TrustRadius: an HG Insights company

SAP Access Control Reviews & Insights

Score8.7 out of 10

448 Reviews and Ratings

Community insights

TrustRadius Insights for SAP Access Control are summaries of user sentiment data from TrustRadius reviews and, when necessary, third party data sources.

Pros

Automation and Integration: Users have expressed high satisfaction with the automation and integration features of the workflow-based provisioning process. Specifically, they find the HR trigger automation and integration with HR systems to be extremely beneficial for streamlining access management tasks efficiently.

Efficient Risk Analysis: Many reviewers have highlighted the product's impressive capability to conduct thorough risk analysis of Segregation of Duties risks within workflows. This functionality significantly enhances the system's efficiency and reliability, providing users with valuable insights to mitigate potential security threats effectively.

Role Management and Access Control: Users value the automatic role management of users integrated into the product. The enterprise-wide risk analysis offered by the system ensures robust access provisioning processes, enhancing overall access controls within organizations.

SAP Access Control Reviews

18 Reviews

SAP Access Control

Rating: 10 out of 10
Incentivized

Use Cases and Deployment Scope

The SAP Access Control module helped us to work on User SOD (Segregation of Duty) cleanly without hampering any running processes. It helped us clean roles, which is very helpful from an audit perspective. It also helped us a lot with process control and Risk Management due to unauthorised access to critical tcodes.

Pros

  • User access requst Management through work flow
  • Risk Management due to SOD
  • Audit & complaince proof

Cons

  • Details reporting object wise
  • Resource consuming while running the background job
  • Dashboard can be improved

Likelihood to Recommend

SAP Access Control is very good in terms of Audit and compliance. It will provide you with all the required reports in one click.

SAP Access Control review

Rating: 9 out of 10
Incentivized

Use Cases and Deployment Scope

We are using SAP Access Control for access request management and SOD analysis. It helps us enable access governance and minimize the risk by doing UAR (User Access Review).

Pros

  • Access Request Management
  • Privilege/ Emergency Access Management
  • Access Request Analysis

Cons

  • So far looks good. It would be better if SAP Access Control make connection with Cloud and non SAP Solution

Likelihood to Recommend

Assigning role based on some department / logic automatically
Vetted Review
SAP Access Control
10 years of experience

Complete Suite for Access Management, But User Experience Could Be Improved

Rating: 9 out of 10

Use Cases and Deployment Scope

We use SAP access control to manage access requests for SAP applications on-premise, including: - access requests - risk analysis

Pros

  • Access provisioning
  • Access request management
  • Risk Analysis

Cons

  • Out-of-the-box connectivity to cloud solutions
  • Out-of-the-box connectivity to non-SAP applications
  • User Interface

Likelihood to Recommend

It's well suited for on-premise SAP applications. For non-SAP and cloud applications, additional solutions are needed with additional licenses, like SAP IAG or pathlock connectors.
Vetted Review
SAP Access Control
7 years of experience

SAP Access Control - No clear Roadmap

Rating: 6 out of 10
Incentivized

Use Cases and Deployment Scope

SAP Access control is used to monitor access risk controls and Privileged user management within the global company.

Pros

  • Reliable
  • Trusted by internal and external auditors
  • SoD analysis

Cons

  • Reporting
  • Connectivity non SAP Cloud systems
  • User Interface
  • Simplicity on the GRC FF log review
  • Connectivity with SAP PC

Likelihood to Recommend

Appropriate:
Simple on premise systems SoD.
Firefighter escenarios.

Not appropriate:
Hybrid environments.
Mitigation controls, require PC to work properly.
Vetted Review
SAP Access Control
12 years of experience

SAP Access Control - The right solution for SAP on-premise access management

Rating: 8 out of 10
Incentivized

Use Cases and Deployment Scope

We use if for general access management, privileged access management and access risk analysis.
SAP Access Control helps us to ensure that no accesses are provisioned without the due approvals and prevents/identifies which SoD risks are currently assigned to users.
Regardind Privileged Access Management, we use it to have detailed reports about usage details.

