The authorization access review in organizations is designed to periodically review particular user permissions. Often this is a tedious and error prone manual process. SUIM's Business Role Validator is an application that enables you to generate and assign review tasks automatically, at the right time and to the right people. The frequency and duration of such checks can vary according to a range of different factors (level of risk, applications, ...). Authorization access should be reviewed by line managers or by business role managers, or both.
Efficiency
Flexibility
Simplicity
Depending on the configuration of the system, validators are automatically alerted with the items to be done and on the desired date. No need to have an administrator to generate validation requests.
Every single validation action such as opening and closing periods or accepting and rejecting approvals is recorded in the BRV logs. In addition, all role changes as a result of a denied validation (including text) are also recorded in the AM / AMSO action log.
Following validation functions in BRV are available:
- The role owner validates all role assignments for which he is responsible.
- The periodicity is defined in the validation period for the validation by the owner of the role.
- The supervisor checks all authorization assignments of his employees.
- The periodicity is set in the validation period for the validation by managers.
The simple and ergonomic user interface increases the satisfaction of users (managers and role owners). The included bulk processing and reports (including transactions, risks) further increase the efficiency of a revalidation process. For each validation type, the validations can be performed via workflow or via the launchpad.
For each type of validation, a periodicity can be defined as well as the roles to be validated. For example, the audit of those responsible for roles takes place 2 times a year for 20 days, while the audit by supervisors takes place annually for 15 days.