SAP Access Control

Access provisioning

Access request management

Risk Analysis

Out-of-the-box connectivity to cloud solutions

Out-of-the-box connectivity to non-SAP applications

User Interface

Reliable

Trusted by internal and external auditors

SoD analysis

Reporting

Connectivity non SAP Cloud systems

User Interface

Simplicity on the GRC FF log review

Connectivity with SAP PC

Access Provisioning

Access Risk Analysis

Privileged Access Management

Movers/Leavers management

Approvers/Owners review

Access Management for SAP Cloud solutions without additional middlewares

Access management for non-SAP solutions

Provisioning user access

Automatic role management of users

Analyze enterprise-wide risk

Integration with third parties

Composite role risk assessment

Better interface for fire fighter access provisioning

assigns roles

restricts access to information

Allow for easier additions to more areas when needed

Workflow based provisioning process.

Hr trigger automation and integration with hr.

Risk analysis of sod risks is inherent in workflows which makes it a good product.

Firefighter log review logs should be made more detailed and the extent of log depth is limited.

Product integration into cloud products is limited even with iag integration as it does not have firefighter functionality for some cloud products like S4.

SOD and RA Analysis

Role and Manager Approval

Access Recertification

For detailed role provisioning for orgs and subprocesses

More streamlined risk analysis and mitigation

Onboarding users

Terminating users

Additional access

More integration with AD

SAP Access Control ensures that our services are accessed by the right users since it send me alerts when an employee tries to access any application. That way, I am able to either authorize or cancel the request to safeguard of company data.

With SAP Access Control, it is easy to automate and monitor how our team access services and applications. SAP Access Control has an automatic feature that notifies me when employees access applications and services and the issues they are encountering.

In addition, SAP Access Control add security on employees login to ensure that their data on the applications are encrypted to never leak to cyber attackers.

It’s clear that SAP Access Control has robust features that safeguard applications and services logins for our employees. However, it can be hectic during initial setup to fully customize them.

Kudos to the vendor support team they streamlined customization by offering documentation and inviting us to join webinars when there is new feature update.

I love the highly automated way SAP Access Control has to monitor my employees' access to any of the platforms we use at our company. SAP Access Control has an automatic monitoring which is able to tell me exactly the gaps in the login, what problems the employees are having during the login and also gives me an instant solution to the problem. This function is very important, it detects gaps in a matter of seconds without having to do anything at all.

SAP Access Control adds much more streamlined security for all my employees' login. All keys are encrypted and have an encryption code that is impossible to break. Adding additional security to my employees 'logins is extremely important, it maintains job security and allows my employees business data to be kept secure at all times.

Every time my employees try to access a platform that we use in our company, an alert will be sent to my SAP Access Control interface, in order to authorize the login. This feature is amazing, as it adds as a second-pass authorization to be able to maintain a comprehensive login and to be successful in data protection.

I wish SAP Access Control had greater ease when using this platform for the first time. It is true that the SAP Access Control functions are very effective and do not have any type of errors during their application to control the login, but learning how to use the functions is quite a challenge, since it is somewhat complicated . I hope that SAP Access Control integrates new manuals or courses to learn how to use the platform.

Access risk analysis

Access request management

Business role management

It still uses the webdynpro for the front end. All webdynpro applications should be migrated to Fiori for a better user experience.

Some functionalities can't manage in mass way. I.E. building derive roles/multiple single roles,

Interface with LDAP is not efficient.

Safeguards private company information.

Helps every department of our organization to prevent and detect risks.

Help reduce data access from unauthorized users.

Process/ Workflow Automation.

Requires a great deal of SAP knowledge and takes time to learn.

Best if you have SAP experts to assist with setup and maintenance.

ARA: Access Risk Analysis with global and customized rule set.

Emergency access management with well-organized reason code facility for audit.

Role development is not that convenient.

Initial configuration more complicated.

Data access certification

Automation of user access

Emergency access monitoring

The learning curve can be a bit steep

Segregation of duties is the first thing. SAP Access Control allows to declare couple of transactions that can not be assigned together because they represent an action and an authorization for the action. Using these Segregation of Duties rules allows SAP Access Control to report on users that do not comply with a given rule.

Workflow for access management is second. The provision of new users, new roles or the changes made to roles can be streamlined on the application. This allows the implementation of effective and efficient procedures to meet all access requests.

Monitoring on super user activities. Using SAP Access Control, we can remove to IT personnel all the super user privileges. If the occasion arises and someone for the IT department requires super user privileges to solve or troubleshoot a problem, a special role is assigned temporally to him. SAP Access Control keeps a log of the activities performed during the time the IT user works with the in the temporary role, allowing complete monitoring on super user activities.

SAP products in general are not user friendly. SAP Access Control is no exception to this. Even though the use of the Netweaver interface is a big improvement on user interaction, the presentation of big amounts of data could be improved (list of roles, information of values assigned to authorization object fields, and the like).

Regarding functionality on Access Control, the product is about complete; I cannot think of anything else to add to it.

GRC tool has the all required modules like SOD, and CUP workflows.

Most of workflows are pre-delivered so it's super easy to implement.

Can also perform UAR and SOD reviews.

The tools still have many bugs in sync jobs and we need to apply SNOTES to fix the issue.. sometime that creates another issue in the system.

Firefighter log collection program has bugs.