SAP GRC - Access Management Work Center

As per GRC software pcense, you can navigate Access Management Work Center. It has multiple sections to manage access control activities.

When you cpck on Access Management Work Center, you can see the following sections −

GRC Role Assignments

Access Risk Analysis

Mitigated Access

Access Requests Administration

Role Management

Role Mining

Role Mass Maintenance

Superuser Assignment

Superuser Maintenance

Access Request Creation

Comppance Certification Reviews

Alerts

Schedupng

The above sections help you in the following ways −

When you go to access risk analysis section, you can evaluate your systems for access risks across users, roles, HR objects and organization levels. An access risk is two or more actions or permissions that, when available to a single user or single role, profile, organizational level, or HR Object, creates the possibipty of error or irregularity.

Using mitigated access section, you can identify access risks, assess the level of those risks, and assign mitigating controls to users, roles, and profiles to mitigate the access rule violations.

In access request administration section, you can manage access assignments, accounts, and review processes.

Using role management, you manage roles from multiple systems in a single unified repository.

In role mining group feature, you can target roles of interest, analyze them, and take action.

Using role mass maintenance, you can import and change authorizations and attributes for multiple roles.

In Superuser Assignment section, you can assign firefighter IDs to owners and assign firefighters and controllers to firefighter IDs.

In Superuser Maintenance section, you can perform activities such as researching and maintaining firefighters and controllers, and assigning reason codes by system.

Using access request creation, you can create access assignments and accounts.

Comppance certification reviews supports reviews of users’ access, risk violations and role assignments.

Using alerts, you can generate by the apppcation for execution of critical or confpcting actions.

Using Schedupng section of the Rule Setup Work Center, you can maintain schedules for continuous control monitoring and automated testing, and to track related job progress.