Skip to main content
TrustRadius
SAP Access Control

SAP Access Control

Overview

What is SAP Access Control?

SAP Access control streamlines the process of managing and validating user access to applications and data with minimal support from IT, with the goal of giving employees the applications and services they need without exposing data and processes to unauthorized…

Read more
Recent Reviews

SAP Access Control

7 out of 10
February 14, 2020
Incentivized
We use SAP Access Control across the whole organization. It makes user management simple and cost effective. Role management, user …
Continue reading
Read all reviews

Awards

Products that are considered exceptional by their customers based on a variety of criteria win TrustRadius awards. Learn more about the types of TrustRadius awards to make the best purchase decision. More about TrustRadius Awards

Reviewer Pros & Cons

View all pros & cons
Return to navigation

Pricing

View all pricing
N/A
Unavailable

What is SAP Access Control?

SAP Access control streamlines the process of managing and validating user access to applications and data with minimal support from IT, with the goal of giving employees the applications and services they need without exposing data and processes to unauthorized use.

Entry-level set up fee?

  • No setup fee

Offerings

  • Free Trial
  • Free/Freemium Version
  • Premium Consulting/Integration Services

Would you like us to let the vendor know that you want pricing?

6 people also want pricing

Alternatives Pricing

What is ManageEngine ADAudit Plus?

ADAudit Plus offers real-time monitoring, user and entity behaviour analytics, and change audit reports that helps users keep AD and IT infrastructure secure and compliant.Track all changes to Windows AD objects including users, groups, computers, GPOs, and OUs.Achieve hybrid AD monitoring with a…

What is SecurID?

SecurID, a company and solution suite from RSA, is an identity and access management suite supporting access management, authentication, and identity governance.

Return to navigation

Product Details

What is SAP Access Control?

SAP Access control streamlines the process of managing and validating user access to applications and data with minimal support from IT, with the goal of giving employees the applications and services they need without exposing data and processes to unauthorized use.

It is used to streamline the process of managing and validating user access with governance software that automates user provisioning and helps to certify access to on-premise applications and data. It enforces governance by enabling the user to embed preventative policy checks and monitoring emergency access.

Features

  • On-premise or cloud deployment
  • Immediate detection of access violations
  • Self-service access requests
  • Automated reviews of user access

SAP Access Control Video

Why SAP Process Controls is a fantastic compliment to users of SAP access control

SAP Access Control Technical Details

Deployment TypesOn-premise, Software as a Service (SaaS), Cloud, or Web-Based
Operating Systems, ,
Mobile ApplicationNo

Frequently Asked Questions

SAP Access control streamlines the process of managing and validating user access to applications and data with minimal support from IT, with the goal of giving employees the applications and services they need without exposing data and processes to unauthorized use.

Reviewers rate Support Rating highest, with a score of 7.

The most common users of SAP Access Control are from Enterprises (1,001+ employees).
Return to navigation

Comparisons

View all alternatives
Return to navigation

Reviews and Ratings

(445)

Attribute Ratings

Reviews

(1-16 of 16)
Companies can't remove reviews or game the system. Here's why
Score 9 out of 10
Vetted Review
Verified User
We use SAP access control to manage access requests for SAP applications on-premise, including: - access requests - risk analysis
  • Access provisioning
  • Access request management
  • Risk Analysis
  • Out-of-the-box connectivity to cloud solutions
  • Out-of-the-box connectivity to non-SAP applications
  • User Interface
It's well suited for on-premise SAP applications. For non-SAP and cloud applications, additional solutions are needed with additional licenses, like SAP IAG or Pathlock connectors.
Score 6 out of 10
Vetted Review
Verified User
Incentivized
SAP Access control is used to monitor access risk controls and Privileged user management within the global company.
  • Reliable
  • Trusted by internal and external auditors
  • SoD analysis
  • Reporting
  • Connectivity non SAP Cloud systems
  • User Interface
  • Simplicity on the GRC FF log review
  • Connectivity with SAP PC
Appropriate:
Simple on premise systems SoD.
Firefighter escenarios.

