SAP Practice — BASIS, Development, Security, Analytics

SAP That Actually Runs.
Not Just Installed.

A full-lifecycle SAP practice under one roof — BASIS & NetWeaver administration, functional and technical support across the modules, ABAP and interface development, security & GRC, scheduling automation, and analytics on BW/4HANA and BusinessObjects. Same engineers keep the lights on 24×7 through kernel patches, EHP upgrades, transports, and audit season.

Why Networks One

An SAP Practice, Not a Staffing Bench

SAP is a landscape, not a product. A running SAP environment is a stack of NetWeaver Application Servers, ABAP and Java engines, a HANA or Oracle database, an operating system, a message and gateway server, a Solution Manager, a BI/analytics tier, plus half a dozen interfaces to payroll, banking, EDI, MES, warehouse, and CRM systems on the outside. When any single layer degrades, the users feel it in the transaction they’re running — and the finance team feels it in the close.

Most consultancies staff SAP as a body-shop line item — one BASIS resource here, one Security resource there, hand-off to an offshore functional team, and hope the seams hold. We run a small integrated practice: BASIS, Security & GRC, ABAP & interface development, functional support, scheduling integration, and BI/analytics under one operations team, sharing runbooks, ticket queues, and on-call rotations. When the batch fails at 3 a.m. because a Tidal-triggered process chain hit a bad IDoc, one engineer opens SM37, SM58, WE02, and STMS — not four tickets in four vendor portals.

We’ve been supporting SAP-adjacent enterprise IT since 2004 — and running production SAP workloads for telecom, financial services, distribution, and manufacturing clients whose CFOs know the number of the person on call. That’s the standard we hold ourselves to.

What that means for you

  • Full-stack SAP practice: BASIS, functional, technical, security, analytics — not stitched together across vendors
  • ECC, S/4HANA, BW/4HANA, BusinessObjects, Solution Manager, and satellite systems in one operations model
  • Deep RFC / BAPI / IDoc / ODATA integration experience — SAP as the hub of a real enterprise
  • Role design, SoD analysis, Firefighter, and audit-ready evidence for SOX, GDPR, and ISO 27001
  • Scheduling automation integrated with Tidal, Redwood, and native SM37 — batch that runs on time
  • 24×7 managed services from our own NOC — kernel patches, EHP, transports, and DR drills without missed windows

What We Do

Six Pillars, One Practice

From the BASIS layer up to the boardroom dashboard — every layer of an operating SAP landscape, run by the same team.

BASIS & NetWeaver Administration

System landscape design, installs, kernel and support-pack patching, EHP upgrades, client and system copies, transport management (STMS), spool/print, RFC/gateway hardening, and HANA and Oracle database administration underneath it all.

Kernel & SPAM/SAINT STMS transports HANA / Oracle DBA

Functional & Technical Support

Cross-module functional support for FI, CO, MM, SD, PP, WM, PM, QM, PS, HR/HCM, plus the technical bench — ABAP development, Workflow, SmartForms and Adobe Forms, Enhancement Framework, Fiori/UI5, and SAPUI5 tile design.

FI · CO · MM · SD ABAP OO Fiori / UI5

Integrations, RFCs & BAPIs

SAP as the hub of a real enterprise — RFC destinations (SM59), synchronous and asynchronous BAPI calls, IDoc/ALE distribution model, PI/PO and CPI middleware, OData services, SOAP and REST APIs, and file-based interfaces with MFT hand-off.

RFC / BAPI IDoc / ALE CPI · PI/PO

Security, Authorizations & GRC

Composite and single role design in PFCG, authorization-object analysis, SU24 maintenance, segregation-of-duties analysis, and full SAP GRC Access Control: Access Risk Analysis, Access Request Management, Business Role Management, Access Certification, and Emergency Access (Firefighter).

PFCG roles SoD & GRC SOX audit

Scheduling Automation Integration

Native SAP background jobs (SM37/SM36), event-driven job control, process-chain orchestration, and enterprise-scheduler integration via the SAP XBP interface — letting Tidal, Redwood, or your existing scheduler drive SAP jobs alongside the rest of your batch.

