Getting Started with SAP Access Control pre-assembled rapid-deployment Solution. October 2015

Transcription

1 Getting Started with SAP Access Control pre-assembled rapid-deployment Solution October 2015

2 Solutions for specific business needs Business challenges Customers are finding it difficult and time consuming to address the following challenges often associated with Access Control implementations: Fragmented approach to managing access risk Lack of business and IT collaboration Excessive time and cost of audits Dealing with audit and/or fraud issues 2011 SAP AG. All rights reserved. 2

3 SAP Access Control rapid-deployment solution Overview and business benefits At a glance SAP Access Control provides enterprise-wide visibility of user access to help your organization prevent access risk, reduce the cost and effort of access risk management, and minimize the time of compliance. Business benefits Prevent access risk Proactively identify and remediate access risk violations Reduce the cost and effort of access risk management Automate risk analysis, user access and business role management activities Minimize the time to compliance Integrate risk analysis and compliance with access management 2013 SAP AG. All rights reserved. 3

4 SAP Access Control rapid-deployment solution Solution scope Access risk analysis and remediation Helps companies to prevent access risk by proactively identifying and remediating access risk violations. Critical access management Enables companies to control exception based access by providing a closed loop process to audit firefighting activities. User access management Enables an automated, compliant user provisioning process. Business role management Enforces compliant role management best practices Fiori Apps for SAP Access Control Simplified user access request via fiori apps, and get business insights through smart business apps and fiori factsheets 2013 SAP AG. All rights reserved. 4

5 Pre-assembled SAP Rapid Deployment Solutions Definition & Example Combination of 1 to n solution packages Consisting of Pre-installed system (landscape) Database Software Plus the content of Rapid Deployment Solutions Software License (BYOL) Content (configuration, reports etc.) Documentation Service (depending on level of configuration) Delivered as a SAP software appliance Ready-to-activate Semi-activated Fully-activated - ready to demo (includes demo data) Deployment on premise, hybrid or in the cloud Example: SAP ERP Foundation Extension SAP ERP Foundation Extension is a solution leveraging Suite on HANA, combining it with SAP innovations from UX, Mobility, Analytics, Cloud and Technology. SAP ERP Foundation Extension SAP Fiori SAP GRC Access Control SAP ERP BI SAP BI SAP HANA SAP Fiori Found. & App RDS SAP Access Control RDS SAP EFE RDS SAP HANA Live RDS Rapid DB migration to HANA RDS 2013 SAP AG. All rights reserved. 5

6 Pre-assembled SAP Rapid Deployment Solutions How is this realized? pards Classical RDS Activation-ready Semi-activated Fully Activated User defined options part of RDS service delivery Activation content based on SAP Best Practices Post-Processing Pre-assembly Post-Processing Pre-assembly Pre-assembly Classification of SAP Best Practices tasks into Pre-Assembly activities which can be configured without customer input and without technical dependencies such as dependent customizing Post-Processing activities which require customer input or have technical dependencies with each other Tasks can be subject to both SAP Access Control pards Not released for productive usage 2013 SAP AG. All rights reserved. 6

7 Classical vs. Semi-Activated Activation Content Classical User defined options part of RDS service delivery Semi-activated User defined options part of RDS service delivery POST-PROCESSING RDS SAP Best Practices Activation content based on SAP Best Practices PRE-ASSEMBLY 2013 SAP AG. All rights reserved. 7

8 Pre-assembled SAP Rapid Deployment Solutions Value for the Customer? Customer Projects Delivers Classical designbased projects HW prep SW install Business Blueprint Realization Test Go-live Software Rapid-Deployment Solutions Business and Services Best Practices Software pre-assembled Rapid-Deployment Solutions SAP Software Appliance 2013 SAP AG. All rights reserved. 8

9 System Landscape SAP Access Control Rapid Deployment Solution semi-activated - Appliance Semi-activated Cloud Appliance SAP Access Control application Content of: - SAP Access Control RDS SAP Access Control 10.1 SP10 (GRCFND_A / V1100) SAP ERP 6.0 and above Customer side GRC NetWeaver Plug-In (GRCPINW) SAP Smart Business 1.0 for SAP solutions for GRC (UIHGRC01 / 100) SAP Fiori for SAP GRC 1.0 (UIGRC001 / 100) SAP NetWeaver 7.40 SP10 (Include Gateway Foundation SAP_GWFND) SAP HANA 1.0 SP09 (include SAP HANA Live 1.0 for SAP solutions for GRC 10.1, SAP SMART BUSINESS FOR GRC 1.0) RFC Connection The appliance consists of: 1) Pre-installed technical landscape SAP HANA Platform Edition HANA DB SPS09 SAP NetWeaver 7.40 SP10 SAP Access Control 10.1 SP10 SAP Fiori for SAP GRC 1.0 2) Technical objects, such as: SAP Notes SAP Solution Builder Add-on SAP Best Practices technical objects Add-on 3) Semi-activated solution content from SAP Access Control RDS 2013 SAP AG. All rights reserved. 9

10 Pre-/Post-Classification of Configuration Tasks Impact on Configuration Guides included as separate chapter of configuration guide 2011 SAP AG. All rights reserved. 10

11 Pre-/Post-Classification of Configuration Tasks Impact on Solution Builder Content SAP Access Control rapid deployment solution semi-activated appliance is delivered with 2 solution files PRE_RDS_GRC_AC contains the generic settings for SAP Access Control, it has been activated in pre-assembled appliance POS_RDS_GRC_AC contains the necessary post activities, customers ERP system will be integrated through guided procedure, customers get full capabilities from SAP Access Control application once it s activated 2011 SAP AG. All rights reserved. 11

12 pards Appliance Consumption via SAP CAL Prerequisites: S-User, Cloud provider account, ideally with VPC setup Contact your Account Executive in case you need license (in case of AC pards: licenses for SAP Access Control) Steps: Purchase the SAP Cloud Appliance Library Subscription Package from the SAP Store to unlock the entire list of SAP solutions in the Library. You will receive logon details to your SAP Cloud Appliance Library management console. Configure your SAP Cloud Appliance Library management console to connect to your cloud provider account. Select and activate the solution in the library to start an instance of it within your SAP Cloud Appliance Library management console SAP AG. All rights reserved. 12

13 SAP Access Control on SAP CAL 2011 SAP AG. All rights reserved. 13

14 Thank you