Not appropriate:
Hybrid environments.
Mitigation controls, require PC to work properly.
Score 8 out of 10
Vetted Review
Verified User
Incentivized
We use if for general access management, privileged access management and access risk analysis.
SAP Access Control helps us to ensure that no accesses are provisioned without the due approvals and prevents/identifies which SoD risks are currently assigned to users.
Regardind Privileged Access Management, we use it to have detailed reports about usage details.
  • Access Provisioning
  • Access Risk Analysis
  • Privileged Access Management
  • Movers/Leavers management
  • Approvers/Owners review
  • Access Management for SAP Cloud solutions without additional middlewares
  • Access management for non-SAP solutions
SAP Access Control is the best solution to manage access on SAP on-premise systems.
It needs to evolve when it comes to SAP Cloud and non-SAP applications
Score 9 out of 10
Vetted Review
Verified User
Incentivized
We use SAP Access Control for automatic user provisioning and ensure access to terminated employees is no longer available. We have it integrated with Service now to reduce the manual effort for the creation of users and also to prevent fraudulent access to SAP applications integrated via SAP Access control.
  • Provisioning user access
  • Automatic role management of users
  • Analyze enterprise-wide risk
  • Integration with third parties
  • Composite role risk assessment
  • Better interface for fire fighter access provisioning
It is an extremely useful product when you have a tight-knit landscape integrated with SAP. It is also very helpful to reduce the manual effort of user provisioning when the GRC system is integrated with several SAP applications like S/4 and HANA. It is not really helpful in scenarios where multiple ERP systems are involved.
Score 7 out of 10
Vetted Review
Verified User
Incentivized
We use it to control all access and give roles to users
  • assigns roles
  • restricts access to information
  • Allow for easier additions to more areas when needed
It is well suited for larger companies but need to be worked on for smaller organizations that have more people doing multiple roles.
Jayakrishna Moola | TrustRadius Reviewer
Score 10 out of 10
Vetted Review
Verified User
We have been using SAP access control for 8 plus years with a lot of automation which is adopted for hr integration hr triggers, automation of workflows for provisioning of access.
  • Workflow based provisioning process.
  • Hr trigger automation and integration with hr.
  • Risk analysis of sod risks is inherent in workflows which makes it a good product.
  • Firefighter log review logs should be made more detailed and the extent of log depth is limited.
  • Product integration into cloud products is limited even with iag integration as it does not have firefighter functionality for some cloud products like S4.
Appropriate for SAP hrs hierarchy integration and can have multiple hierarchies of org structures adopted as alternative workflow support. Cons of access control are the logs of firefighter usage are still limited in depth and does not evolve to adop more cloud products which are coming at a plaster pace than the ac product as such.
Score 10 out of 10
Vetted Review
Verified User
Incentivized
I use SAP Access Control to leverage ARA, EAM, and process controls. It has addressed user provisioning and certification.
  • SOD and RA Analysis
  • Role and Manager Approval
  • Access Recertification
  • For detailed role provisioning for orgs and subprocesses
  • More streamlined risk analysis and mitigation
Access Controls is good for organizations with strong security teams and governance to leverage AC for SOD and RA. It is not too good for largely complex organizations with nuance SOD and RA risks.
Score 8 out of 10
Vetted Review
Verified User
Incentivized
I use SAP Access Control for solving the user creation and termination process, which helps the service desk team. They can spend more time on solving other user security issues than on user termination and the onboarding process. Access control is currently being used for User Access Recertification as well.
  • Onboarding users
  • Terminating users
  • Additional access
  • More integration with AD
Managing approval workflows for getting approvals from managers, and role owners and avoiding the manual process of emailing them and asking them for approvals. SAP Access Control is easy to set up with no code development.
Matt Saunders | TrustRadius Reviewer
Score 9 out of 10
Vetted Review
Verified User
Incentivized
SAP Access Control is a key application at Huntington National Bank, which is used across all the departments. Implementation of this software was carried out late last year. It gives our users opportunities to access to submit self-service, approvals and workflow access requests.
  • SAP Access Control ensures that our services are accessed by the right users since it send me alerts when an employee tries to access any application. That way, I am able to either authorize or cancel the request to safeguard of company data.
  • With SAP Access Control, it is easy to automate and monitor how our team access services and applications. SAP Access Control has an automatic feature that notifies me when employees access applications and services and the issues they are encountering.
  • In addition, SAP Access Control add security on employees login to ensure that their data on the applications are encrypted to never leak to cyber attackers.
  • It’s clear that SAP Access Control has robust features that safeguard applications and services logins for our employees. However, it can be hectic during initial setup to fully customize them.
  • Kudos to the vendor support team they streamlined customization by offering documentation and inviting us to join webinars when there is new feature update.
SAP Access Control allocates high security on our company data by encrypting data and safeguarding logins every time a user tries to access our applications and services. During initial setup, it can be overwhelming to customize features on SAP Access Control, that’s why I would advice prospects that are looking to implement it to partner with third-party service providers or seek support from the vendor post implementation team.
Edward McCallister | TrustRadius Reviewer
Score 10 out of 10
Vetted Review
Verified User
Incentivized
In our company, it is extremely important to have access control and to be able to manage the login of all the services and platforms that we use for business purposes. I believe that SAP Access Control has been an essential software for us, since all our employees in our company can have guaranteed access to all company services without the need to put labor information at risk, in addition, SAP Access Control allows us to enhance , optimize and have a wide administration of access control of the users who work for us.<br><br>SAP Access Control is implemented in all sectors of our company, but it is being managed by our technological sector in order to have a good configuration of the automation of the processed data, in addition, to be able to detect and solve all kinds of risks that occur. in accessing SAP and third party systems. SAP Access Control offers us a broad visualization of the problems that can arise during the login and that can be tragic to comply with the business processes. I am very happy with the ability that SAP Access Control has had to help me maintain a totally secure login and to help me to have a broad compliance with the activities of my employees.
  • I love the highly automated way SAP Access Control has to monitor my employees' access to any of the platforms we use at our company. SAP Access Control has an automatic monitoring which is able to tell me exactly the gaps in the login, what problems the employees are having during the login and also gives me an instant solution to the problem. This function is very important, it detects gaps in a matter of seconds without having to do anything at all.
  • SAP Access Control adds much more streamlined security for all my employees' login. All keys are encrypted and have an encryption code that is impossible to break. Adding additional security to my employees 'logins is extremely important, it maintains job security and allows my employees business data to be kept secure at all times.
  • Every time my employees try to access a platform that we use in our company, an alert will be sent to my SAP Access Control interface, in order to authorize the login. This feature is amazing, as it adds as a second-pass authorization to be able to maintain a comprehensive login and to be successful in data protection.
  • I wish SAP Access Control had greater ease when using this platform for the first time. It is true that the SAP Access Control functions are very effective and do not have any type of errors during their application to control the login, but learning how to use the functions is quite a challenge, since it is somewhat complicated . I hope that SAP Access Control integrates new manuals or courses to learn how to use the platform.
SAP Access Control offers a job guarantee that many companies wish they had. Obviously I would recommend this platform to anyone, SAP Access Control is a very advanced service to control the login of the services used in a company, it has a very good work structure and helps employees to have a login with automated encryption. SAP Access Control is a platform a bit difficult to use, it is not easy to make the configurations so that you have a good protection of the users' passwords, however, I would recommend that the person who is thinking of using it in your company, hire a team in charge to make the implementation and its use easier in the short, medium and long term. It is a worthwhile platform, it protects all employee data and adds extra security to the login, in addition, it monitors employee activity with applications integrated to SAP.
December 30, 2020