XBP interface Tidal · Redwood Process chains

Analytics — BW, BOBJ & HANA

BW/4HANA administration, extractor tuning, InfoProviders and CompositeProvider design, plus BusinessObjects BI platform (CMC, Web Intelligence, Analysis for Office, Crystal, Lumira), Analytics Cloud (SAC) live connections, and HANA calculation views.

BW/4HANA BOBJ / SAC HANA views

Practice Depth

What We Cover, in Detail

A representative tour through the SAP surface area we operate. Not exhaustive — but a fair map of the ground we cover for our production clients.

BASIS & NetWeaver — The Platform Layer

Where an SAP outage starts and ends. If BASIS isn’t clean, nothing above it can be.

Landscape
System Landscape Design
Three-tier (DEV/QAS/PRD) landscape design, sandbox and training clients, sizing based on SAPS, and reference architectures for on-prem, hosted, and hyperscaler-hosted SAP.
Install
Installations & System Copies
Fresh installations of ECC, S/4HANA, BW/4HANA, and Solution Manager. Homogeneous and heterogeneous system copies with SAP SWPM and post-copy automation.
Kernel
Kernel & Support-Pack Patching
Kernel upgrades, SPAM/SAINT support-pack and Enhancement Package application, add-on installations, and stack-XML driven multi-instance patching windows.
DB
HANA & Oracle DBA
SAP HANA administration (single tenant, MDC), system replication, backups via Backint, plus classic Oracle DBA (BR*Tools, RMAN) and SQL Server underneath NetWeaver.
Transports
STMS & Change Control
Transport-management strategy, TMS routes, ChaRM integration, transport-of-copies for testing, and dependency validation between packages and objects.
Client
Client Copies & TDMS
Local, remote, and system client copies with SCC*/SCC1/SCC7, plus SAP Test Data Migration Server (TDMS) for scrambled, right-sized test-data refreshes.
OS
Operating-System Layer
Linux (RHEL/SLES for SAP) and Windows Server tuning for SAP — kernel parameters, filesystem layout, transparent-huge-pages, and I/O scheduler configuration.
Print & spool
Output Management
Spool subsystem, output device configuration, front-end and back-end printing, PDF spool devices, and third-party output-management (SAP OMS interface, e.g. Streamserve).
Solution Manager
Solution Manager 7.2
SolMan technical monitoring, EWA (Early Watch Alert), system landscape maintenance in LMDB/SLD, ChaRM, ITSM, and Focused Build / Focused Insights.

Modules — Functional & Technical Support

Ticket-driven functional and technical support across the modules users actually live in.

We keep functional consultants on the bench for the modules our clients run in production. Not every practice touches every module — but between BASIS admins with functional depth, and functional consultants with BASIS awareness, we can triage almost any incident before escalation. Below are the modules we most commonly support.

FI
Financial Accounting
GL, AP, AR, AA, Bank & treasury, tax
CO
Controlling
Cost centers, profit centers, PA, PS, COPA
MM
Materials Management
Purchasing, inventory, IM, invoice verification
SD
Sales & Distribution
Order-to-cash, pricing, billing, credit mgmt
PP
Production Planning
MRP, discrete, process, and repetitive mfg
WM / EWM
Warehouse Mgmt
Bin strategies, RF, wave planning, task exec
PM
Plant Maintenance
Notifications, work orders, preventive plans
QM
Quality Management
Inspection lots, notifications, results, audits
PS
Project Systems
WBS, network activities, milestone billing
HR / HCM
Human Capital
PA, PT, PY, OM, ESS/MSS, SuccessFactors integ
SRM / Ariba
Sourcing & Proc.
Contract, sourcing, guided-buying integration
CRM / C4C
Customer Engage.
Service tickets, sales cloud, integration

Development — ABAP, Fiori & the Enhancement Framework

Custom code, forms, and UX built to be upgrade-safe, transportable, and readable a decade later.

