Access control list pros and cons

SAP Access Control ensures that our services are accessed by the right users since it send me alerts when an employee tries to access any application. That way, I am able to either authorize or cancel the request to safeguard of company data.

With SAP Access Control, it is easy to automate and monitor how our team access services and applications. SAP Access Control has an automatic feature that notifies me when employees access applications and services and the issues they are encountering.

In addition, SAP Access Control add security on employees login to ensure that their data on the applications are encrypted to never leak to cyber attackers.

It’s clear that SAP Access Control has robust features that safeguard applications and services logins for our employees. However, it can be hectic during initial setup to fully customize them.

Kudos to the vendor support team they streamlined customization by offering documentation and inviting us to join webinars when there is new feature update.

I love the highly automated way SAP Access Control has to monitor my employees' access to any of the platforms we use at our company. SAP Access Control has an automatic monitoring which is able to tell me exactly the gaps in the login, what problems the employees are having during the login and also gives me an instant solution to the problem. This function is very important, it detects gaps in a matter of seconds without having to do anything at all.

SAP Access Control adds much more streamlined security for all my employees' login. All keys are encrypted and have an encryption code that is impossible to break. Adding additional security to my employees 'logins is extremely important, it maintains job security and allows my employees business data to be kept secure at all times.

Every time my employees try to access a platform that we use in our company, an alert will be sent to my SAP Access Control interface, in order to authorize the login. This feature is amazing, as it adds as a second-pass authorization to be able to maintain a comprehensive login and to be successful in data protection.

I wish SAP Access Control had greater ease when using this platform for the first time. It is true that the SAP Access Control functions are very effective and do not have any type of errors during their application to control the login, but learning how to use the functions is quite a challenge, since it is somewhat complicated . I hope that SAP Access Control integrates new manuals or courses to learn how to use the platform.

Access request management

It still uses the webdynpro for the front end. All webdynpro applications should be migrated to Fiori for a better user experience.

Some functionalities can't manage in mass way. I.E. building derive roles/multiple single roles,

Interface with LDAP is not efficient.

Safeguards private company information.

Helps every department of our organization to prevent and detect risks.

Help reduce data access from unauthorized users.

Process/ Workflow Automation.

Requires a great deal of SAP knowledge and takes time to learn.

Best if you have SAP experts to assist with setup and maintenance.

ARA: Access Risk Analysis with global and customized rule set.

Emergency access management with well-organized reason code facility for audit.

Role development is not that convenient.

Initial configuration more complicated.

Data access certification

Automation of user access

Emergency access monitoring

The learning curve can be a bit steep

Segregation of duties is the first thing. SAP Access Control allows to declare couple of transactions that can not be assigned together because they represent an action and an authorization for the action. Using these Segregation of Duties rules allows SAP Access Control to report on users that do not comply with a given rule.

Workflow for access management is second. The provision of new users, new roles or the changes made to roles can be streamlined on the application. This allows the implementation of effective and efficient procedures to meet all access requests.

Monitoring on super user activities. Using SAP Access Control, we can remove to IT personnel all the super user privileges. If the occasion arises and someone for the IT department requires super user privileges to solve or troubleshoot a problem, a special role is assigned temporally to him. SAP Access Control keeps a log of the activities performed during the time the IT user works with the in the temporary role, allowing complete monitoring on super user activities.

SAP products in general are not user friendly. SAP Access Control is no exception to this. Even though the use of the Netweaver interface is a big improvement on user interaction, the presentation of big amounts of data could be improved [list of roles, information of values assigned to authorization object fields, and the like].

Regarding functionality on Access Control, the product is about complete; I cannot think of anything else to add to it.