SAP Access Management

Goldy Verma | TrustRadius Reviewer
Score 9 out of 10
Vetted Review
Verified User
Incentivized
SAP Access Control is used to manage user access to SAP systems and LDAP. This tool ensures compliant user provisioning for SAP systems and also acts as a PAM (privilege access management) tool. With some front-end customization, this tool has the capability to cover most of the business requirements related to access management.
  • Access risk analysis
  • Access request management
  • Business role management
  • It still uses the webdynpro for the front end. All webdynpro applications should be migrated to Fiori for a better user experience.
  • Some functionalities can't manage in mass way. I.E. building derive roles/multiple single roles,
  • Interface with LDAP is not efficient.
  • For managing access for SAP systems.
  • In combination with SAP IDM/ third party IAM systems for ensuring compliant user provisioning (CUP)
  • For designing and building SOD conflict-free SAP roles.
  • Setting up a flexible workflow for managing access orders.
  • For privilege access management /fire fighter functionality.
Score 10 out of 10
Vetted Review
Verified User
Incentivized
SAP Access Control is being used across our company as a whole. My department (sales) uses this software as an add on to Oracle. SAP Access Control allows Human Resources (HR) and Customer Relationship Management (CRM) to work together in performing a risk analysis and also to carry out periodic reviews for compliance.
  • Safeguards private company information.
  • Helps every department of our organization to prevent and detect risks.
  • Help reduce data access from unauthorized users.
  • Process/ Workflow Automation.
  • Requires a great deal of SAP knowledge and takes time to learn.
  • Best if you have SAP experts to assist with setup and maintenance.
This software enable easy configuration and management of users. SAP Access Control has helped to maintain segregation of duties across different domains within SAP. It is very appropriate for Human Resources and Sales to connect with. There is an ease of use in receiving and forwarding expenses and credits among different employees.
February 14, 2020

