SUIM's Access Manager for Support Organizations (AMSO) is specifically designed to meet the needs of your support organizations (e.g. Competence Centers). While end users usually work in a single business unit across multiple systems (e.g. controller, HR business partner), support users (e.g. consultants, developers, or technical users) require access across multiple business units on specific systems.
AMSO is system-oriented, not organization-oriented. With AMSO you can create systems or system clusters that are assigned through an approval workflow or automatically. AMSO also allows you to easily combine different sets of authorizations in one business role across different systems (productive versus non-productive systems).
Efficiency
Flexibility
Simplicity
Authorizations related entitites
Identity related entitites
Integration with 3rd parties products
Integration in other SUIM products
Filter the matrix by action(s)
A function that allows you to know which systems an authorization element is used can be displayed. In the same way, SUIM's integral transport program allows you to transport the roles from an original system to multiple system(s).
An authorization template is a pre-designed AM or AMSO roles over the system landscape that outlines the rules and regulations for granting access to a resource. It is useful for ensuring that the authorization process is consistent and efficient.
Sometimes, a new employee requires the same permissions as their colleague. For these cases, a whole process of provisioning rights per copy (full copy or enhancement, provisioning from a date, copy of a source user or a template, etc.) has been created.
Integration with Identity Manager allows for the deletion of AMSO roles and all in included support authorizations elements assignments to a user, at the correct date in the event of an organizational transfer or leaving action.
The integration with the Business Role Validator enables you to revalidate periodically critical support roles by either role owners or managers.
The integration with other SUIM applications increases the efficiency and functionality:
- With the integration of Business Role Validator (BRV), it enables you to revalidate periodically critical support roles by either role owners or managers.
- With the integration of Identity Manager (IM), it allows for the deletion of AMSO roles and all support authorizations elements assignments to a user, at the correct date in the event of an organizational transfer or leaving action
- With the integration of Compliance Enforcer (CE), it is possible to run risk checks and SoD violations.
Support roles often contain critical authorizations. Therefore its important to guarantee only the allowed users have access to these roles. With AMSO different kind of authorization workflows can be designed in order to ensure a 4-eyes principle or even to create multistage WFs with different approvers (e.g. role owner, supervisor, security etc.).
Define the validity of user to role assignment based on your requirements. Various time variables are available:
- Fixed time period (from to)
- Role provisioning beginning on a future date
- Time series (authorize revisions based on your audit schedule - e.g. every September to October)
Discover SAP services and solutions tailored to your business needs.
