User Access Review

[lseymour]

Trying to make sure that I understand this tool.
1. Is this tool in the LMS and scheduled by an LMS Administrator?

2. Is this available at a cost?

3. Can this tool be used for quarterly audits of user roles/permissions?

4. Do I need to create user groups to use this tool to perform the audit?

[SConix]

Hi,

User Access Review (UAR) is a feature of the SAP GRC Access Control, where the assignments of roles to users can be reviewed. Usually scheduled regularly (e.g. annually or every 6 months) by an administrator on request of the compliance team. The review can be done either by role owner (assignment approver) or manager, depending on the data available.

This tool can be used as a complementary control on your user management (Review of role assignments on top of the daily validation each time a role is requested/assigned to a user) - so yes for quarterly audits it could be used.

User Groups are not required to use this tool.

Hope this helps you further.

Sigrid