ABAP
Classical & ABAP OO
Reports, module pools, function modules, classes, ABAP Objects, Unit tests, and Code Inspector / ATC-clean deliverables. CDS views for modern S/4HANA extensions.
Enhancement
Enhancement Framework
BAdIs, implicit and explicit enhancements, customer-namespace exits, appended structures — not modifications. Upgrade-safe by design.
Forms
SmartForms & Adobe Forms
Print-output design in SmartForms and SAP Interactive Forms by Adobe (PDF), plus ADS server admin and form-preview troubleshooting.
Workflow
SAP Business Workflow
SWDD workflow design, tasks, agent determination, deadline monitoring, and workflow error triage in SWI2/SWI6. Approvals for PR/PO, MDG, and travel.
Fiori
Fiori & SAPUI5
Fiori Launchpad configuration, standard-app activation, custom SAPUI5 tile development, ODATA service exposure, and Fiori security role design.
Debug
Debugging & Performance
ABAP runtime analysis (SAT/SE30), SQL trace (ST05), heap/object dumps (ST22), single-transaction analysis, and long-running-job tuning.

Integrations

SAP as the Hub of the Enterprise

Very few SAP outages are actually inside SAP. They’re at the seams — a stuck IDoc, an expired RFC user, a certificate rotation, a middleware queue backed up behind a bad payload. This is where we spend most of our operational hours, and it’s where our clients tell us we earn our keep.

Native SAP Interfaces

  • RFC destinations (SM59): synchronous, asynchronous, transactional, and queued RFC; TCP/IP and HTTP destinations, SNC-secured connections
  • BAPIs: object-level, released business APIs for external systems — BAPI_SALESORDER_CREATEFROMDAT2, BAPI_PO_CREATE1, and the rest of the standard library
  • IDoc / ALE: distribution model design, partner profiles, port and message-type configuration, WE02/WE05 monitoring, and IDoc reprocessing playbooks
  • Enhanced OData services: exposing CDS views as OData for Fiori and external consumers, ODATA v2 and v4 endpoint governance
  • Web services (SOAP / REST): service registry (SICF/SOAMANAGER), WS-Security, and endpoint monitoring
  • File-based interfaces: AL11, FTP/SFTP-triggered inbound, MFT platforms, secure hand-off with checksum and archive

Middleware & External Systems

  • SAP PI / PO: Integration Directory, ESR, message monitoring, adapter troubleshooting, mapping and value-mapping fixes
  • SAP Cloud Platform Integration (CPI): iFlows, security materials, custom Groovy, and the Cloud Connector back into on-prem
  • MuleSoft / Boomi / Informatica: SAP-native adapter configuration and end-to-end SAP-integration troubleshooting
  • EDI: 850/855/856/810 mapping, VAN and AS2 setup, IDoc handoff to trading partners
  • Banking / payment: DME output, host-to-host connections, SWIFT/positive-pay files, MT940 return-file processing
  • MES / warehouse / retail: plant-floor systems, EWM/WM handshakes, POS inventory back-office batches

Security & GRC

Roles People Can Live With — and Auditors Can Sign Off On

Authorization work in SAP is the difference between a clean audit and a six-figure remediation project. We do it the boring, methodical way that survives every auditor and every re-org.

Authorization Concept & PFCG

  • Role design: composite, single, derived, and reference roles — built from a documented authorization concept, not screenshotted from another client
  • SU24 maintenance: authorization-object / transaction-code proposal maintenance so PFCG generates clean profiles the first time
  • Master / derived model: value-only differences in derived roles so a change in the master ripples cleanly to every business unit or org level
  • User provisioning & deprovisioning: IDM integration, joiner/mover/leaver, and periodic access reviews
  • HANA & database-layer security: analytical privileges, HDI containers, and DB-user hygiene under BW/4HANA and S/4HANA
  • Fiori security: catalogs, groups, and space/page assignments — the piece that often gets skipped in Fiori rollouts

SAP GRC Access Control

  • Access Risk Analysis (ARA): rule-set curation, SoD conflict analysis at user and role level, mitigation-control workflow
  • Access Request Management (ARM): workflow-driven access requests with automatic risk analysis in the approval path
  • Business Role Management (BRM): business-role definition and technical-role mapping — the business speaks its language, SAP speaks its own
  • Emergency Access Management (EAM / Firefighter): break-glass IDs, session logging, and reason-code review before the auditor asks
  • Access Certification: periodic user-access reviews, reviewer workflow, and evidence packages for SOX and internal audit
  • Continuous compliance: monitoring for policy violations, GRC configuration maintenance, and rule-set updates as regulations change

Scheduling Automation

SAP Jobs, Orchestrated with the Rest of Your Batch

SAP’s built-in scheduling is fine for the SM37 crowd — but the moment a job needs to wait on a non-SAP dependency, or trigger something outside SAP on completion, you’re past what native scheduling can do. The SAP XBP (external interface) is designed exactly for this, and we’ve been using it for years to let enterprise schedulers drive SAP jobs alongside the rest of the enterprise batch.

