How Automated Mover Workflows Prevent Access Creep A department change takes one HR update. Access can still carry the history of every department the employee worked in before. A mover workflow fixes that by recalculating the access profile instead of only adding the next set of permissions. An automated mover workflow prevents access creep by […]

How Automated Joiner Workflows Give Employees the Right Access on Day One At 9:00 on Monday, a new employee has one job: start working. If access still depends on a chain of tickets, the first day becomes an access chase. A joiner workflow changes the starting point from ‘request access’ to ‘evaluate the HR event’. […]

What Are HR Triggers in Identity and Access Management? One HR update can change what a person should access. If identity systems do not react, yesterday’s access can survive today’s job change. That gap is the reason HR triggers matter in identity and access management. HR triggers in identity and access management are workforce events […]

ANUGAL ROLE BUILD SERIES · 4 OF 4 · THE PROJECT MOMENT Role Redesign for SAP GROW, S/4HANA & ECC Migrations Migration is when SAP role design gets reopened, and the moment not to carry spreadsheet debt into the new system. How to redesign roles once, and cleanly. A migration to S/4HANA is the one […]

ANUGAL ROLE BUILD SERIES · 3 OF 4 · THE DIFFERENTIATOR Segregation of Duties by Design, Not by Detection Most SAP programs detect SoD conflicts after roles go live. Designing them out during role build is cheaper, cleaner, and audit-ready. Here is the shift. An auditor points at a report. One user can post a […]

ANUGAL ROLE BUILD SERIES · 1 OF 4 · THE PROBLEM Why SAP Role Design Still Runs on Spreadsheets Three weeks into an SAP role redesign, a designer has a spreadsheet open with 1,400 transaction codes in column A. She is grouping them by hand, from memory and tribal knowledge, into roles. On another floor, […]