GRC300 Access Control Implementation and Configuration

Content

Introduction to SAP Access Control

• Discussing Business Challenges and Solutions
• Using SAP Access Control

Architecture, Security, and Authorizations

• Describing the System Architecture
• Describing Security and Authorizations

Shared Configuration Settings

• Configuring Shared GRC Settings
• Configuring Shared SAP Access Control Settings

Authorization Risks and the Segregation of Duties (SoD) Management Process

• Identifying Authorization Risks
• Managing Risk by Segregating Duties

SAP Access Control Repository

• Synchronizing Objects into the Repository
• Scheduling and Viewing Background Jobs

Risk Analysis

• Maintaining Shared Master Data
• Configuring and Maintaining the Rule Set
• Configuring and Using Audit Trail Tracking
• Using the Risk Analysis Framework
• Remediating Risks
• Mitigating Risks
• Mitigating Multiple Risks at One Time

Business Rule Framework

• Creating Rules in the Business Rule Framework (BRF)
• Defining Business Rules

Multi-Stage, Multi-Path (MSMP) Workflow

• Describing Multi-Stage, Multi-Path (MSMP) Workflow
• Maintaining MSMP Workflow
• Building MSMP Workflow

User Provisioning

• Configuring User Provisioning Settings
• Configuring Access Request Forms
• Requesting Access
• Preparing Roles and Owner Data for MSMP Workflow
• Creating Simplified Access Requests
• Reviewing Search Request Results

Role Design and Management

• Configuring Role Management
• Configuring Role Methodology
• Configuring Role Search Attributes
• Planning for Technical Role Definition
• Planning for Business Role Definition
• Consolidating Roles Through Role Mining
• Performing Role Mass Maintenance Operations

Emergency Access Management

• Describing Emergency Access Management
• Planning for Emergency Access
• Monitoring Emergency Access

Periodic Access Review Process

• Planning Periodic Review
• Monitoring Periodic Review

Maintaining Custom Fields

• Maintaining Custom Fields in Request Header and Role Definition