A brownfield conversion carries your roles over as they are: every SoD conflict, every unused transaction, every workaround added since go-live. A pre-conversion authorization health check baselines SoD on ECC, removes unused access, maps successor transactions and Fiori apps into the ruleset, and designs SoD-free composite roles, in parallel with the migration project.
