Diseño y desarrollo de una aplicación web para la gestión y control de roles, transacciones del módulo SAP PM, basada en principios de gobernanza de TI y arquitectura empresarial en UNACEM Ecuador

Abstract

Abstract: The management of roles and transactions in the SAP Plant Maintenance (PM) module at UNACEM Ecuador faced several limitations due to manual request processing, scattered information, and the absence of an automated mechanism for identifying Segregation of Duties (SoD) conflicts. These conditions reduced access traceability and increased risks related to internal control. To address these challenges, this Curricular Integration Project developed a web application for managing users, roles, transactions, and SoD conflicts, aiming to optimize access and authorization management within the SAP PM module. The research adopted an applied approach supported by interviews and document analysis. Enterprise architecture was modeled using ArchiMate, while the software was developed following the Scrum framework with Laravel, PHP, and MySQL based on the Model View Controller (MVC) architectural pattern. In addition, the proposed solution incorporated IT governance principles from COBIT 2019, ISO/IEC 38500, and ISO/IEC 27001, together with the software quality characteristics established in ISO/IEC 25010. The resulting application provides centralized management of users, roles, transactions, and SoD matrices, automates conflict detection, and generates the technical reports required for SAP PM authorization management. Validation included unit, functional, automated, and usability testing. The results confirmed compliance with the defined requirements, achieving 100% task effectiveness, an average System Usability Scale (SUS) score of 90, and Lighthouse performance scores above 95%. These findings demonstrate that the proposed solution strengthens access control, improves request traceability, and enhances internal control over the authorization process.