SAP BusinessObjects Access Control 5.3 Support Pack 9. Functional Overview SAP BusinessObjects Access Control Solution Management September 30, 2009

Transcription

1 SAP BusinessObjects Access Control 5.3 Support Pack 9 Functional Overview SAP BusinessObjects Access Control Solution Management September 30, 2009

2 Disclaimer The information in this presentation/document is confidential and proprietary to SAP and may not be disclosed without the permission of SAP. This presentation is not subject to your license agreement or any other service or subscription agreement with SAP. SAP has no obligation to pursue any course of business outlined in this document or any related presentation, or to develop or release any functionality mentioned therein. This document, or any related presentation about SAP s strategy and possible future developments, directions, and functionality of products and/or platforms, are all subject to change and may be changed by SAP at any time for any reason without notice. The information in this document is not a commitment, promise, or legal obligation to deliver any material, code, or functionality. This document is provided without a warranty of any kind, either express or implied, including but not limited to, the implied warranties of merchantability, fitness for a particular purpose, or non-infringement. This document is for informational purposes and may not be incorporated into a contract. SAP assumes no responsibility for errors or omissions in this document, except if such damages were caused by SAP intentionally or grossly negligent. All forward-looking statements are subject to various risks and uncertainties that could cause actual results to differ materially from expectations. Readers are cautioned not to place undue reliance on these forward-looking statements, which speak only as of their dates, and they should not be relied upon in making purchasing decisions. SAP AG 2009 SAP BusinessObjects Access Control 5.3 SP9 / Page 2

3 Introduction Working with our customers, through our Customer Influence Councils, we identified top enhancement requests In order to ensure that we continue to deliver value to our customers, we secured exceptional approval to include these enhancements in a maintenance release SAP BusinessObjects Access Control 5.3 SP9 provides maintenance updates, as well as selected enhancements for your Access Control deployment In this presentation, you will see the key enhancements and their benefits Released on September SAP AG 2009 SAP BusinessObjects Access Control 5.3 SP9 / Page 3

4 What's New in SAP BusinessObjects Access Control 5.3 SP9 A new reporting data mart for Access Control Risk Analysis and Remediation (RAR) and Compliant User Provisioning (CUP) that enables customized reporting by integrating with a customer's reporting tool of choice User Access Review (UAR) has been enhanced to offer the flexibility of reviewing users based on company policies CUP enhancements provide improved provisioning and password self-service, as well as new configuration and notification options Auditing improvements provide more detail for actions on CUP requests, default roles and role mapping. Additionally, RAR configuration changes are captured in change log reporting Enhanced Identity Management (IdM) Integration provides additional information on role attributes, as well as better workflow stage information Enterprise Role Management (ERM) enhancements provide for easy role import and maintenance, enhanced role definition, and flexibility in updating the role design process Additional enhancements include improved usability SAP AG 2009 SAP BusinessObjects Access Control 5.3 SP9 / Page 4

5 Topics 1. Custom Reporting Enablement 2. User Access Review Enhancements 3. Compliant User Provisioning Improvements 4. Auditing Improvements 5. Enhanced Identity Management Integration 6. Enterprise Role Management Enhancements 7. Usability Enhancements SAP AG 2009 SAP BusinessObjects Access Control 5.3 SP9 / Page 5

6 Custom Reporting Enablement A new reporting data mart has been introduced that enables custom reporting on RAR and CUP data The data mart extracts the relevant data from the RAR and CUP and converts the data for reporting purposes The data mart is non-historical Data mart schema will be published, which enables customers to integrate with any reporting tools Sample reports based on Crystal Reports will be provided on SDN Note: Reports will not be delivered as the part of SP9 Customer Benefits Provides flexibility to generate custom reports Preserves customer investment in reporting tools by providing access to Access Control data through the tools that you use today SAP AG 2009 SAP BusinessObjects Access Control 5.3 SP9 / Page 6

