Functionality

CSI Automated Request Engine processes and logs all user role requests. By checking multiple layers of SAP authorizations, CSI ARE evaluates the access requests and ensures that new SoD conflicts and unwanted access to critical functionality (even through accumulation of access rights) do not occur. The request is done via a web interface or is integrated with a ticketing system or Identity Management system. The appropriate owners (user/role/risk/…) are informed and can approve or decline the request via workflow with integrated email functionality. A check on the SoD conflicts and access to critical functionality is integrated and only approved requests are handled automatically in the SAP system.

The application can be adjusted to the companies’ maturity level; from a change request repository with an information flow so that key users are informed when critical access is granted, to a full compliancy check with SoD and/or critical access, workflow approval and information flow. The workflow can be activated in parallel or sequential flow.

CSI Automated Request Engine enables:

• Fully automated SAP user access provisioning with configurable workflow and emailing functionality
• Preventive check on SoD conflicts and access to critical functionality with regard to the access request
• Process integration with ticketing systems, SAP workflow and Identity Management systems