Native SAP Scheduling

  • SM36 / SM37: job definition, variants, start conditions, event-driven jobs (SM64), and job-log parsing
  • Process chains (BW/4HANA): chain design, meta-chain patterns, restart strategy, and BI-native monitoring in RSPC
  • Background workload management: operation modes, work-process distribution, and long-running-job policy
  • Event-driven jobs: events raised programmatically or from external systems that trigger downstream SM37 jobs
  • Job scheduling authorizations: S_BTCH_JOB and companions — who can schedule what, and where the auditor draws the line

Enterprise Scheduler Integration

  • SAP XBP interface: the SAP-certified external-scheduler API — job intercept, start, monitor, and log-retrieval from Tidal, Redwood, Automic, and others
  • Tidal SAP adapter: our specialty — XBP-based Tidal integration for ECC, S/4HANA, and BW/4HANA, with process-chain launch and completion capture
  • Cross-system dependencies: “wait for the EDI 850 file, run BAPI_SALESORDER, then trigger the Informatica ETL” — end-to-end orchestration in one job stream
  • Job chaining across landscapes: job dependencies between ECC, BW, PI/PO, and non-SAP systems — driven from a single scheduler
  • SLA-aware alerting: late-job predictions on SAP batches surfaced to your NOC, not just failures after the fact
  • Regulatory batch windows: quarter-end, year-end, and SOX-relevant close batches run with change-controlled schedules and audit-ready evidence

Analytics Stack

BW/4HANA, BusinessObjects & the Analytics Layer

Our BI practice sits inside our SAP practice — because most enterprise analytics workloads still originate in an SAP source system and end up in a BOBJ report or an SAC dashboard.

BW/4HANA
Data Warehouse Layer
BW/4HANA administration, ADSOs, InfoObjects, CompositeProviders, transformation design, DTP tuning, and process-chain monitoring in RSPC. Migration paths from legacy BW 7.x also supported.
Extractors
SAP-Source Extraction
Standard and generic extractors from ECC / S/4HANA, ODP (Operational Data Provisioning), delta management, and Real-Time Replication via SLT for near-live analytics.
BOBJ
BusinessObjects BI Platform
CMC administration, universe (UNV/UNX) design in the Information Design Tool, security via access levels and CMS user/group model, and clustered BOBJ landscape support.
WebI
Web Intelligence
Web Intelligence report design, prompt strategy, drill hierarchies, publications, and scheduling into secured document folders. Live-Office and shared-report patterns for Excel-heavy finance teams.
AO / Crystal
Analysis for Office & Crystal
Analysis for Office (SAP-native Excel front-end for BW/HANA), plus Crystal Reports for pixel-perfect operational reports and print-oriented output.
SAC
SAP Analytics Cloud
SAC tenant admin, live connections to BW/4HANA and HANA, story and dashboard design, planning workflows, and hybrid BOBJ-to-SAC migration strategy for clients moving to the cloud tier.
HANA
HANA Views & Modeling
HANA calculation views (graphical and script-based), analytical privileges, and CDS-based virtual data modeling for S/4HANA embedded analytics.
Data flow
Non-SAP Data Ingest
Third-party data landing into BW/HANA via BODS/Data Services, SDI/SDA remote sources, or ETL from Informatica — with BW-native modeling on top.

The NOCG Difference

Managed SAP — A Practice, on Call

Most SAP incidents don’t wait for business hours. Kernel-panicked application servers, a full transport queue on a Sunday night, a stuck IDoc backing up a customer’s order — they happen when they happen. Our managed-SAP offering puts an SAP engineer, not a script, on the console.

24×7 Managed SAP

Kernel Patches. EHP Weekends. Audit Season.

We watch the technical monitors (SM21, ST22, SM50, DB02, RZ20 alerts), the transactional monitors (SM37 failures, WE02/WE05 IDoc backlogs, SM58 tRFC queues, SXMB_MONI PI errors), and the perimeter of every SAP-adjacent interface. When something breaks, an SAP engineer responds — not a helpdesk router.

