SAP Access Control 12.0 SP12

1 User Guide | PUBLIC. 2022-01-30. SAP Access Control SP12. 2021 SAP SE or an SAP affiliate company. All rights reserved. THE BEST RUN. Content 1 Introduction to SAP Access Control .. 7. 2 What's New in SAP Access Control SP12.. 9. 3 What's New History.. 10. What's New In SAP Access Control SP01.. 10. What's New in SAP Access Control SP02..11. What's New in SAP Access Control SP03.. 12. What's New in SAP Access Control SP04.. 12. What's New in SAP Access Control SP05.. 14. What's New in SAP Access Control SP06.. 15. What's New in SAP Access Control SP07.. 16. What's New in SAP Access Control SP08.. 17. What's New in SAP Access Control SP09.. 18. What's New in SAP Access Control SP10.. 19. What's New in SAP Access Control SP11.

2 20. 4 Navigation.. 21. SAP Business Client (NWBC) Navigation..22. My Home Work Center.. 22. Setup Work Center.. 29. Access Management Work Center.. 31. Reports and Analytics Work Center.. 31. Fiori Launchpad Navigation.. 32. 5 Cross-Component Topics.. 34. Maintaining Important Roles.. 35. Profiles and Logons..36. End User Logon.. 36. Administrator Logon.. 38. Your Profile.. 38. Custom Fields.. 39. Special Privileges.. 40. Background Jobs.. 41. Background Scheduler.. 41. Scheduling Background Jobs.. 42. 6 Managing Access Requests.. 43. SAP Access Control SP12. 2 PUBLIC Content Access Request Creation..44. Simplified Access Requests.. 44. Creating Access Requests.. 45. Analyzing Risks When Submitting Access Requests.

3 52. Template Roles.. 55. Creating Access Requests Based on Model Users.. 56. Changing User Details.. 57. Copying Requests.. 58. Creating Organizational Assignment Requests.. 59. Access Request Approval.. 59. Reviewing and Approving Access Requests.. 60. Analyzing Risks When Approving Access Requests.. 61. Mitigating Risks.. 63. Maintaining Tasks and Authorizations for Request Approvers..64. Access Request Administration.. 68. Creating and Managing Templates..68. Searching Requests.. 69. Viewing Provisioning Logs..70. Unlocking and Deleting Password self -Service Accounts.. 71. Approver Delegation..72. Creating Access Requests Based on Templates..72. 7 Managing Access Risks..74. Mitigating Controls.. 75. Creating Mitigating Controls.

4 76. Searching Mitigating Controls.. 76. Maintenance of Mitigation Control Owners.. 77. Rule Setup.. 77. Exception Access Rules.. 78. Access Rule Maintenance.. 88. Critical Access Rules.. 105. Access Risk Analysis.. 107. User Level Access Risk Analysis..109. User Level Simulation.. 112. Role Level Access Risk Analysis.. 114. Role Level Simulation.. 116. Profile Level Access Risk Analysis.. 117. Profile Level Simulation.. 119. HR Objects Access Risk Analysis.. 121. HR Objects Simulation.. 122. User Level Invalid Mitigations..123. Role Level Invalid Mitigations.. 125. SAP Access Control SP12. Content PUBLIC 3. Mitigated Access .. 127. Mitigated Users.. 128. Mitigated User for Organization Rules..129. Mitigated Roles.

5 130. Mitigated Profiles.. 131. HR Objects Mitigation.. 132. Mitigated Role for Organization Rules.. 133. Analyzing Risks When Approving Access Requests.. 134. Analyzing Risks When Submitting Access Requests.. 135. Analyzing Access Risks for Role Maintenance..137. Mitigating Risks..138. Alerts..140. Searching Alerts..140. Cleared Alerts.. 142. Background Jobs.. 145. Background Scheduler.. 145. 8 Managing Roles.. 146. Role Management Overview.. 147. Role Management Considerations.. 147. Role Creation Methodology.. 149. Role Maintenance..152. Approving Role Requests.. 164. Reprovisioning Business Roles..165. Role Search.. 168. Default Roles.. 169. Maintain Rule to Role Mapping.. 170. Role Mining.. 171. Action Usage.

