smartAccess

Monitoring excessive access in SAP ERP for consultants and administrators

Video

smartAccess - excessive user rights under control

The smartAccess application allows you to access broad privileges in SAP and at the same time controls the risk
arising from their temporary assignment. This is possible thanks to advanced event logging mechanisms.

When is it worth it?

Frequent need of work in IT (SAP) systems with excessive user rights
Many IT projects and business requests regarding support and system changes
Multiple systems to operate, many administrators and consultants
Recurring recommendations to control the auditing process better / more attentively

What the process may look like - ready solution

Summary - why is it worth using?

smartAccess gives you the full flexibility of operations needed to perform maintenance work and at the same time has mechanisms to control the risks that come with broad authority.

Headline smartAccess functionalities:

Tool supports the process of excessive access management - compliance with auditing standards and guidelines.
Ready build-in workflows supporting the process of submitting, approving, and reviewing actions with excessive access.
Control mechanisms built into the process - impossible to approve the logs of one's own session (four-eyes principle).
Access to data regarding the session's started transactions, programs, and changes in business objects.
Available data on posted financial and warehouse documents

smartAccess screen gallery

References

FAQ – find out more about smartAccess

smartAccess is a required service in order to satisfy business continuity and business process security of actions executed in a SAP system. Below you may find the answers to the most frequently asked questions about our solution.

1. Is smartAccess a separate system or a native ABAP program?AP?

The smartGRC application is a separate system that can be installed in your environment or be available in the cloud. Installation of the system involves the preparation of an application server (Windows) and a database server (SQL).

2. How does the application connect with SAP systems?

The smartGRC application connects via a dedicated SAP interface for JAVA systems – the JCo connection. To retrieve data from the SAP system, standard SAP programs run to read data with parameters indicated by smartGRC are used

3. What is the average time needed to implement and install smartAccess?

3-4 weeks, assuming the use of a standard process and no more than 10 accounts for administrators and consultants in 2-3 SAP systems. A larger number of accounts or SAP systems generates additional complexity in the implementation process (the process of configuration, training and knowledge transit), which increases as the number of stakeholders and SAP systems supported increases. However, the duration of more complex projects does not exceed 3 m-c.

4. How is this product different from others on the market? What is its advantage?

Produkt posiada szersze spektrum raportowanych informacji realizowanych w trakcie sesji specjalnej / awaryjnej niż alternatywne produkty na rynku. Są to między innymi utworzone dokumenty finansowe lub magazynowe oraz szczegółowe dokumenty zmian. Posiada wbudowane zabezpieczenia w sytuacji kiedy administrator próbuje wykonać sesję awaryjną z pominięciem smartAccess (raportowane są użycia). Jest intuicyjny w użyciu w oparciu o znane środowisk przeglądarki internetowej.

5. Does the smartGRC application support other ABAP systems as well?

Yes the system can handle any system, including those based on ABAP technology, but in such a situation it is necessary to prepare a dedicated connector which can prolong the implementation and installation process. At this point, the system has connectors for: Active Directory, Remedy and Service desk.