Professional Documents
Culture Documents
Benefits achieved:
“With Bay31, our SAP role redesign
๏ Provisioning time for a new SAP took about 50% less time than with
account reduced from days to minutes
the conventional approach, and we
achieved a higher quality result.”
๏ Unique transactions assigned in SAP
roles reduced from 6500 to 2500 – Jeffrey Archer, Head of SAP
Security, Nobel Biocare AG
๏ Single non-derived roles reduced from
450 to 15
Role
Assessment
• Import role and
business data
• Roles ranked by
quality Role Analysis
• Role Design
Deploy Roles
• Role instantiation
and composition
• Export roles and policies • Role mining
• Re-provision authorizations • Refactor and optimize
• Enforce SoD
Bay31 ABAP
Security Reader
SAP ABAP
Role definitions back in
Department
1
Role Designer automatically mines
role candidates. But you have to
decide if it represents a relevant
business abstraction.
3
The entitlements correspond to
management of Profit Center
records. This is definitely a
business-relevant role. Now define
the role with 1 click!
2
This role candidate correlates with
membership in a specific OU. This
may indicate a business-relevant role.
Cris Merritt
email: cris@bay31.com
mob: +33 631 08 10 09