TrustRadius
SAP Access Control benefitsWe are using SAP Access Control on a company with about 800 users. The main problem to solve is to assign privileges to users according to their job function, keeping the segregation of duties well managed. The aim is to cover all the organization operations in five countries. The business problem SAP Access Control deals with is fraud due to excessive access privilege. When you look at about 2000 transactions available on SAP, to select the right ones to every employee is a daunting task. Those transactions you select for every employee get registered on SAP Access Control and this allows the required monitoring to keep from changes on the original design. The changes can occur accidentally or intentionally, either way, they are controlled through SAP Access Control.,Segregation of duties is the first thing. SAP Access Control allows to declare couple of transactions that can not be assigned together because they represent an action and an authorization for the action. Using these Segregation of Duties rules allows SAP Access Control to report on users that do not comply with a given rule. Workflow for access management is second. The provision of new users, new roles or the changes made to roles can be streamlined on the application. This allows the implementation of effective and efficient procedures to meet all access requests. Monitoring on super user activities. Using SAP Access Control, we can remove to IT personnel all the super user privileges. If the occasion arises and someone for the IT department requires super user privileges to solve or troubleshoot a problem, a special role is assigned temporally to him. SAP Access Control keeps a log of the activities performed during the time the IT user works with the in the temporary role, allowing complete monitoring on super user activities.,SAP products in general are not user friendly. SAP Access Control is no exception to this. Even though the use of the Netweaver interface is a big improvement on user interaction, the presentation of big amounts of data could be improved (list of roles, information of values assigned to authorization object fields, and the like). Regarding functionality on Access Control, the product is about complete; I cannot think of anything else to add to it.,10,Reducing risk of fraud. Implementing SAP Access Control allows analysis of every role assigned to a job on the organization. Through this analysis, weakness on roles are detected, corrected and monitored. As the users feel the change, they also feel that they are being monitored, preventing any intent to use his position and privileges to take personal advantage. So a major impact to organizations is to reduce the financial lost due to frauds. Reducing cost for monitoring. Another positive impact is lowering the cost of monitoring. This is twofold: First, a rather small team can manage access management. Second, through the use of SAP Access Control the complete universe of roles and users can be monitored without increasing the cost for the continuous monitoring. During transactions. The use of SAP Access Controls allows detection of transactions that, from an information security point of view, require some redesign. When SAP GCR is implemented, you make some discoveries such as: obsolete transactions, transactions with no authorization objects and the like. The transactions with these problems can be left out of the active roles, waiting for remediation of the issues found.Free up time for more meaningful tasks with SAP Access ControlSAP access control is being used in our organization to manage user access and mitigate related risks.,Data access certification Automation of user access Emergency access monitoring,The learning curve can be a bit steep,8,Less time spent on user access management More time to devote to other projects More confidence in access and data security,Wix, Skype for Business, ADP Workforce Now
Unspecified
SAP Access Control
179 Ratings
Score 8.0 out of 101
<a href='https://www.trustradius.com/static/about-trustradius-scoring' target='_blank' rel='nofollow'>trScore algorithm: Learn more.</a>TRScore

SAP Access Control Reviews

SAP Access Control
179 Ratings
<a href='https://www.trustradius.com/static/about-trustradius-scoring' target='_blank' rel='nofollow'>trScore algorithm: Learn more.</a>
Score 8.0 out of 101
Show Filters 
Hide Filters 
Filter 179 vetted SAP Access Control reviews and ratings
Clear all filters
Overall Rating
Reviewer's Company Size
Last Updated
By Topic
Industry
Department
Experience
Job Type
Role
Reviews (1-2 of 2)
  Vendors can't alter or remove reviews. Here's why.
Luis Cruz profile photo
March 22, 2018

User Review: "SAP Access Control benefits"

Score 10 out of 10
Vetted Review
Verified User
Review Source
We are using SAP Access Control on a company with about 800 users. The main problem to solve is to assign privileges to users according to their job function, keeping the segregation of duties well managed. The aim is to cover all the organization operations in five countries. The business problem SAP Access Control deals with is fraud due to excessive access privilege. When you look at about 2000 transactions available on SAP, to select the right ones to every employee is a daunting task. Those transactions you select for every employee get registered on SAP Access Control and this allows the required monitoring to keep from changes on the original design. The changes can occur accidentally or intentionally, either way, they are controlled through SAP Access Control.
  • Segregation of duties is the first thing. SAP Access Control allows to declare couple of transactions that can not be assigned together because they represent an action and an authorization for the action. Using these Segregation of Duties rules allows SAP Access Control to report on users that do not comply with a given rule.
  • Workflow for access management is second. The provision of new users, new roles or the changes made to roles can be streamlined on the application. This allows the implementation of effective and efficient procedures to meet all access requests.
  • Monitoring on super user activities. Using SAP Access Control, we can remove to IT personnel all the super user privileges. If the occasion arises and someone for the IT department requires super user privileges to solve or troubleshoot a problem, a special role is assigned temporally to him. SAP Access Control keeps a log of the activities performed during the time the IT user works with the in the temporary role, allowing complete monitoring on super user activities.
  • SAP products in general are not user friendly. SAP Access Control is no exception to this. Even though the use of the Netweaver interface is a big improvement on user interaction, the presentation of big amounts of data could be improved (list of roles, information of values assigned to authorization object fields, and the like).
  • Regarding functionality on Access Control, the product is about complete; I cannot think of anything else to add to it.
SAP Access Control is suitable for organizations with more than 100 users. At this user amount it begins to get difficult to keep track of the roles assigned to every user and the satisfaction of segregation of duties rules on every role assigned. If the number of users extends the hundreds, the cost of assurance of the right privileges assigned to every user rises exponentially. Failure to implement a solution like SAP Access Control in an organization will result in the execution of fraud cases. If a company is not managing access privileges with a tool like SAP Access Control, I suggest keeping a record of loss events related to excessive privileges. This record will justify investment in the product.
Read Luis Cruz's full review
No photo available
June 06, 2018

Review: "Free up time for more meaningful tasks with SAP Access Control"

Score 8 out of 10
Vetted Review
Verified User
Review Source
SAP access control is being used in our organization to manage user access and mitigate related risks.
  • Data access certification
  • Automation of user access
  • Emergency access monitoring
  • The learning curve can be a bit steep
SAP Access Control is great for organizations that have a large number of users requiring varying levels of access. It is less appropriate for very small companies with few users.
Read this authenticated review

SAP Access Control Scorecard Summary

About SAP Access Control

SAP Access control streamlines the process of managing and validating user access to applications and data with minimal support from IT.

SAP Access Control Technical Details

Operating Systems: Unspecified
Mobile Application:No