sapaudit
ACCESS · SUIM

Who can do what in SAP, and who should not.

SUIM answers almost any question about users, roles and profiles — one query at a time. sapaudit turns those answers into standing reports: critical authorizations, privileged users and the changes made to them, kept up to date and ready to hand to an auditor.

SUIMUsersRolesProfilesCritical authorizationsCritical combinations
WHAT IS RECORDED

The full trail, in plain terms.

Users and their roles

Every user with the roles and profiles assigned to them, and how that has changed over time.

Critical authorizations

Who holds broad profiles such as SAP_ALL, and who can run the transactions that bypass normal controls.

Critical combinations

Users whose roles together allow a process to be started and approved by the same person.

Account hygiene

Dormant users, users that never logged on, and service accounts with dialog access.

QUESTIONS IT ANSWERS

Ask it the way an auditor would.

Search the trail in ordinary terms and keep the searches you repeat as reports.

Who has SAP_ALL or SAP_NEW in production today?
Which users can both create a vendor and post a payment?
Which roles were changed last quarter, and by whom?
Which dialog users have not logged on in 90 days?
SAGE AI

And the things nobody thought to ask.

Sage AI learns the normal pattern for each user and system here, and raises what falls outside it.

Privilege granted outside the usual patternSAGE AI

A broad profile is assigned by an administrator, at an hour or to a user type that does not match past administration.

Rights that grow quietlySAGE AI

An account collects roles from several departments over time until it can complete a whole process alone.

Dormant account back in useSAGE AI

A user that has been inactive for months is unlocked and starts running transactions the same day.

See who can do what in your SAP systems.

A short evaluation shows what your trail looks like within the first day.

Request a demo