February 2015

Getting Started with SAP Access Control

pre-assembled rapid-deployment Solution

© 2015 SAP SE or an SAP affiliate company. All rights reserved. 2Public

Solutions for specific business needs

Business challenges

Customers often find it difficult and time

consuming to address the following

challenges often associated with Access

Control implementations:

• Fragmented approach to managing access

risk

• Lack of business and IT

collaboration

• Excessive time and cost of audits

• Dealing with audit and/or fraud issues

© 2015 SAP SE or an SAP affiliate company. All rights reserved. 3Public

• Prevent access risk

• Proactively identify and remediate access risk

violations

• Reduce the cost and effort of access risk

management

• Automate risk analysis, user access and

business role management activities

• Minimize the time to compliance

• Integrate risk analysis and compliance with

access management

SAP Access Control rapid-deployment solutionOverview and business benefits

SAP Access Control provides enterprise-wide

visibility of user access to help your organization

prevent access risk, reduce the cost and effort of

access risk management, and minimize the time of

compliance.

Business benefitsAt a glance

© 2015 SAP SE or an SAP affiliate company. All rights reserved. 4Public

SAP Access Control rapid-deployment solutionSolution scope

Access risk analysis and remediation

Helps companies to prevent access risk by proactively identifying

and remediating access risk violations.

Critical access management

Enables companies to control exception based access by

providing a closed loop process to audit firefighting activities.

User access management

Enables an automated, compliant user provisioning process.

Business role management

Enforces compliant role management best practices

© 2015 SAP SE or an SAP affiliate company. All rights reserved. 5Public

Pre-assembled SAP Rapid Deployment Solutions Definition & Example

Example: SAP ERP Foundation Extension

SAP ERP Foundation Extension is a solution leveraging

Suite on HANA, combining it with SAP innovations from

UX, Mobility, Analytics, Cloud and Technology.

Combination of 1 to n solution packages

Consisting of

Pre-installed system (landscape)

Database

Software

Plus the content of Rapid Deployment Solutions

Software License (BYOL)

Content (configuration, reports etc.)

Documentation

Service (depending on level of

configuration)

Delivered as a SAP software appliance

Ready-to-activate

Semi-activated

Fully-activated - ready to demo (includes

demo data)

Deployment on premise, hybrid or in the cloud

SAP ERP Foundation

Extension

SAP HANA Rapid DB migration to HANA RDS

SAP ERP SAP EFE RDS

SAP HANA Live RDS

SAP GRC Access

ControlSAP Access Control RDS

SAP Fiori SAP Fiori Found. & App RDS

BI

SAP BI

© 2015 SAP SE or an SAP affiliate company. All rights reserved. 6Public

Pre-assembled SAP Rapid Deployment Solutions How is this realized?

Activation

content based on

SAP Best

Practices

User defined options

part of RDS service

delivery

Classification of SAP Best Practices tasks into

Pre-Assembly

– activities which can be configured without customer input and without technical dependencies such as

dependent customizing

Post-Processing

– activities which require customer input or have technical dependencies with each other

Tasks can be subject to both

Classical RDS

Post-Processing

Pre-assembly

Post-Processing

Pre-assembly

Activation-ready

Pre-assembly

Semi-activated

paRDS

Fully Activated

Not released for productive usage

SAP Access Control paRDS

© 2015 SAP SE or an SAP affiliate company. All rights reserved. 7Public

‘Classical’ vs. ‘Semi-Activated’ Activation Content

RDSActivation content based

on SAP Best Practices

‚User defined options‘ part

of RDS service delivery

SAP Best

Practices

„Classical“

PRE-ASSEMBLY

POST-PROCESSING

‚User defined options‘ part

of RDS service delivery

Semi-activated

© 2015 SAP SE or an SAP affiliate company. All rights reserved. 8Public

Pre-assembled SAP Rapid Deployment SolutionsValue for the Customer?

Classical design-

based

projectsGo-liveTestRealization

HW prep

SW install

Business

Blueprint

Delivers

Rapid-Deployment

Solutions

pre-assembled

Rapid-Deployment

Solutions

Business

and Services

Best

Practices

SAP

Software

Appliance

Customer Projects

Software

Software

© 2015 SAP SE or an SAP affiliate company. All rights reserved. 9Public

SAP Access Control rapid-deployment solution Semi-activated Appliance

The appliance consists of:

1) Pre-installed technical

landscape

– SAP HANA Platform Edition 1.0 -

HANA DB SPS08

– SAP NetWeaver 7.40 SP06

– SAP Access Control 10.1 SP05

2) Technical objects, such as:

– SAP Notes

– SAP Solution Builder Add-on

– SAP Best Practices technical objects

Add-on

3) Semi-activated solution

content from SAP Access

Control RDS

© 2015 SAP SE or an SAP affiliate company. All rights reserved. 10Public

Pre-/Post-Classification of Configuration TasksImpact on Configuration Guides

included as separate chapter of

configuration guide

© 2015 SAP SE or an SAP affiliate company. All rights reserved. 11Public

Pre-/Post-Classification of Configuration TasksImpact on Solution Builder Content

SAP Access Control rapid deployment solution semi-activated appliance is delivered with 2 solution files

• PRE_RDS_GRC_AC contains the generic settings for SAP Access Control, it has been activated in pre-assembled

appliance

• POS_RDS_GRC_AC contains the necessary post activities, customers’ ERP system will be integrated through guided

procedure, customers get full capabilities from SAP Access Control application once it’s activated

© 2015 SAP SE or an SAP affiliate company. All rights reserved. 12Public

paRDS Appliance Consumption via SAP CAL

Prerequisites:

• S-User, Cloud provider account, ideally with VPC

setup

• Contact your Account Executive in case you need

license (in case of AC paRDS: licenses for SAP

Access Control)

Steps:

• Purchase the SAP Cloud Appliance Library

Subscription Package from the SAP Store to unlock

the entire list of SAP solutions in the Library.

• You will receive logon details to your SAP Cloud

Appliance Library management console.

• Configure your SAP Cloud Appliance Library

management console to connect to your cloud

provider account.

• Select and activate the solution in the library to

start an instance of it within your SAP Cloud

Appliance Library management console.

© 2015 SAP SE or an SAP affiliate company. All rights reserved. 13Public

SAP Access Control on SAP CAL

© 2015 SAP SE or an SAP affiliate company. All rights reserved.

Thank you

Contact information:

F name MI. L name

Title

Address

Phone number