also naturally move organizations already on a cloud migration journey over to the new licensing structure. So, if you're well along your migration journey, understanding the new model could help you identify and correct for substantial and unexpected extra license costs before they impact your organization. 

 

In summary: why license reviews are key to cost optimization and efficiency 

As we've explored throughout this blog, SAP's new FUE licensing structure represents both a challenge and an opportunity for organizations. While the shift to authorization-based licensing might initially seem daunting, it provides a perfect catalyst for reviewing and optimizing your SAP environment. By taking a proactive approach and reviewing licenses periodically, organizations can not only adapt to these changes but actually leverage them to create lasting improvements. 

 

Done properly, a good license review can help you:  

  • Reduce licensing costs through correctly structured roles and authorizations.  
  • Get a clear view of the current landscape to inform S/4HANA or RISE migration decisions.  
  • Ensure smooth operations and transitions, even during times of major business change.  
  • Maximize organizational efficiency by right-sizing roles and authorizations to individual user needs.  
  • Improve security against internal and external threats by putting the right checks and balances in place.  

The license fee savings generated from this kind of review can also help build a strong business case for migration and improvement projects, especially as the savings can help fund the project itself. It will also save you time, money, and stress in the long term by avoiding the need to redefine roles and authorizations reactively. 

If navigating these changes seems overwhelming, Turnkey can assist with your license review, ensuring that each user has the appropriate roles and authorizations in place before your migration or upcoming audit. This can help you protect your SAP estate and data from insider risks while avoiding unnecessary license costs. Get in touch with us today to find out more.