Upload
balakrishnan-bala-b
View
1.842
Download
0
Tags:
Embed Size (px)
DESCRIPTION
Automating user provisioning with SAP NW BPM
Citation preview
Engineering Your Success
Maximize the return on your SAP Investment
Automating User Provisioning with SAP NetWeaver
BPM
Incture Technologies
July 21, 2011
INCTURE 2011 / 2 Engineering Your Success
About the Speaker
• BPM Architect
• Developed and implemented multiple large scale multi million dollar BPM projects
• Conducted several BPM workshops in Asia
• Frequent blogger and active contributor in SCN
INCTURE 2011 / 3 Engineering Your Success
About Incture Led by a strong team of ex-SAP employees with singular focus on SOA-BPM driven innovation for SAP customers. • Largest BPM implementation partner in Asia – Most complex projects including 5 major SAP NW BPM implementations in Asia • Enabling BPM adoption by customers with BPM Workshops for Business and IT teams with over 30 customers and partners in APJ (BPM Jump Start Kit) • Thought leadership in SOA-BPM with large investments on solution and technology assets in SAP BPM • Agility and dedicated efforts on BPM adoption with all engagements being supported by highest level of management • Located close to SAP Labs and SAP Global Delivery Centre in Bangalore and has strong multi year collaboration (over 2000 man months) with SAP Development teams • Combined advantage of deep skills and competitive cost (100+ delivery team is centred in Bangalore), Member of SAP Design Partner Council – Advisor to SAP BPM, BRMS, CE, Java technology teams on product roadmap, development and benchmarking and also participate in design, build and early testing SOA-BPM products
INCTURE 2011 / 4 Engineering Your Success
• About the customer
• As Is Process and Business Pain Points
• BPM Orchestrated Process
• Roadmap & Future Improvements
Agenda
INCTURE 2011 / 5 Engineering Your Success
India's largest fast moving conglomerate. In India since: 1933 Employee strength:
• Over 15,000 employees (> 6000 SAP users) • Contributes to indirect employment of over 52,000 people
Distribution coverage:
• Over 1 million retail outlets across India directly and its products are available in over 6.3 million outlets in the country,
• Nearly 80% of all retail outlets in India.
• Two out of three Indians use its many home and personal care products, food and beverages.
About the customer
INCTURE 2011 / 6 Engineering Your Success
• About the customer
• As Is Process and Business Pain Points
• BPM Orchestrated Process
• Roadmap & Future Improvements
Agenda
INCTURE 2011 / 7 Engineering Your Success
As Is Process – Paper based
SAP ERP
SAP Solution Manager
SAP APO
SAP CUA
SAP GRC
SAP Java systems
SAP ICH
Other Satellite Systems
End users (Employees, Customers,
Vendors, Contractors,
Transporters)
Business & IT managers
1
3
2
IT helpdesk
/ SSC
Department head
Update parameter
Update parameter
Update parameter
Create business partner, Manage change requests
Create/modify user access, lock/unlock, Password reset
Do SoD compliance checks
Do required role assignments
Generate reports, account lock / unlock
Pain points • People Integration • Business agility • Process exceptions • Auditing
Pain points • User experience • Process visibility • Process quality • System integration
Pain points • Security and Risk mitigation • Compliance (GRC and SoX) • License cost assignment to cost centers • License asset management
INCTURE 2011 / 8 Engineering Your Success
• About the customer
• As Is Process and Business Pain Points
• BPM Orchestrated Process
• Roadmap & Future Improvements
Agenda
INCTURE 2011 / 9 Engineering Your Success
ERP
SAP Solution Manager
APO
SAP CUA SAP GRC
ICH
Satellite System 1
End users Recommender On demand
IT Help desk / SSC
BPM Orchestrated Process
Approver
SAP NW BPM 7.11
Satellite System 2 Satellite System N
CE EP Parameters Role assignment
SoD simulation Business Partner Creation CR Status update
Provisioning
Propagation
INCTURE 2011 / 10 Engineering Your Success
• User Creation Self Service (ESS/MSS)
• User profile update
• Bulk User Creation / Deletion, User de-provisioning
• Provision/Revoke Additional System Access/Revoke System access
• Provision/Revoke Role/TCode Request
• User Password Reset
• User Lock and Unlock (Timed + Manual)
• New Role / System creation
• Change in designation / location
Key processes that were automated
INCTURE 2011 / 11 Engineering Your Success
• Increased Operational Efficiency and SLA’s • Enablement of Security and Risk mitigation • Adherence to Compliance • Improved Auditing • Automated License cost assignment and asset
management
• Improved Process Visibility • Better People Integration • Greater Business Agility • Process Exceptions Handling • Enhanced User Experience • Improved Process Quality • Enhanced System Integration
Break through in Business KPI‘s with BPM Orchestrated Process
IT Process Average Process Cycle Time
Without BPM With BPM
User / access provisioning 7 – 15 days Almost Instantaneous
User / access de-provisioning 10 days Almost Instantaneous
User license auditing 11 days Approx . 1 -4 hours
System reporting 13 days Approx . 1 -4 hours
INCTURE 2011 / 12 Engineering Your Success
Activities Activity type Access type Requisition form Manual End user (Web UI)
Bulk user creation (Excel upload) Manual Help desk (Web UI) Default systems / roles determination Automated
License type determination Automated Actual user creation + license type update Automated
Business Partner creation in Solution Manager Automated Parameter update – R/3 Automated Parameter update – ICH Automated Parameter update – APO Automated
SAP Java systems role mapping Automated User notification Automated End user (Email)
Approval Manual Approval (Email) Approval Manual Approval (Web UI)
User request status check form Manual End user (Web UI) Customer creation Workbench Manual Help desk (Web UI)