7 Sample Reports with Crystal Reports Sample Report SAP AG 2009 SAP BusinessObjects Access Control 5.3 SP9 / Page 7

8 Reporting Options In addition to standard reports, SAP BusinessObjects Access Control 5.3 SP9 provides two additional reporting options: SAP BI Integration and Custom Report Enablement through the data mart. BI Integration (Introduced in 5.3) Best used for analytical reporting: Trending information over time Data analysis and data mining Custom Report Enablement (5.3 SP9) Best used for operational reporting: Provides snapshot of latest information For quick custom reports Integrates with SAP BI Enables integration with any reporting tool Entities available for reporting: Risk violations Mitigating controls Rule Architect CUP Request information Alerts Entities available for reporting: Risk violations Mitigating controls Rule Architect CUP Request information Approver and approver delegation SAP AG 2009 SAP BusinessObjects Access Control 5.3 SP9 / Page 8

9 Configuration in RAR Before you can configure the data mart job in Access Control, you must first deploy the data mart. Prerequisite Data mart UI resides on RAR Deployment of RAR is required for data mart feature Off-line risk analysis must be configured Deployment Data mart table is bundled with Single Launch Pad package Download Single Launch Pad to deploy data mart SAP AG 2009 SAP BusinessObjects Access Control 5.3 SP9 / Page 9

10 Configuration in RAR Configuration Configuration for for the the new new data data mart mart is is in in the the RAR RAR Background Background Job Job Configuration Configuration tab tab RAR RAR Data Data is is included included by by default, default, CUP CUP data data is is optionally optionally included included Data Data mart mart job job produces produces the the snapshot snapshot of of latest latest report report data data Incremental Incremental extract extract --extracts extracts delta delta records records between between the the last last extract extract date date and and the the current current extract extract SAP AG 2009 SAP BusinessObjects Access Control 5.3 SP9 / Page 10

11 Frequently Asked Questions I d like to use Crystal Reports with Access Control, what do I need to know? Do I need to have a license? Customers need to have or acquire their own Crystal license. The report mart enables usage of any reporting tool, including the customer s own version of Crystal Reports or other tool. Who manages report content? Sample Crystal reports are delivered through SAP's Software Developer Network (SDN). Customers can begin with samples and modify as needed or create their own Crystal reports. Access Control report content (.rpt) files will be developed and deployed by the customer. Customers are responsible for their own report management, including versioning and translation. SAP AG 2009 SAP BusinessObjects Access Control 5.3 SP9 / Page 11

12 Frequently Asked Questions I d like to use Crystal Reports with Access Control, what do I need to know? How do I access reports? End user access to GRC report is through Business Objects Enterprise InfoView Customer are also able to create SAP Portal iviews for Crystal reports What about report security? Report security is supported by BusinessObjects Enterprise or SAP Portal We don't own Crystal Reports? Do we have to use Crystal Reports? You can integrate with any reporting tools of your choice, such as Microsoft Access for generating custom reports. SAP AG 2009 SAP BusinessObjects Access Control 5.3 SP9 / Page 12

13 Topics 1. Custom Reporting Enablement 2. User Access Review Enhancements 3. Compliant User Provisioning Improvements 4. Auditing Improvements 5. Enhanced Identity Management Integration 6. Enterprise Role Management Enhancements 7. Usability Enhancements SAP AG 2009 SAP BusinessObjects Access Control 5.3 SP9 / Page 13

14 Enhanced Business Process User Access Review User Access Review (UAR) automates the periodic user privilege review process required by regulations or company policy Many customers are finding the return on investment appealing due to the automation our product brings to their periodic review process SAP BusinessObjects Access Control 5.3 SP9 enhances the UAR business process for generating requests SAP AG 2009 SAP BusinessObjects Access Control 5.3 SP9 / Page 14

15 Enhanced Business Process SAP BusinessObjects Access Control 5.3 SP9 enhancements affect the first two steps of the User Access Review Process. User Access Review Process Synchronize users and roles Create UAR requests for all systems Review of UAR requests by Admin Send requests to reviewers SAP BusinessObjects Access Control 5.3 SP9 Enhancements Ability to include or exclude users by: User Type Lock Type Expired Users Create requests based on: User Attributes Role Attributes SAP AG 2009 SAP BusinessObjects Access Control 5.3 SP9 / Page 15

