Getting Started with SAP Access Control pre-assembled ...sapidp/012002523100013706642014E/… ·...
Transcript of Getting Started with SAP Access Control pre-assembled ...sapidp/012002523100013706642014E/… ·...
February 2015
Getting Started with SAP Access Control
pre-assembled rapid-deployment Solution
© 2015 SAP SE or an SAP affiliate company. All rights reserved. 2Public
Solutions for specific business needs
Business challenges
Customers often find it difficult and time
consuming to address the following
challenges often associated with Access
Control implementations:
• Fragmented approach to managing access
risk
• Lack of business and IT
collaboration
• Excessive time and cost of audits
• Dealing with audit and/or fraud issues
© 2015 SAP SE or an SAP affiliate company. All rights reserved. 3Public
• Prevent access risk
• Proactively identify and remediate access risk
violations
• Reduce the cost and effort of access risk
management
• Automate risk analysis, user access and
business role management activities
• Minimize the time to compliance
• Integrate risk analysis and compliance with
access management
SAP Access Control rapid-deployment solutionOverview and business benefits
SAP Access Control provides enterprise-wide
visibility of user access to help your organization
prevent access risk, reduce the cost and effort of
access risk management, and minimize the time of
compliance.
Business benefitsAt a glance
© 2015 SAP SE or an SAP affiliate company. All rights reserved. 4Public
SAP Access Control rapid-deployment solutionSolution scope
Access risk analysis and remediation
Helps companies to prevent access risk by proactively identifying
and remediating access risk violations.
Critical access management
Enables companies to control exception based access by
providing a closed loop process to audit firefighting activities.
User access management
Enables an automated, compliant user provisioning process.
Business role management
Enforces compliant role management best practices
© 2015 SAP SE or an SAP affiliate company. All rights reserved. 5Public
Pre-assembled SAP Rapid Deployment Solutions Definition & Example
Example: SAP ERP Foundation Extension
SAP ERP Foundation Extension is a solution leveraging
Suite on HANA, combining it with SAP innovations from
UX, Mobility, Analytics, Cloud and Technology.
Combination of 1 to n solution packages
Consisting of
Pre-installed system (landscape)
Database
Software
Plus the content of Rapid Deployment Solutions
Software License (BYOL)
Content (configuration, reports etc.)
Documentation
Service (depending on level of
configuration)
Delivered as a SAP software appliance
Ready-to-activate
Semi-activated
Fully-activated - ready to demo (includes
demo data)
Deployment on premise, hybrid or in the cloud
SAP ERP Foundation
Extension
SAP HANA Rapid DB migration to HANA RDS
SAP ERP SAP EFE RDS
SAP HANA Live RDS
SAP GRC Access
ControlSAP Access Control RDS
SAP Fiori SAP Fiori Found. & App RDS
BI
SAP BI
© 2015 SAP SE or an SAP affiliate company. All rights reserved. 6Public
Pre-assembled SAP Rapid Deployment Solutions How is this realized?
Activation
content based on
SAP Best
Practices
User defined options
part of RDS service
delivery
Classification of SAP Best Practices tasks into
Pre-Assembly
– activities which can be configured without customer input and without technical dependencies such as
dependent customizing
Post-Processing
– activities which require customer input or have technical dependencies with each other
Tasks can be subject to both
Classical RDS
Post-Processing
Pre-assembly
Post-Processing
Pre-assembly
Activation-ready
Pre-assembly
Semi-activated
paRDS
Fully Activated
Not released for productive usage
SAP Access Control paRDS
© 2015 SAP SE or an SAP affiliate company. All rights reserved. 7Public
‘Classical’ vs. ‘Semi-Activated’ Activation Content
RDSActivation content based
on SAP Best Practices
‚User defined options‘ part
of RDS service delivery
SAP Best
Practices
„Classical“
PRE-ASSEMBLY
POST-PROCESSING
‚User defined options‘ part
of RDS service delivery
Semi-activated
© 2015 SAP SE or an SAP affiliate company. All rights reserved. 8Public
Pre-assembled SAP Rapid Deployment SolutionsValue for the Customer?
Classical design-
based
projectsGo-liveTestRealization
HW prep
SW install
Business
Blueprint
Delivers
Rapid-Deployment
Solutions
pre-assembled
Rapid-Deployment
Solutions
Business
and Services
Best
Practices
SAP
Software
Appliance
Customer Projects
Software
Software
© 2015 SAP SE or an SAP affiliate company. All rights reserved. 9Public
SAP Access Control rapid-deployment solution Semi-activated Appliance
The appliance consists of:
1) Pre-installed technical
landscape
– SAP HANA Platform Edition 1.0 -
HANA DB SPS08
– SAP NetWeaver 7.40 SP06
– SAP Access Control 10.1 SP05
2) Technical objects, such as:
– SAP Notes
– SAP Solution Builder Add-on
– SAP Best Practices technical objects
Add-on
3) Semi-activated solution
content from SAP Access
Control RDS
© 2015 SAP SE or an SAP affiliate company. All rights reserved. 10Public
Pre-/Post-Classification of Configuration TasksImpact on Configuration Guides
included as separate chapter of
configuration guide
© 2015 SAP SE or an SAP affiliate company. All rights reserved. 11Public
Pre-/Post-Classification of Configuration TasksImpact on Solution Builder Content
SAP Access Control rapid deployment solution semi-activated appliance is delivered with 2 solution files
• PRE_RDS_GRC_AC contains the generic settings for SAP Access Control, it has been activated in pre-assembled
appliance
• POS_RDS_GRC_AC contains the necessary post activities, customers’ ERP system will be integrated through guided
procedure, customers get full capabilities from SAP Access Control application once it’s activated
© 2015 SAP SE or an SAP affiliate company. All rights reserved. 12Public
paRDS Appliance Consumption via SAP CAL
Prerequisites:
• S-User, Cloud provider account, ideally with VPC
setup
• Contact your Account Executive in case you need
license (in case of AC paRDS: licenses for SAP
Access Control)
Steps:
• Purchase the SAP Cloud Appliance Library
Subscription Package from the SAP Store to unlock
the entire list of SAP solutions in the Library.
• You will receive logon details to your SAP Cloud
Appliance Library management console.
• Configure your SAP Cloud Appliance Library
management console to connect to your cloud
provider account.
• Select and activate the solution in the library to
start an instance of it within your SAP Cloud
Appliance Library management console.
© 2015 SAP SE or an SAP affiliate company. All rights reserved. 13Public
SAP Access Control on SAP CAL
© 2015 SAP SE or an SAP affiliate company. All rights reserved.
Thank you
Contact information:
F name MI. L name
Title
Address
Phone number