Transporter creation Workbench Manual Help desk (Web UI) Vendor creation Workbench Manual Help desk (Web UI)
License quota check / adjustment Automated Approver escalation Automated
BPM Orchestrated User Creation Process
INCTURE 2011 / 13 Engineering Your Success
User Creation Dashboard
INCTURE 2011 / 14 Engineering Your Success
One click approval from Manager‘s Inbox
INCTURE 2011 / 15 Engineering Your Success
Request status & User provisioning in CUA
INCTURE 2011 / 16 Engineering Your Success
BPM Orchestrated User Creation Process
INCTURE 2011 / 17 Engineering Your Success
Bulk User Creation Dashboard
INCTURE 2011 / 18 Engineering Your Success
Activities Activity type Access type
Requisition form Manual End user (Web UI) User notification Automated End user (Email)
Segregation of Duties (SoD) check in GRC Automated Change Request creation in Solution Manager Automated
Bi-directional BPM Solution manager status update Automated
Approval / Recommendation Automated User request status check form Automated
Approver escalation Automated
BPM Orchestrated TCode Addition Process
INCTURE 2011 / 19 Engineering Your Success
Addtional TCode Requisition Dashboard
INCTURE 2011 / 20 Engineering Your Success
Self Service Request Status Check
INCTURE 2011 / 21 Engineering Your Success
SoD (GRC) report + mitigation controls automatically generated and attached to email
One click approval from Manager‘s Inbox
INCTURE 2011 / 22 Engineering Your Success
Email carrying multi level approval details
INCTURE 2011 / 23 Engineering Your Success
Change Request in Solution Manager
INCTURE 2011 / 24 Engineering Your Success
Realtime Request Status Monitoring Console
INCTURE 2011 / 25 Engineering Your Success
Change Request Processing in Soln Manager
INCTURE 2011 / 26 Engineering Your Success
BPM Soln Manager Bi-directional status updates
INCTURE 2011 / 27 Engineering Your Success
Change Request Lifecycle in Soln Manager
INCTURE 2011 / 28 Engineering Your Success
Change Request Completion in Soln Manager
INCTURE 2011 / 29 Engineering Your Success
BPM Process Flow Completion
INCTURE 2011 / 30 Engineering Your Success
BPM Orchestrated TCode Addition Process
INCTURE 2011 / 31 Engineering Your Success
I had a request for an urgent role change for Payment Run, since the existing user was going on leave. This request came to me at 2:13 PM. Call was logged at 2.33 PM and the role change was affected
immediately on Approval. This has happened within an hour, proving
the full functionality of User provisioning. Our sincere thanks to BPM Team for the effort put into
to making this happen. Best Wishes!
– End User
Customer quote
INCTURE 2011 / 32 Engineering Your Success
• About the customer
• As Is Process and Business Pain Points
• BPM Orchestrated Process
• Roadmap & Future Improvements
Agenda
INCTURE 2011 / 33 Engineering Your Success
• Integration with HR systems to automate the user creation/de-provisioning
• Organization structure based authorization
• License Cost assignment to departments
• User/License usage analytics based de-provisioning processes
• SAP NW IDM based User Provisioning
• Further Integration with GRC Services
Further Improvements in the Roadmap
INCTURE 2011 / 34 Engineering Your Success
•This publication has been prepared for the Incture Technologies Pvt Ltd. All rights reserved. All copyright in this publication and related works is owned by Incture. No part of this publication may be reproduced or transmitted in any form or for any purpose without the express permission of Incture. The information contained herein may be changed without prior notice.
• This document is a preliminary version and not subject to your license agreement or any other agreement with Incture. This document contains only intended strategies, developments, and functionalities of the Incture products and services and is not intended to be binding upon Incture to any particular course of business, product strategy, and/or development.
• Incture assumes no responsibility for errors or omissions in this document. Incture does not warrant the accuracy or completeness of the information, text, graphics, links, or other items contained within this material. This document is provided without a warranty of any kind, either express or implied, including but not limited to the implied warranties of merchantability, fitness for a particular purpose, or non infringement.
• Incture shall have no liability for damages of any kind including without limitation direct, special, indirect, or consequential damages that may result from the use of these materials. This limitation shall not apply in cases of intent or gross negligence.
• Some software products marketed by Incture and its distributors contain proprietary software components of other software vendors.
• All product and service names mentioned are the trademarks of their respective companies. Data contained in this document serves informational purposes only. National product specifications may vary.
•This publication is for information purposes only. While due care has been taken during the compilation of this publication to ensure that the information is accurate to the best of Incture’s knowledge and belief, the content is not to be construed in any manner whatsoever as a substitute for professional advice.
•Incture neither recommends nor endorses any specific products or services that may have been mentioned in this publication and nor does it assume any liability or responsibility for the outcome of decisions taken as a result of any reliance placed on this publication. The statutory liability for personal injury and defective products is not affected. Incture has no control over the information that you may access through the use of hot links contained in these materials and does not endorse your use of third-party Web pages nor provide any warranty whatsoever relating to third-party Web pages.
Copyright 2011 Incture Technologies