16 Enhanced Business Process With User Access Review enhancements, you can now: Manage reviews based on company policy and auditing rules, such as Role Critical Level, User Type, and User Lock Status Enable review implementation with a phased approach for selected users and roles Facilitate the reconciliation of the user access review with back-end users and roles Customer Benefits Provides flexibility to perform reviews across enterprise divisions Allows company to focus its resources on critical areas for compliance SAP AG 2009 SAP BusinessObjects Access Control 5.3 SP9 / Page 16

17 User Selection Options SAP BusinessObjects Access Control 5.3 SP9 offers more flexibility regarding which users are included for UAR process as per auditing requirement: Include users with selected User Type Exclude locked users with lock codes Exclude expired users SAP AG 2009 SAP BusinessObjects Access Control 5.3 SP9 / Page 17

18 Role Usage Synchronization Job History The job history from completed Role Synchronization jobs provides the details of users and roles extracted from target applications for UAR The information can be used to reconcile with back end user/role information to ensure that the correct number of users/roles are included for the UAR process SAP AG 2009 SAP BusinessObjects Access Control 5.3 SP9 / Page 18

19 UAR Load Data Tasks Users can now define a UAR load data task with specific parameters to generate requests for selected users Tasks defined here are available to run as background jobs SAP AG 2009 SAP BusinessObjects Access Control 5.3 SP9 / Page 19

20 UAR Load Data Tasks SAP BusinessObjects Access Control 5.3 SP9 provides more flexibility for creating UAR load data tasks: Users can be selected by role and/or user specific attributes Role attributes: Critical Level and Functional Area are retrieved only from ERM User Group is from backend SU01 Logon Data tab Recommend maintaining role attributes in ERM SAP AG 2009 SAP BusinessObjects Access Control 5.3 SP9 / Page 20

21 UAR Load Data Job History After the UAR Load Data Job is complete, view job status and job history from the UAR Load Data Tasks menu item on the Configuration tab page SAP AG 2009 SAP BusinessObjects Access Control 5.3 SP9 / Page 21

22 Job ID Display The Job ID is displayed in the request header and indicates that the request is related to a specific UAR review process UAR History Report and User Review Status Report (for UAR) will have Job ID as a new search parameter SAP AG / Page SAP 22<Product BusinessObjects Name and Access Version> Control / Page 5.3 SP9 22 / Page 22

23 CUP Report Download Enhancements In order to provide the insights into SoD/UAR process, Access Control 5.3 SP9 now offers the ability to download complete report results in one text file, which can be imported to a reporting tool for further analysis. For the following reports, all results are downloaded into one file: User Access Review History Report SOD Review History Report User Review Status Report If <65,000 lines, downloads to Microsoft Excel If >65,000 lines, provides option to download to tab delimited text file, which can be imported to reporting tools for further analysis SAP AG 2009 SAP BusinessObjects Access Control 5.3 SP9 / Page 23

24 Topics 1. Custom Reporting Enablement 2. User Access Review Enhancements 3. Compliant User Provisioning Improvements 4. Auditing Improvements 5. Enhanced Identity Management Integration 6. Enterprise Role Management Enhancements 7. Usability Enhancements SAP AG 2009 SAP BusinessObjects Access Control 5.3 SP9 / Page 24

25 Manage Role Assignment Validity Date The Manage Role Assignment Validity Date feature allows users to view multiple role validity dates and add a role assignment with a new validity period for existing roles. Note: This feature does not support modifying or delimiting existing role assignments. Customer Benefits Note: This feature does not support modifying or delimiting existing role assignments. For expiring or expired role assignment (for example, in the case of contractors), this feature enables: The view of existing role assignments The addition of a new extension for the role SAP AG 2009 SAP BusinessObjects Access Control 5.3 SP9 / Page 25

