Enhancing SAP User Administration with Clean Up Tools
undefined
S
A
P
U
S
E
R
A
D
M
I
N
I
S
T
R
A
T
I
O
N
Clean Up
T
ools
C
o
n
t
e
n
t
•
Introduction
–
Jessica
–
Our company
–
Environment, challenges
•
SW Implementation
–
Standardize Approval Workflows
–
Remove Unused Roles
–
Periodic Access Review
•
Wrap-Up & Questions
•
Jessica Goldsmith – Lead System Administrator
–
jngoldsmith@cooperstandard.com
•
Cooper Standard
–
Global material science & manufacturing
•
Develop materials, systems & components
–
21 countries
–
25K employees
•
SAP Shop – 74 sites on SAP
–
Moved to S/4 Hana February 2020
I
n
t
r
o
d
u
c
t
i
o
n
A
c
c
e
s
s
R
e
q
u
e
s
t
s
R
o
l
e
s
&
V
i
o
l
a
t
i
o
n
s
P
e
r
i
o
d
i
c
A
c
c
e
s
s
R
e
v
i
e
w
s
C
h
a
l
l
e
n
g
e
s
•
Multiple access request
systems
•
Proper approver channels
•
Ticket/email exchange
•
Manual process
•
No control
•
SAP requests increasing
dramatically
•
Managing SAP Go-Lives
•
No one reviewing historical
access
•
Users normally copy others
•
Too many controls to
perform
•
Too many violations total
•
Audit pushing to clean up
•
Done manually in
SharePoint
–
Reports run
–
Reports posted
–
Send email
–
Gather approvals/changes
–
Get sign off
•
Difficult for admin to
manage and track
•
What issues were we trying to solve?
–
Correct/complete approvals
–
Efficiency, ticket and email back and forth
–
What process needed for which IT application
•
Allows for automated approval workflows
–
Streamline approval process
–
Same UI for multiple ERP Systems
•
SOD or no SOD
•
SAP is auto assign, no touch by administrator
•
Other ERP systems (non SAP) get alerted by email
–
CS has email to generate ticket
S
t
a
n
d
a
r
d
i
z
i
n
g
W
o
r
k
f
l
o
w
s
C
o
n
n
e
c
t
i
o
n
s
C
o
o
p
e
r
S
t
a
n
d
a
r
d
&
S
e
c
u
r
i
t
y
W
e
a
v
e
r
R
e
q
u
e
s
t
e
r
S
e
c
u
r
e
P
r
o
–
F
r
o
n
t
E
n
d
W
h
a
t
d
o
e
s
i
t
t
e
l
l
y
o
u
?
W
h
a
t
c
a
n
i
t
h
e
l
p
y
o
u
d
o
?
H
o
w
i
t
h
e
l
p
e
d
C
o
o
p
e
r
S
t
a
n
d
a
r
d
R
e
m
o
v
i
n
g
U
n
u
s
e
d
R
o
l
e
s
•
Who used a specific
transaction code?
•
Who used a specific role in
a time period – or ever?
•
How many roles do they
have that are currently
unused?
•
Which transactions are they
using in each role?
•
Which ones aren’t they
using?
•
Remove unused
transactions in role design
•
Remove unused roles
•
Remove unnecessary
violations
•
Verify changes
•
Provides action details
•
61K roles of 76.5K removed
–
80% reduction
•
4.5K SOD violations of 11K
eliminated
–
40% reduction
•
3700 users
•
SAP Go Live process
•
Ongoing maintenance
•
Previous process:
–
Created reports manually
–
Posted reports to SharePoint site
–
Cumbersome, confusing, manual process via email & tickets
•
Automated workflow approval process
•
Automatically remove unapproved roles or user IDs for SAP systems
•
Only create ticket if changes are needed for non-SAP systems
•
Common, streamlined process for all systems
–
Same UI and concept
P
e
r
i
o
d
i
c
A
c
c
e
s
s
R
e
v
i
e
w
Jessica Goldsmith, Lead System Administrator at Cooper Standard, shares challenges faced during SAP implementation and the benefits of using clean up tools for user administration. The presentation discusses issues with access requests, role management, and violations, highlighting the importance of standardizing workflows and removing unused roles. By implementing SecurePro and streamlining approval processes, Cooper Standard achieved significant reductions in unused roles and violations, leading to a more efficient SAP environment.
Download Presentation
Please find below an Image/Link to download the presentation.
The content on the website is provided AS IS for your information and personal use only. It may not be sold, licensed, or shared on other websites without obtaining consent from the author. Download presentation by click this link. If you encounter any issues during the download, it is possible that the publisher has removed the file from their server.
E N D
Presentation Transcript
SAP USER ADMINISTRATION Clean Up Tools
Content Introduction Jessica Our company Environment, challenges SW Implementation Standardize Approval Workflows Remove Unused Roles Periodic Access Review Wrap-Up & Questions 2
Introduction Jessica Goldsmith Lead System Administrator jngoldsmith@cooperstandard.com Cooper Standard Global material science & manufacturing Develop materials, systems & components 21 countries 25K employees SAP Shop 74 sites on SAP Moved to S/4 Hana February 2020 3
Challenges Access Requests Roles & Violations Periodic Access Reviews Multiple access request systems Proper approver channels Ticket/email exchange Manual process No control SAP requests increasing dramatically Managing SAP Go-Lives No one reviewing historical access Users normally copy others Too many controls to perform Too many violations total Audit pushing to clean up Done manually in SharePoint Reports run Reports posted Send email Gather approvals/changes Get sign off Difficult for admin to manage and track 4
Standardizing Workflows What issues were we trying to solve? Correct/complete approvals Efficiency, ticket and email back and forth What process needed for which IT application Allows for automated approval workflows Streamline approval process Same UI for multiple ERP Systems SOD or no SOD SAP is auto assign, no touch by administrator Other ERP systems (non SAP) get alerted by email CS has email to generate ticket 5
SecurePro Front End Connections Requester CooperStandard & Security Weaver 6
Removing Unused Roles What does it tell you? What can it help you do? How it helped Cooper Standard Who used a specific transaction code? Who used a specific role in a time period or ever? How many roles do they have that are currently unused? Which transactions are they using in each role? Which ones aren t they using? Remove unused transactions in role design Remove unused roles Remove unnecessary violations Verify changes Provides action details 61K roles of 76.5K removed 80% reduction 4.5K SOD violations of 11K eliminated 40% reduction 3700 users SAP Go Live process Ongoing maintenance 7
Periodic Access Review Previous process: Created reports manually Posted reports to SharePoint site Cumbersome, confusing, manual process via email & tickets Automated workflow approval process Automatically remove unapproved roles or user IDs for SAP systems Only create ticket if changes are needed for non-SAP systems Common, streamlined process for all systems Same UI and concept 8