SAP Access Control

Score 7 out of 10
Vetted Review
Verified User
Incentivized
We use SAP Access Control across the whole organization. It makes user management simple and cost effective. Role management, user management, risk analysis and workflow management are very simple. It can be integrated with IDM and SAP NetWeaver for more cost-effective user management. You can manage business roles and emergency access management easily with SAP Access Control. BRFplus and MSMP functionality make user request/role assignment request approval easier and more convenient.
  • ARA: Access Risk Analysis with global and customized rule set.
  • Emergency access management with well-organized reason code facility for audit.
  • Role development is not that convenient.
  • Initial configuration more complicated.
If your organization has 5 or 10 SAP systems then it would be better to use centralize SAP AC/GRC to manage everything together. With a one-time effort all systems can be managed. SAP AC can be connected to HR and Active Directory to pull user data automatically instead of creating everything manually. For end-user usages this tool is more user friendly also. You can also use other add-on services like Process Control and Global Trade Services. The newer version AC 12 tool can be well integrated with S/4HANA for complete access control management.
Score 8 out of 10
Vetted Review
Verified User
Incentivized
SAP access control is being used in our organization to manage user access and mitigate related risks.
  • Data access certification
  • Automation of user access
  • Emergency access monitoring
  • The learning curve can be a bit steep
SAP Access Control is great for organizations that have a large number of users requiring varying levels of access. It is less appropriate for very small companies with few users.
Luis Cruz | TrustRadius Reviewer
Score 10 out of 10
Vetted Review
Verified User
Incentivized
We are using SAP Access Control on a company with about 800 users. The main problem to solve is to assign privileges to users according to their job function, keeping the segregation of duties well managed. The aim is to cover all the organization operations in five countries. The business problem SAP Access Control deals with is fraud due to excessive access privilege. When you look at about 2000 transactions available on SAP, to select the right ones to every employee is a daunting task. Those transactions you select for every employee get registered on SAP Access Control and this allows the required monitoring to keep from changes on the original design. The changes can occur accidentally or intentionally, either way, they are controlled through SAP Access Control.
  • Segregation of duties is the first thing. SAP Access Control allows to declare couple of transactions that can not be assigned together because they represent an action and an authorization for the action. Using these Segregation of Duties rules allows SAP Access Control to report on users that do not comply with a given rule.
  • Workflow for access management is second. The provision of new users, new roles or the changes made to roles can be streamlined on the application. This allows the implementation of effective and efficient procedures to meet all access requests.
  • Monitoring on super user activities. Using SAP Access Control, we can remove to IT personnel all the super user privileges. If the occasion arises and someone for the IT department requires super user privileges to solve or troubleshoot a problem, a special role is assigned temporally to him. SAP Access Control keeps a log of the activities performed during the time the IT user works with the in the temporary role, allowing complete monitoring on super user activities.
  • SAP products in general are not user friendly. SAP Access Control is no exception to this. Even though the use of the Netweaver interface is a big improvement on user interaction, the presentation of big amounts of data could be improved (list of roles, information of values assigned to authorization object fields, and the like).
  • Regarding functionality on Access Control, the product is about complete; I cannot think of anything else to add to it.
SAP Access Control is suitable for organizations with more than 100 users. At this user amount it begins to get difficult to keep track of the roles assigned to every user and the satisfaction of segregation of duties rules on every role assigned. If the number of users extends the hundreds, the cost of assurance of the right privileges assigned to every user rises exponentially. Failure to implement a solution like SAP Access Control in an organization will result in the execution of fraud cases. If a company is not managing access privileges with a tool like SAP Access Control, I suggest keeping a record of loss events related to excessive privileges. This record will justify investment in the product.
Score 8 out of 10
Vetted Review
Verified User
Incentivized
We are using it for our user provisioning process, where a user needs required access and gets converted to a GRC request and a workflow gets triggered. This workflow will pass on to different stages of approval before auto provisioning of approved roles. The workflow also nicely integrates with segregation of duties rule set and flags SoD right away.
  • GRC tool has the all required modules like SOD, and CUP workflows.
  • Most of workflows are pre-delivered so it's super easy to implement.
  • Can also perform UAR and SOD reviews.
  • The tools still have many bugs in sync jobs and we need to apply SNOTES to fix the issue.. sometime that creates another issue in the system.
  • Firefighter log collection program has bugs.
This tool works brilliantly for user access provisioning, simulating risks for roles or users and running ad-hoc reports. The Firefighter module works great where we provide elevated access to IT users but the Firefighter log collection job has few areas for improvements. Also integration with other non SAP products is not smooth.
Return to navigation