Show TOC

Release Note for SAP GRC Access Control (Enhanced) Locate this document in the navigation structure

Technical Data

Product Version

5.3, SP09

Area

SAP GRC Access Control

Country Relevance

Valid for all countries

 

SAP GRC Access Control 5.3 (SP09) has been greatly enhanced and expanded. The new and enhanced features include:

  • Risk Analysis and Remediation (RAR) capability:

    • Data mart — Extend Access Control to integrate with reporting tools, such as Crystal reports, for flexible reporting requirements.

    Recommendation Recommendation

    For more information, see SAP Note 1369045 Access Control Data Mart Design Description.

    End of the recommendation.

    • A new Change History menu item for tracking and searching inserts, edits, deletes, and upload actions across sensitive areas of the RAR configuration tab.

  • Compliant User Provisioning (CUP) capability:

    • Enable User Access Request (UAR) request generation with flexible selection criteria.

    • Enable download of more than 65,000 lines for CUP reports.

    • Add ability to display and manage role validity dates for existing roles.

    • Enhanced Identity Management (IdM) Integration Web Services

    • Add two e-mail reminder background jobs for Segregation of Duties (SoD)/UAR requests (multiple workflows).

    • Enhance e-mail notifications and e-mail reminders to support unlimited characters.

    • Option to require mitigation for SoD risks only (instead of both SoD and critical transactions).

    • Close gap in the audit trail for role defaults and role mapping, role action, and validity period, risk analysis.

    • Usability and security improvements for password self-service.

    • Enhance provisioning of SU01 fields to the SAP backend system.

    • Check to determine if the account exists prior to new account creation.

    • Ability for the administrator to delegate on behalf of an approver.

  • Enterprise Role Management (ERM) — Ability to update a role process methodology after the role is created.

  • CUP and ERM:

    • Ability to import roles into ERM from a spreadsheet. Allow ERM and CUP role synchronization to leverage role attributes in CUP.

    • User Interface enhancements to CUP and ERM including screen header renaming, navigation improvements, and simplified workflow for ERM Role Designer.