AlertRoles

Role Lifecycle Management

Overview

Managing roles within the enterprise manually is a costly and time consuming process that can cost millions of dollars. These processes are hard to scale and the organization ends up with a proliferation of roles that spin out of control, jeopardizing compliance and security. Added to the cost and complexity, is the burden on IT during internal and external audit periods. AlertCertify automates the user access certification review and approval process and delivers an integrated approach across all types of systems to present a unified view of compliance violations and security gaps making the certification more reliable while delivering the flexibility of a configurable workflow process and variable time intervals.

AlertRoles helps organizations manage roles and entitlements including their definition, modeling, and lifecycle management for various resources including ERP applications, legacy systems, physical badge access systems and control systems. AlertRoles seamlessly integrates with SAP, Oracle and other enterprise applications based on a core understanding of each intrinsic security model.

Capabilities

AlertRoles delivers a comprehensive intelligent role lifecycle management application that includes:

• Role Modeling: flexible role modeling capability that allows for custom models based on resources, enterprise roles etc. Customers can build roles using these models.
• Role Repository: enterprise, business or resource level roles can be defined in a central repository and driven by role models. Relationships to organizational structure and jobs can be defined as well as when the role should be provisioned.
• Role Mining: rules engine which can recommend new roles based on pre-defined role models and best practice rules. Roles assignment can be based on policies, existing roles, entitlements, usage, and relationships.
• Role Lifecycle Management monitor change management for roles and entitlements including the assignment of roles and entitlements to users based on various policies. AlertRoles detects changes done directly in backend systems like SAP or Oracle. Changes that that might circumvent the prescribed process can be tracked as exceptions.
• Role Analytics: Providing powerful analytics that can help with optimizing roles. These analytics will include who has the roles, relationships, usage, changes and assignments.

Features

• Manage roles and entitlements
• flexible role modeling capability - custom models based on various other attributes
• Manage roles across ERP applications, legacy systems, badge access systems and control systems
• Includes best practice roles model templates that can be customized
• Roles for different applications and systems to be defined in a single roles repository
• Recommend (new) roles based on configurable roles models
• Match customer change management processes for deploying roles
• Detect changes made on backend systems (e.g. SAP, Oracle) to circumvent change process

Benefits

• Automate time consuming manual processes to reduce cost
• System of record for roles management – supports audit and compliance
• Single roles repository allows uniform security policies to be applied across multiple applications
• Innovative support for user provisioning and access authorization across IT, physical and control system domains
• Automated workflow and approval significantly cuts down approval time
• Role modeling allows risk analysis prior to provisioning