You get a monthly operations report that lays out every incident, root cause, remediation, upcoming kernel and support-pack roadmap, EWA highlights, and change-control activity. Ops teams stop having to build their own SAP status update.

BASIS On-CallReal engineers, on-shift, for kernel, transport, and interface events
Patch & EHP WindowsSupport-packs, kernel, and EHPs applied off-hours with documented rollback
GRC & Audit CycleAccess certification, SoD remediation, and SOX evidence prepared, not scrambled
Monthly Ops ReportIncidents, EWA highlights, remediation, and roadmap in one document

Typical Managed SAP Includes

  • ✓ABAP & Java stack health, dispatcher / gateway / message-server monitoring
  • ✓HANA / Oracle / SQL Server backup, recovery drills, and space management
  • ✓Overnight batch & IDoc queue triage; RFC destination and gateway hardening
  • ✓Kernel & support-pack roadmap, applied in scheduled windows
  • ✓Transport promotion & ChaRM change control; SoD checks before release
  • ✓User provisioning / deprovisioning, Firefighter session review, access certification
  • ✓BW/4HANA process-chain monitoring & BOBJ platform administration
  • ✓Quarterly DR failover drill and EWA-driven optimization review

Vertical Expertise

Where SAP Actually Runs the Business

SAP is deployed differently in every vertical. Our practice depth is strongest in the industries where a bad transport can move the stock price and a stuck IDoc can stop a truck.

Distribution & Manufacturing

Where MM, SD, PP, and WM/EWM run the physical business — every day, at scale. A stuck IDoc is a stuck pallet. A late batch means a shipment misses the truck.

Where We Help

  • End-to-end order-to-cash & procure-to-pay flow support
  • EWM / WM warehouse operations, RF, and yard management
  • EDI trading-partner onboarding, mapping, and monitoring
  • MES / plant-floor integration and shop-order execution
  • MDG master-data governance and cross-plant harmonization

Financial Services & Regulated Industries

Where GRC audit posture, SoD analysis, and change-controlled transports matter as much as the transactional throughput. Auditors ask hard questions here.

Where We Help

  • SAP GRC Access Control implementation & ongoing operations
  • SoD rule-set curation, mitigation controls, and remediation projects
  • Audit-package evidence (access certification, Firefighter review, transport logs)
  • SOX-relevant change-control workflow & segregation of duties
  • Regulatory reporting extracts (Basel, FFIEC) originating in SAP FI/CO/BW

How We Engage

Assess → Design → Deliver → Operate

Whether you’re inheriting a stalled implementation, replacing a departing BASIS team, or standing up managed services for the first time — the same four-phase model applies.

01

Assess

Landscape inventory, EWA review, transport-history walk-back, role and SoD posture, backup and DR test evidence, and ticket-history pattern analysis. Delivered as a written health check with a punch list.

02

Design

Target-state architecture, remediation roadmap, roles & SoD design, patch and EHP schedule, integration monitoring plan, and a documented run-book. Approved before hands go on the keyboard.

03

Deliver

Execute the roadmap in scheduled windows — installs, patches, role rebuilds, interface hardening. Progress reviewed weekly with the client sponsor, no surprises at go-live.

04

Operate

Handoff to your team or move into managed services with 24×7 NOC coverage, monthly operations reporting, and a quarterly EWA-driven optimization review.

Why NOCG for SAP

An Integrated Practice, Not a Body-Shop

The kind of SAP depth that comes from running production landscapes for enterprise clients whose auditors, CFOs, and customers all know the number of the person on call.

Full Stack
BASIS, functional, technical, security, and analytics under one team
ECC → S/4HANA
Continuous experience across the modern SAP platform generations
SAP + Tidal
One of the few practices with deep XBP-based scheduler integration
Audit-Ready
GRC Access Control, SoD, Firefighter, and SOX evidence built into ops

Ready to Start?

Let’s Talk About Your SAP Landscape

Inheriting a stalled implementation, replacing a departing BASIS team, hardening the interface layer, cleaning up SoD before audit, or standing up 24×7 managed SAP for the first time — we’ll listen first and put a plan in front of you.