6 171. Role Comparison.. 172. Role Reaffirm.. 173. Role Mass Maintenance.. 173. Importing Multiple Roles.. 174. Updating Multiple Roles.. 177. Updating Org. Values for Multiple Derived Roles..178. Deriving Multiple Roles.. 179. Analyzing Risk for Multiple Roles.. 180. Generating Multiple Roles.. 181. 9 Using Emergency Access Management.. 182. Emergency Access Management Overview.. 183. EAM Terminology.. 184. SAP Access Control SP12. 4 PUBLIC Content Configuring Emergency Access .. 184. Requesting Emergency Access .. 184. Reviewing and Approving Access Requests.. 185. Extending Validity Periods for Firefighting Assignments.. 186. Accessing Systems to Perform Firefighting Activities.. 187. Using the Emergency Access Management Launchpad.

7 188. Reviewing Emergency Access Activities and Reports.. 190. Firefighter ID Review.. 191. 10 Managing Periodic Access Reviews.. 193. Compliance Certification Reviews.. 194. Managing Coordinators.. 194. Reviewing Requests.. 197. Managing Rejections.. 199. Alerts..201. Searching Alerts.. 201. Cleared Alerts.. 203. 11 Reports and Analytics.. 206. Access Dashboards.. 206. Access Provisioning Dashboard..207. Access Requests Dashboard..208. Access Rule Library Dashboard..209. Alerts Dashboard..209. Mitigating Control Library Dashboard..210. Risk Violations Dashboard..210. Role Analysis Dashboard.. 213. Role Library Dashboard..214. Service Level for Access Requests Dashboard.. 214. User Analysis Dashboard.. 215. Violations Comparisons Dashboard.

8 216. Risk Violation in Access Request Dashboard.. 217. Access Risk Analysis Reports.. 218. Access Rule Summary Report.. 218. Access Rule Detail Report.. 218. Mitigated Object Report.. 219. HR Object Risk Violation Report.. 220. Mitigation Control Report.. 221. Profile Risk Violation Report.. 222. Role Risk Violation Report..223. User Risk Violation Report.. 224. Access Request Reports.. 225. SAP Access Control SP12. Content PUBLIC 5. Approver Delegation Report.. 226. Requests by PD/Structural Profiles.. 226. Requests by Roles and Role Assignment Approvers Report.. 227. Requests with Conflicts and Mitigations Report..227. Service Level for Requests Report.. 228. SoD Review History Report.. 229. User Access Review History Report.

9 230. User Review Status Report.. 231. Role Management Reports.. 231. Compare Action in Menu and Authorization Report.. 232. Compare User Roles Report.. 232. List of Actions in Roles Report.. 233. Master to Derived Role Relationship Report.. 234. PFCG Change History Report.. 234. Role by Date of Generation Report.. 236. Role Relationships Report..236. Role Relationship with User/User Group Report.. 237. Single to Composite Role Relationship Report..237. User to Role Relationship Report.. 238. Security Reports..238. Action Usage by User, Role, and Profile Report.. 239. Count Authorization for Users Report.. 239. Count Authorization in Roles Report.. 240. List Expired and Expiring Roles for Users Report.. 241. Audit Reports.

10 241. Change Log Report.. 241. Embedded Action Calls in Programs of SAP Systems Report.. 242. List Actions in Roles But Not in Rules Report.. 243. List Permissions in Roles But Not in Rules Report.. 244. Emergency Access Management Reports.. 244. Consolidated Log Report.. 245. Firefighter Log Summary Report.. 246. Invalid Emergency Access Report.. 246. Reason Code and Activity Report.. 247. SoD Conflict Report for Firefighter IDs.. 248. Transaction Log and Session Details Report.. 249. Risk Terminator Log Report.. 249. SAP Access Control SP12. 6 PUBLIC Content 1 Introduction to SAP Access Control Product Information Product SAP Access Control Release SP12. Based On SAP NetWeaver SP01. Documentation Published March 2021.