26 Manage Role Assignment Validity Date Existing Roles screen displays all role assignments for existing roles Configuration added to enable or disable the display of expired role assignments SAP AG 2009 SAP BusinessObjects Access Control 5.3 SP9 / Page 26

27 Add New Validity Date for Existing Roles To extend a role assignment, the user or approver will be able to add a new validity date period for an existing role with the Add action For existing roles selected, the default action is Keep For actions Keep and Remove, Valid From/To dates are blank SAP AG 2009 SAP BusinessObjects Access Control 5.3 SP9 / Page 27

28 Risk Analysis Enhancement in CUP Customers have reported that they need more control over which types of risks need to be mitigated in CUP For some organizations, critical access risks are identified for information only and the company does not require the mitigation of these risks by auditing requirements. Access Control now enables organizations to only mitigate SoD risks, not critical action risks Customer Benefit The flexibility to mitigate risks as per the company s compliance policy SAP AG 2009 SAP BusinessObjects Access Control 5.3 SP9 / Page 28

29 Risk Analysis Enhancement in CUP - Configuration A configuration option controls whether critical access risks require mitigation. If checked, the approver must mitigate the critical access risks before approving the request If unchecked, the approver can approve the request without mitigating critical access risks SAP AG 2009 SAP BusinessObjects Access Control 5.3 SP9 / Page 29

30 Risk Analysis Enhancement in CUP More Information If mitigation of critical access risks is not required before approving, then critical access risks are displayed on the Critical Access Risks tab page for information only Risks displayed on the Risks for Mitigation tab page require mitigation before approving The approver needs to mitigate risks displayed on the Risks for Mitigation tab page, depending on the configuration (Approve despite conflicts at global and workflow stage level setting) SAP AG 2009 SAP BusinessObjects Access Control 5.3 SP9 / Page 30

31 Additional SU01 Attributes for Provisioning During provisioning, SAP BusinessObjects Access Control 5.3 SP9 now supports the mapping of the additional SU01 fields: Accounting Number User Group Communication Method (custom field) On the Additional Fields screen of an access request, the following fields can now be entered or edited by the approver: SNC User Group Customer Benefit Reduced IT cost through automation of SU01 provisioning with additional fields SAP AG 2009 SAP BusinessObjects Access Control 5.3 SP9 / Page 31

32 Additional SU01 Attributes for Provisioning Two new standard fields are provided for field mapping in provisioning These two fields can be enabled or disabled in the end user request form by configuration in the end user form personalization. SAP AG 2009 SAP BusinessObjects Access Control 5.3 SP9 / Page 32

33 Additional SU01 Attributes for provisioning If Change Content is allowed at Stage level configuration, the reviewer can enter or modify SNC and User Group during approval. If Change Content is not allowed at Stage level configuration, the reviewer cannot modify SNC or User Group during approval. SAP AG 2009 SAP BusinessObjects Access Control 5.3 SP9 / Page 33

34 Account Validation for CUP Provisioning In addition to validating the account status at provisioning time, Access Control can validate the user account at request submission time to provide a warning or error message before the user proceeds For request type New: Verify and provide warning or error if account exists For request types Change, Delete, Lock, or Unlock: Verify and provide warning or error if account does not exist Account validation works for Access Control delivered standard request types Account validation also works for custom request types without conflicting provisioning actions An example of conflicting provisioning actions is Create_User and Change_User Account validation would not work for this example SAP AG 2009 SAP BusinessObjects Access Control 5.3 SP9 / Page 34

35 Account Validation for CUP Provisioning Account validation can be configured on the Auto Provisioning Configuration screen When the account validation is set to display a warning, the user can still proceed with the request If account validation is set to display an error, the user cannot proceed with the request SAP AG 2009 SAP BusinessObjects Access Control 5.3 SP9 / Page 35

36 Reminder Background Jobs New reminder background jobs for SoD and UAR request types provide the flexibility to generate reminders for SoD, UAR, and other request types. SAP AG 2009 SAP BusinessObjects Access Control 5.3 SP9 / Page 36

