SAP authorization management: simple and convenient

Ideally, SAP authorizations are granted that are required to complete the respective tasks. In special cases, however, more authorizations are required to carry out certain one-off activities. In the SAP standard system, there is no direct way of gaining short-term access to transactions or tools with higher security levels. In addition, authorizations are not automatically reset when they are no longer required.

"I think the solution is cool because it gives us the opportunity to log all activities and access to the systems in order to comply with our auditor and the compliance guidelines. Fast access, fast implementation, fast documentation at the touch of a button were the criteria for our decision in favor of UAM."

Harald Jell, Head of Logistics Thermoplastics & SAP Lenzing Plastics

In practice, this is sometimes solved with more system authorizations for a user. This applies, for example, to specific authorizations such as vacation or deputy regulations. In the case of departmental changes, it often happens that the old authorizations are simply retained. All in all, this is an approach that poses major security risks, both in terms of unauthorized access and unintentional modifications. In addition, legitimate unpleasant questions may arise during the annual audit.

EFFECTIVELY ELIMINATE SECURITY RISKS WITH UAM

INFORMATICS recognized this fact early on and offers a user-friendly firefighter tool called User Access Management (UAM), which is fully integrated into SAP. This makes it easy to assign additional authorizations to individual users as self-service profiles. If the need arises, they can then make use of the extended authorizations in no time at all and without having to log in again. From then on, all activities that they carry out are logged without interruption and can be made available to an auditor at the touch of a button. As soon as the security-critical work has been completed, logging is also stopped again. Authorization profiles can be assigned not only for individual users, but also for entire departments.

Berndorf Band Group and Lenzing Plastics are now benefiting from UAM and using the lean tool to handle day-to-day business in the SAP IT department in a more structured and simpler way.