Pros

  • Access Provisioning
  • Access Risk Analysis
  • Privileged Access Management

Cons

  • Movers/Leavers management
  • Approvers/Owners review
  • Access Management for SAP Cloud solutions without additional middlewares
  • Access management for non-SAP solutions

Likelihood to Recommend

SAP Access Control is the best solution to manage access on SAP on-premise systems.
It needs to evolve when it comes to SAP Cloud and non-SAP applications

User Provisioning Simplified!!

Rating: 9 out of 10
Incentivized

Use Cases and Deployment Scope

We use SAP Access Control for automatic user provisioning and ensure access to terminated employees is no longer available. We have it integrated with Service now to reduce the manual effort for the creation of users and also to prevent fraudulent access to SAP applications integrated via SAP Access control.

Pros

  • Provisioning user access
  • Automatic role management of users
  • Analyze enterprise-wide risk

Cons

  • Integration with third parties
  • Composite role risk assessment
  • Better interface for fire fighter access provisioning

Likelihood to Recommend

It is an extremely useful product when you have a tight-knit landscape integrated with SAP. It is also very helpful to reduce the manual effort of user provisioning when the GRC system is integrated with several SAP applications like S/4 and HANA. It is not really helpful in scenarios where multiple ERP systems are involved.

User system controls that work

Rating: 7 out of 10
Incentivized

Use Cases and Deployment Scope

We use it to control all access and give roles to users

Pros

  • assigns roles
  • restricts access to information

Cons

  • Allow for easier additions to more areas when needed

Likelihood to Recommend

It is well suited for larger companies but need to be worked on for smaller organizations that have more people doing multiple roles.
Vetted Review
SAP Access Control
2 years of experience

Best tool to manage users in large scale with out audit ramifications in long term

Rating: 10 out of 10

Use Cases and Deployment Scope

We have been using SAP access control for 8 plus years with a lot of automation which is adopted for hr integration hr triggers, automation of workflows for provisioning of access.

Pros

  • Workflow based provisioning process.
  • Hr trigger automation and integration with hr.
  • Risk analysis of sod risks is inherent in workflows which makes it a good product.

Cons

  • Firefighter log review logs should be made more detailed and the extent of log depth is limited.
  • Product integration into cloud products is limited even with iag integration as it does not have firefighter functionality for some cloud products like S4.

Likelihood to Recommend

Appropriate for SAP hrs hierarchy integration and can have multiple hierarchies of org structures adopted as alternative workflow support. Cons of access control are the logs of firefighter usage are still limited in depth and does not evolve to adop more cloud products which are coming at a plaster pace than the ac product as such.

SAP Access Controls Rock!

Rating: 10 out of 10
Incentivized

Use Cases and Deployment Scope

I use SAP Access Control to leverage ARA, EAM, and process controls. It has addressed user provisioning and certification.

Pros

  • SOD and RA Analysis
  • Role and Manager Approval
  • Access Recertification

Cons

  • For detailed role provisioning for orgs and subprocesses
  • More streamlined risk analysis and mitigation

Likelihood to Recommend

Access Controls is good for organizations with strong security teams and governance to leverage AC for SOD and RA. It is not too good for largely complex organizations with nuance SOD and RA risks.
Vetted Review
SAP Access Control
7 years of experience

SAP Access Control Review

Rating: 8 out of 10
Incentivized

Use Cases and Deployment Scope

I use SAP Access Control for solving the user creation and termination process, which helps the service desk team. They can spend more time on solving other user security issues than on user termination and the onboarding process. Access control is currently being used for User Access Recertification as well.

Pros

  • Onboarding users
  • Terminating users
  • Additional access

Cons

  • More integration with AD

Likelihood to Recommend

Managing approval workflows for getting approvals from managers, and role owners and avoiding the manual process of emailing them and asking them for approvals. SAP Access Control is easy to set up with no code development.
Vetted Review
SAP Access Control
3 years of experience