The SIVIS Authorization Robot heralds the era of automated authorization concepts
With the "SIVIS Authorization Robot" we revolutionize the creation and maintenance of SAP authorization concepts. The product launch of the world's first virtual SAP role advisor is the successful conclusion of a visionary research project conducted by SIVIS in cooperation with Karlsruhe University of Applied Sciences. The pilot was funded by the German Federal Ministry of Education and Research (BMBF).
SAP systems are the digital heart of all processes in many companies. A well thought-out role and authorization concept ("Who is allowed to do what?") is therefore indispensable for IT security and compliance. This is the only way to protect sensitive information and avoid damage caused by the incorrect or improper use of data. The challenge: SAP authorization concepts are complex - and associated with long project runtimes, high costs for external SAP consultants and also a large workload for internal project participants. Added to this is the worsening shortage of IT specialists and SAP experts. This is where the SIVIS Authorization Robot comes in: The virtual role consultant automates a significant part of manual consultant tasks. It analyzes and clusters millions of tracing data and develops complex concept proposals for single and composite roles - tailored to the company's individual objectives, such as license cost optimization or increased security. After validation and refinement by the SAP consultant, the automatically generated authorization concept is ready for use.
Automation through evolutionary algorithms
Because the modeling of SAP authorization concepts requires the handling of very large amounts of data, the SIVIS Authorization Robot is based on complex evolutionary algorithms. Comparable to Automated Role Mining, repetitive activities are automated at high speed and the behavior of human users is simulated. The highlight: In combination with AI-supported modules, the virtual role advisor becomes intelligent - for example, to independently generate comprehensible naming conventions with the help of semantic components.
Authorization concepts 2.0 increase efficiency
The virtual role consultant offers enormous efficiency potential throughout the entire lifecycle of SAP authorization concepts, from initial development to redesign and ongoing maintenance. Another advantage is that it significantly minimizes security gaps, so that companies are always prepared for SAP audits or certifications such as PCI DSS and work in compliance with security regulations such as NIS2 and SOX. Nicolas Justen, Developer at SIVIS, draws an impressive balance after the beta phase: "The practical use at our test customers proves the performance of Authorization Robot. In the pilot projects, for example, we were able to save up to 95 percent of consultant hours for role construction and reduce compliance conflicts by about 50 percent."
A Game Changer for SAP Role Projects
SIVIS Managing Director Philip Latini goes one step further: "Our Authorization Robot is much more than 'just another tool' for SAP authorization concepts. With the virtual role consultant, we have created a game changer that will disruptively change the entire business. Because its evolutionary algorithms replace much of the manpower in role projects, the scarce and expensive resource of SAP consultants is no longer the bottleneck for IT security and compliance. SAP experts can now focus their time, expertise and soft skills on the most important tasks in the project: strategic consulting, dialog with business departments and project management."
The beta phase is now complete. As of April 2023, the SIVIS Authorization Robot is ready for the market and can be licensed as a software-as-a-service for SAP environments. Since the solution was developed independently of SAP, it can also be used for other ecosystems in the future.
SIVIS Group