37 Reminder Background Jobs Reminder Reminder for SoD Review (New) Reminder for UAR (New) Reminder (Existing job) Description A new background job Reminder for SoD Review must be configured for SoD Review workflow type A new background job Reminder for UAR needs to be configured for UAR workflow type This background job needs to be configured for request types other than SoD/UAR SAP AG 2009 SAP BusinessObjects Access Control 5.3 SP9 / Page 37

38 Enhanced Notification/ Reminder notifications can now support unlimited characters for request approval, rejection, escalation, and notification to next approver. It also supports unlimited characters for all workflow types. Customer Benefit More informative instructions can be included in the Access Control notifications to users in order to reduce requests for help or IT tickets SAP AG 2009 SAP <Product BusinessObjects Name and Access Version> Control / Page 5.3 SP9 38 / Page 38

39 Enhanced Notification/ Reminder Additionally, support of unlimited characters for reminder, submission, and closing s, regardless of workflow types, is now available SAP AG 2009 SAP BusinessObjects Access Control 5.3 SP9 / Page 39

40 Approver Delegation by Administration The administrator can now maintain Approver Delegation: Administrator can delegate on behalf of approver Administrator can assign multiple delegates for a user (with validity dates) Note: Multiple delegates for the same user is allowable, but validity dates should not overlap SAP AG 2009 SAP BusinessObjects Access Control 5.3 SP9 / Page 40

41 Approver Delegation by Administration Reporting The approver delegation report now displays the additional column Delegated by User ID Report can be executed on the basis of additional Search criteria Delegation by User ID SAP AG 2009 SAP BusinessObjects Access Control 5.3 SP9 / Page 41

42 Password Self-Service Enhancements Many customers have found efficiency and cost savings in enabling users to reset their own passwords. SAP BusinessObjects Access Control 5.3 SP 9 focuses on improving the user experience, as well as providing more configurable options: Send password via a time-sensitive link for password security Validate user accounts before password self-service request to reduce unnecessary error messages Enable the company to configure systems that are applicable for password reset Enable password self-service requests to be accessed directly through a separate URL SAP AG 2009 SAP BusinessObjects Access Control 5.3 SP9 / Page 42

43 Password Self-Service Enhancements - Configuration The configuration setting Send Password in Mail enables the password to be sent in text or as a time-sensitive link, which displays the password and expires after a specified time SAP AG 2009 SAP BusinessObjects Access Control 5.3 SP9 / Page 43

44 Password Self-Service Enhancements Validation of User Accounts User account is validated after systems are selected Only systems that are enabled for password self-service are displayed SAP AG 2009 SAP BusinessObjects Access Control 5.3 SP9 / Page 44

45 Password Self-Service Enhancements Configuration of Systems Enables selection of systems that are applicable for Password Reset User will see only relevant systems to reset passwords SAP AG 2009 SAP BusinessObjects Access Control 5.3 SP9 / Page 45

46 Password Self-Service Enhancements Configuration as a Separate Link Enable Password Self-Service URL to be deployed on the portal page as an independent functionality Configure this link as a separate iview on the SAP portal or other portal applications Allow users to directly access password self-service with single signon IP address: Port Number/AE/index_pss.jsp SAP AG 2009 SAP BusinessObjects Access Control 5.3 SP9 / Page 46

47 Topics 1. Custom Reporting Enablement 2. User Access Review Enhancements 3. Compliant User Provisioning Improvements 4. Auditing Improvements 5. Enhanced Identity Management Integration 6. Enterprise Role Management Enhancements 7. Usability Enhancements SAP AG 2009 SAP BusinessObjects Access Control 5.3 SP9 / Page 47

48 Audit Trail Enhancements for CUP SAP BusinessObjects Access Control 5.3 SP9 continues to ensure that relevant information is captured in the Audit Trail to ensure traceability and ease of audit. Auditing functionality enhancements include the following: Displays a complete picture of the actions taken at the request level, including the approvals or rejections received for each request that is processed through Compliant User Provisioning Provides more detail on roles included via parent roles through role mapping or default roles SAP AG 2009 SAP BusinessObjects Access Control 5.3 SP9 / Page 48

