Xiting Role Designer

  • Create a sustainable role concept in a virtual drag-and-drop cockpit.
  • Check for critical authorizations and SoD conflicts during role design.
  • Expedite SAP S/4HANA migrations.
  • Analyze the impact of role changes on SAP licensing.
  • Build roles based on usage data (ST03N).

Role Designer enables role administrators to design new roles in a drag-and-drop cockpit virtually and to simulate what-if scenarios through virtual role assignment.

Role Designer can also test those new roles against segregation of duties (SoD) conflicts and other issues, either against SAP Access Control (GRC) or XAMS’s internal risk framework. If you are planning on migrating your ECC system to SAP S/4HANA, the Xiting Role Designer can instantly migrate your existing roles, saving you months of manual labor.

Role Designer in Detail

Role Design CHALLENGE

SAP users are often over-authorized. But doing a manual trace analysis to determine what authorization users need is cumbersome, time-consuming and error-prone.

Often, there is no transparency of which roles are most suitable for a missing authorization and which organizational structures the user belongs to. 

Another challenge is anticipating SoD conflicts. Identifying SoD conflicts can often only be done during role assignment, and if issues are found, the affected roles have to be updated in a development environment before being transported back to production – a resource-consuming process.

Role Designer BENEFITS

With Role Designer, you can evaluate the user’s historical usage data and, in combination with best-practice role templates, create a suitable authorization concept for your users that is based on the least-privilege principle. That ensures that all your users are properly authorized but without too far-reaching permissions. 

Even during the role design phase, and before the roles are created in the profile generator (PFCG), you can analyze all roles for critical authorizations. Additionally, you can simulate the impact of role changes on end-users in real-time.

Role Designer also dramatically shortens the test phase of the roles, since significantly fewer corrections have to be made. Furthermore, Role Designer replaces the cumbersome spreadsheets that are often used in classic redesign projects.

More Information

Use Case
Role Designer in action: Simplified role design in a virtual environment.

On-Demand Webinars
Attend our webinars and learn more about the XAMS and SAP Security.

SAP Security Blog
Learn more about the innovative modules of the XAMS in our blog posts.

Learn more about the modules of the XAMS!

We look forward to your inquiry!

Other XAMS Modules

The innovative modules of the XAMS adapt to your needs and thus enable tailor-made solutions.

ABAP Alchemist

Improve the quality and security of existing and new ABAP code, and quickly find reusable code via the API Finder.

Security Architect

Use the provided templates to document your SAP landscape and identify compliance issues before they become an audit finding.