Getting started with the SAP AC rapid-deployment solution V3.101
14
October 2015 Getting Started with SAP Access Control pre-assembled rapid-deployment Solution
Transcript of Getting started with the SAP AC rapid-deployment solution V3.101
October 2015
Getting Started with SAP Access Control
pre-assembled rapid-deployment Solution
© 2011 SAP AG. All rights reserved. 2
Solutions for specific business needs
Business challenges
Customers are finding it difficult
and time consuming to address
the following challenges often
associated with Access Control
implementations:
• Fragmented approach to
managing access risk
• Lack of business and IT
collaboration
• Excessive time and cost of
audits
• Dealing with audit and/or fraud
issues
© 2013 SAP AG. All rights reserved. 3
• Prevent access risk
• Proactively identify and remediate access risk
violations
• Reduce the cost and effort of access risk
management
• Automate risk analysis, user access and
business role management activities
• Minimize the time to compliance
• Integrate risk analysis and compliance with
access management
SAP Access Control rapid-deployment solutionOverview and business benefits
SAP Access Control provides enterprise-wide
visibility of user access to help your organization
prevent access risk, reduce the cost and effort of
access risk management, and minimize the time of
compliance.
Business benefitsAt a glance
© 2013 SAP AG. All rights reserved. 4
SAP Access Control rapid-deployment solutionSolution scope
Access risk analysis and remediation
Helps companies to prevent access risk by proactively
identifying and remediating access risk violations.
Critical access management
Enables companies to control exception based access by
providing a closed loop process to audit firefighting activities.
User access management
Enables an automated, compliant user provisioning process.
Business role management
Enforces compliant role management best practices
Fiori Apps for SAP Access Control
Simplified user access request via fiori apps, and get business
insights through smart business apps and fiori factsheets
© 2013 SAP AG. All rights reserved. 5
Pre-assembled SAP Rapid Deployment Solutions Definition & Example
Example: SAP ERP Foundation Extension
SAP ERP Foundation Extension is a solution leveraging
Suite on HANA, combining it with SAP innovations from
UX, Mobility, Analytics, Cloud and Technology.
Combination of 1 to n solution packages
Consisting of
Pre-installed system (landscape)
Database
Software
Plus the content of Rapid Deployment Solutions
Software License (BYOL)
Content (configuration, reports etc.)
Documentation
Service (depending on level of
configuration)
Delivered as a SAP software appliance
Ready-to-activate
Semi-activated
Fully-activated - ready to demo (includes
demo data)
Deployment on premise, hybrid or in the cloud
SAP ERP Foundation
Extension
SAP HANA Rapid DB migration to HANA RDS
SAP ERP SAP EFE RDS
SAP HANA Live RDS
SAP GRC Access
ControlSAP Access Control RDS
SAP Fiori SAP Fiori Found. & App RDS
BI
SAP BI
© 2013 SAP AG. All rights reserved. 6
Pre-assembled SAP Rapid Deployment Solutions How is this realized?
Activation
content based on
SAP Best
Practices
User defined options
part of RDS service
delivery
Classification of SAP Best Practices tasks into
Pre-Assembly
– activities which can be configured without customer input and without technical dependencies such as
dependent customizing
Post-Processing
– activities which require customer input or have technical dependencies with each other
Tasks can be subject to both
Classical RDS
Post-Processing
Pre-assembly
Post-Processing
Pre-assembly
Activation-ready
Pre-assembly
Semi-activated
paRDS
Fully Activated
Not released for productive usage
SAP Access Control paRDS
© 2013 SAP AG. All rights reserved. 7
‘Classical’ vs. ‘Semi-Activated’ Activation Content
RDSActivation content based
on SAP Best Practices
‚User defined options‘ part
of RDS service delivery
SAP Best
Practices
„Classical“
PRE-ASSEMBLY
POST-PROCESSING
‚User defined options‘ part
of RDS service delivery
Semi-activated
© 2013 SAP AG. All rights reserved. 8
Pre-assembled SAP Rapid Deployment SolutionsValue for the Customer?
Classical design-
based
projectsGo-liveTestRealization
HW prep
SW install
Business
Blueprint
Delivers
Rapid-Deployment
Solutions
pre-assembled
Rapid-Deployment
Solutions
Business
and Services
Best
Practices
SAP
Software
Appliance
Customer Projects
Software
Software
© 2013 SAP AG. All rights reserved. 9
System Landscape – SAP Access Control Rapid
Deployment Solution – semi-activated - Appliance
RFC Connection
SAP ERP 6.0 and above
GRC NetWeaver
Plug-In(GRCPINW)
Customer sideSemi-activated Cloud Appliance
SAP Access Control application
SAP NetWeaver 7.40 SP10(Include Gateway Foundation – SAP_GWFND)
SAP Access Control 10.1 SP10(GRCFND_A / V1100)
Content of:
- SAP Access Control RDS
SAP HANA 1.0 SP09(include SAP HANA Live 1.0 for SAP
solutions for GRC 10.1,
SAP SMART BUSINESS FOR GRC 1.0)
SAP Smart Business 1.0 for SAP solutions for GRC
(UIHGRC01 / 100)
SAP Fiori for SAP GRC 1.0
(UIGRC001 / 100)
The appliance consists of:
1) Pre-installed technical
landscape
– SAP HANA Platform Edition 1.0 -
HANA DB SPS09
– SAP NetWeaver 7.40 SP10
– SAP Access Control 10.1 SP10
– SAP Fiori for SAP GRC 1.0
2) Technical objects, such as:
– SAP Notes
– SAP Solution Builder Add-on
– SAP Best Practices technical
objects Add-on
3) Semi-activated solution content
from SAP Access Control RDS
© 2011 SAP AG. All rights reserved. 10
Pre-/Post-Classification of Configuration TasksImpact on Configuration Guides
included as separate chapter of
configuration guide
© 2011 SAP AG. All rights reserved. 11
Pre-/Post-Classification of Configuration TasksImpact on Solution Builder Content
SAP Access Control rapid deployment solution semi-activated appliance is delivered with 2 solution files
• PRE_RDS_GRC_AC contains the generic settings for SAP Access Control, it has been activated in pre-assembled
appliance
• POS_RDS_GRC_AC contains the necessary post activities, customers’ ERP system will be integrated through guided
procedure, customers get full capabilities from SAP Access Control application once it’s activated
© 2011 SAP AG. All rights reserved. 12
paRDS Appliance Consumption via SAP CAL
Prerequisites:
• S-User, Cloud provider account, ideally with VPC
setup
• Contact your Account Executive in case you need
license (in case of AC paRDS: licenses for SAP
Access Control)
Steps:
• Purchase the SAP Cloud Appliance Library
Subscription Package from the SAP Store to unlock
the entire list of SAP solutions in the Library.
• You will receive logon details to your SAP Cloud
Appliance Library management console.
• Configure your SAP Cloud Appliance Library
management console to connect to your cloud
provider account.
• Select and activate the solution in the library to
start an instance of it within your SAP Cloud
Appliance Library management console.
© 2011 SAP AG. All rights reserved. 13
SAP Access Control on SAP CAL
Thank you