49 Audit Trail Enhancements for CUP Enhanced Audit Trail to more comprehensively record request actions taken, including: Records action Remove if the role is removed from the request Identifies the delegated approver if the request is approved or rejected by a delegate Identifies Forwarded By and Forwarded To users in the case of request forwarding Identifies approvers as Administrator if the request was approved by an administrator via the configuration menu Records the role assignment validity date if a role is added Records existing roles removed from the request Identifies roles added because of role mapping/default roles SAP AG 2009 SAP BusinessObjects Access Control 5.3 SP9 / Page 49

50 Audit Trail Enhancements for CUP Example Roles that are added via Role Mapping or Default roles are shown in the audit trail, along with the Main Role or Profile that they are mapped to. Reviewers of the audit trail are able to identify which roles were assigned via role mapping and default roles, as well as the main roles or profiles that triggered the assignments SAP AG 2009 SAP BusinessObjects Access Control 5.3 SP9 / Page 50

51 Configuration Change History in RAR A new Configuration Change History is provided to capture all changes to configurations for an improved auditing process. SAP AG 2009 SAP BusinessObjects Access Control 5.3 SP9 / Page 51

52 Topics 1. Custom Reporting Enablement 2. User Access Review Enhancements 3. Compliant User Provisioning Improvements 4. Auditing Improvements 5. Enhanced Identity Management Integration 6. Enterprise Role Management Enhancements 7. Usability Enhancements SAP AG 2009 SAP BusinessObjects Access Control 5.3 SP9 / Page 52

53 Enhanced Identity Management (IdM) Integration A new version of the Identity Management Integration Web Services is provided in SAP BusinessObjects Access Control 5.3 SP9. The existing web services remain intact and existing integration/implementations will not be impacted. However, customers have a choice to use the new web services. SAPGRC_AC_IDM_ROLEDETAILS_V1_1 The new version provides the custom attributes information of the role. A new web service SAPGRC_AC_IDM_REQUESTDETAILS provides additional information about the request, including: Current Stage Information (Approval status, Approver name) Next Stage Information (Stage name) Risk Analysis (Risks Identified and Mitigated) Request Information (Request ID, Priority, Application, Roles) Customer Benefits Enables IdM to leverage additional role information for role definition and provisioning Improves insights into the request status at any workflow stage SAP AG 2009 SAP BusinessObjects Access Control 5.3 SP9 / Page 53

54 Topics 1. Custom Reporting Enablement 2. User Access Review Enhancements 3. Compliant User Provisioning Improvements 4. Auditing Improvements 5. Enhanced Identity Management Integration 6. Enterprise Role Management Enhancements 7. Usability Enhancements SAP AG 2009 SAP BusinessObjects Access Control 5.3 SP9 / Page 54

55 Role Maintenance Improvements Role maintenance improvements include: The ability to generate a role information file in Microsoft Excel has been added to allow offline maintenance. This file can be imported into ERM for ease of importing role data and maintenance tasks. To be consistent with CUP role attributes, role definition is enhanced with the additional role attributes of Critical Level, Role Owner and Role Approver When roles are imported to CUP from ERM, Critical Level and Role Approver will be included for the role details in CUP. Customer Benefits Enhances ERM s ability to function as the central role repository Improves the efficiency of role import and maintenance SAP AG 2009 SAP BusinessObjects Access Control 5.3 SP9 / Page 55

56 Role Maintenance Improvements Use Enterprise Role Management (ERM) as the central role repository with improved ease of the role maintenance process Load data easily with the enhanced SAP BusinessObjects Access Control 5.3 SP9 Import SAP and Non- SAP Roles to ERM Create or Maintain Roles in ERM Synchronize Roles to CUP for Provisioning and User Access Review SAP BusinessObjects Access Control 5.3 SP9 Enhancements Improved import process with ease of off-line role maintenance Improved consistency between ERM and CUP SAP AG 2009 SAP BusinessObjects Access Control 5.3 SP9 / Page 56

