A typical Access Control administrator can spend hours a week maintaining owner changes. How can your organization use uChangeAC to avoid administrative backlogs, remove error prone processes and streamline updates in SAP Access Control (AC)? Lets start with a common scenario ... Bob got a promotion and will be changing jobs. He has many responsibilities including Risk Owner, Mitigation Monitor, Firefighter ID Owner and is the role Owner and Approver for the roles associated with that risk. As an AC administrator, I must find time to map Bob’s replacement to all of his former assignments. I must go into multiple screens and functions to remove Bob and add the new owner responsible for these duties. Where will I find the time?
With uChangeAC you can now make all of these changes from one single screen. No need to go to multiple screens to update different impacted areas, saving multiple clicks, potential errors and reducing administration from hours to minutes.
Another great feature is the ability to run in simulation mode, which allows you to validate your changes prior to making them. The uChangeAC utility utilizes standard SAP code, programs and transactions to store audit information; and, therefore requires minimal training to use. By doing this uChangeAC is fully supported by SAP Access Control and does not touch database tables directly. With uChangeAC our AC admin runs a simulation, is able to see what is changed in real time, ensures expected results and quickly (within minutes) can make the updates in production. This enables Bob’s replacement to take over almost seamlessly and reduces confusion and downtime during owner changes. Let’s face it: responsibilities change daily in the real world.
Ever wanted just a few more reports in SAP Access Control (AC)? Have a hard time finding the reports you use frequently? Want to be alerted when an Approver leaves the company? If you said yes to any of these questions, uAssist from ultimumIT is the utility for you. After working on multiple customer implementations for over 10+ years, we found that customers had common requests for reporting needs. Using this feedback we developed uAssist. Can I get a notification when a sensitive role is assigned to a user? How will I know when a role approver has left the company and is no longer valid?
uAssist can do all those things and more! It is a plug-in utility designed to assist GRC Administrators/super users streamline recurring activities with features in the standard SAP AC product, as well as some not available. The best part is it operates seamlessly with AC10.x using the same UI, reducing the learning curve to almost instantaneous. It includes 3 areas of focus: Reports, Control and Risk Analyzer and Continuous Compliance (refer to side panel for details).
uAssist allows you to utilize one of many reports to determine connection status, review business process and sub process or obtain a complete list of transaction codes within a role by system. You can look deeper at your controls and review how they are applied to users with SoD violations. Additionally you can track when a sensitive role is assigned via an email alert or receive email notification when a user who is listed as an Approver is terminated from the company. The difference is, these features are now all accessible from a central screen of the main console.