TrustRadius Insights for SAP Access Control are summaries of user sentiment data from TrustRadius reviews and, when necessary, third party data sources.
Pros
Automation and Integration: Users have expressed high satisfaction with the automation and integration features of the workflow-based provisioning process. Specifically, they find the HR trigger automation and integration with HR systems to be extremely beneficial for streamlining access management tasks efficiently.
Efficient Risk Analysis: Many reviewers have highlighted the product's impressive capability to conduct thorough risk analysis of Segregation of Duties risks within workflows. This functionality significantly enhances the system's efficiency and reliability, providing users with valuable insights to mitigate potential security threats effectively.
Role Management and Access Control: Users value the automatic role management of users integrated into the product. The enterprise-wide risk analysis offered by the system ensures robust access provisioning processes, enhancing overall access controls within organizations.
The SAP Access Control module helped us to work on User SOD (Segregation of Duty) cleanly without hampering any running processes. It helped us clean roles, which is very helpful from an audit perspective. It also helped us a lot with process control and Risk Management due to unauthorised access to critical tcodes.
Pros
User access requst Management through work flow
Risk Management due to SOD
Audit & complaince proof
Cons
Details reporting object wise
Resource consuming while running the background job
Dashboard can be improved
Likelihood to Recommend
SAP Access Control is very good in terms of Audit and compliance. It will provide you with all the required reports in one click.
We are using SAP Access Control for access request management and SOD analysis. It helps us enable access governance and minimize the risk by doing UAR (User Access Review).
Pros
Access Request Management
Privilege/ Emergency Access Management
Access Request Analysis
Cons
So far looks good. It would be better if SAP Access Control make connection with Cloud and non SAP Solution
Likelihood to Recommend
Assigning role based on some department / logic automatically
VU
Verified User
Consultant in Information Technology (10,001+ employees)
We use SAP access control to manage access requests for SAP applications on-premise, including: - access requests - risk analysis
Pros
Access provisioning
Access request management
Risk Analysis
Cons
Out-of-the-box connectivity to cloud solutions
Out-of-the-box connectivity to non-SAP applications
User Interface
Likelihood to Recommend
It's well suited for on-premise SAP applications. For non-SAP and cloud applications, additional solutions are needed with additional licenses, like SAP IAG or pathlock connectors.
VU
Verified User
Director in Finance and Accounting (10,001+ employees)
We use if for general access management, privileged access management and access risk analysis. SAP Access Control helps us to ensure that no accesses are provisioned without the due approvals and prevents/identifies which SoD risks are currently assigned to users. Regardind Privileged Access Management, we use it to have detailed reports about usage details.
Pros
Access Provisioning
Access Risk Analysis
Privileged Access Management
Cons
Movers/Leavers management
Approvers/Owners review
Access Management for SAP Cloud solutions without additional middlewares
Access management for non-SAP solutions
Likelihood to Recommend
SAP Access Control is the best solution to manage access on SAP on-premise systems. It needs to evolve when it comes to SAP Cloud and non-SAP applications
We use SAP Access Control for automatic user provisioning and ensure access to terminated employees is no longer available. We have it integrated with Service now to reduce the manual effort for the creation of users and also to prevent fraudulent access to SAP applications integrated via SAP Access control.
Pros
Provisioning user access
Automatic role management of users
Analyze enterprise-wide risk
Cons
Integration with third parties
Composite role risk assessment
Better interface for fire fighter access provisioning
Likelihood to Recommend
It is an extremely useful product when you have a tight-knit landscape integrated with SAP. It is also very helpful to reduce the manual effort of user provisioning when the GRC system is integrated with several SAP applications like S/4 and HANA. It is not really helpful in scenarios where multiple ERP systems are involved.
We have been using SAP access control for 8 plus years with a lot of automation which is adopted for hr integration hr triggers, automation of workflows for provisioning of access.
Pros
Workflow based provisioning process.
Hr trigger automation and integration with hr.
Risk analysis of sod risks is inherent in workflows which makes it a good product.
Cons
Firefighter log review logs should be made more detailed and the extent of log depth is limited.
Product integration into cloud products is limited even with iag integration as it does not have firefighter functionality for some cloud products like S4.
Likelihood to Recommend
Appropriate for SAP hrs hierarchy integration and can have multiple hierarchies of org structures adopted as alternative workflow support. Cons of access control are the logs of firefighter usage are still limited in depth and does not evolve to adop more cloud products which are coming at a plaster pace than the ac product as such.
I use SAP Access Control to leverage ARA, EAM, and process controls. It has addressed user provisioning and certification.
Pros
SOD and RA Analysis
Role and Manager Approval
Access Recertification
Cons
For detailed role provisioning for orgs and subprocesses
More streamlined risk analysis and mitigation
Likelihood to Recommend
Access Controls is good for organizations with strong security teams and governance to leverage AC for SOD and RA. It is not too good for largely complex organizations with nuance SOD and RA risks.
VU
Verified User
Employee in Finance and Accounting (10,001+ employees)
I use SAP Access Control for solving the user creation and termination process, which helps the service desk team. They can spend more time on solving other user security issues than on user termination and the onboarding process. Access control is currently being used for User Access Recertification as well.
Pros
Onboarding users
Terminating users
Additional access
Cons
More integration with AD
Likelihood to Recommend
Managing approval workflows for getting approvals from managers, and role owners and avoiding the manual process of emailing them and asking them for approvals. SAP Access Control is easy to set up with no code development.