57 Role Maintenance Improvements New attribute - Critical Level to be consistent with role attribute in CUP A flag is used to indicate whether the approver is a Role Owner in ERM or Role Approver in CUP, or both. For ERM, the role approvers in the current version become the Role Owners. All the existing approvers will be Role Owners going forward. SAP AG 2009 SAP BusinessObjects Access Control 5.3 SP9 / Page 57

58 Role Maintenance Improvements Role Methodology Changes to the role design process can now be applied to other roles already existing in the previous design process When the role methodology is changed, identify the existing roles affected by clicking the Apply to Existing Roles button Customer Benefit To support business changes, steps in the role design process can be changed and applied to all roles that were tied to the original process SAP AG 2009 SAP BusinessObjects Access Control 5.3 SP9 / Page 58

59 Role Maintenance Improvements Update Role Methodology for Existing Roles Select existing roles that need to follow the new design process Roles not selected will follow the existing design process SAP AG 2009 SAP BusinessObjects Access Control 5.3 SP9 / Page 59

60 Topics 1. Custom Reporting Enablement 2. User Access Review Enhancements 3. Compliant User Provisioning Improvements 4. Auditing Improvements 5. Enhanced Identity Management Integration 6. Enterprise Role Management Enhancements 7. Usability Enhancements SAP AG 2009 SAP BusinessObjects Access Control 5.3 SP9 / Page 60

61 Usability Enhancements for CUP Enhancements to improve customization and usability throughout the application include flexibility for cancellation actions, additional header information for approval context provided, and more For example: The user selects Request for Approval, finds the User Access Review request, drills into it and clicks the User Access tab. A new Cancel button takes users back to the Requests for Approval list, displaying the same list they started with CUP: User Access Review Cancel Button SAP AG 2009 SAP BusinessObjects Access Control 5.3 SP9 / Page 61

62 Topics Custom Reporting Enablement User Access Review Enhancements Compliant User Provisioning Improvements Auditing Improvements Enhanced Identity Management Integration Enterprise Role Management Enhancements Usability Management SAP AG 2009 SAP BusinessObjects Access Control 5.3 SP9 / Page 62

63 Important Information Support Pack release schedule: Check Service Marketplace to take advantage of this free upgrade Downloads > SAP Support Packages > Support Packages and Patches Entry by Application Group > SAP Solutions for Governance, Risk & Compliance > SAP GRC Access Control > SAP Access Control > SAP GRC Access Control 5.3 > Entry By component Note that there will be support packages on both the Java component and the ABAP RTA. Both must be installed correctly. See SAP Note for more information on ensuring your Java and ABAP systems are in sync. As of the date of release, the SAP BusinessObjects Access Control 5.3 Support Pack 9 notes will be updated The normal Support Pack notes will contain information related to bug fixes included in SP Support Packs RAR # Support Packs SPM # Support Packs CUP # Support Packs ERM # SAP AG 2009 SAP BusinessObjects Access Control 5.3 SP9 / Page 63

64 Documentation and Online Help Guides are being updated to include SP09 features, as well as documentation deficiencies which have been reported. See SAP Note for links to the relevant documentation Security Guide Master Guide Installation Guide Upgrade Guide Operations Guide In addition, the online help will be updated: b328/frameset.htm For more information, go to BPX for Business Process Experts SAP AG 2009 SAP BusinessObjects Access Control 5.3 SP9 / Page 64

65 Summary If you are one of our many customers who participated in the Customer Influence Councils to provide input for this release, we want to express our appreciation for your input into this release. Thank you for attending this session to learn more about what is coming from Access Control. We encourage you to take advantage of this important upgrade. SAP AG 2009 SAP BusinessObjects Access Control 5.3 SP9 / Page 65

66 Thank you! SAP AG 2009 SAP BusinessObjects Access Control 5.3 SP9 / Page 66