SAP User Lock Manager

SAP Risk with Users Left Unlocked

SAP User Lock Report

Problem: SAP Risk

Most companies have a policy to lock users who are not using the system after certain number of days, usually 60 days or 90 days, but this is most often a manual process. The problem is that irregular, manual locking process creates audit risk. There are several inherent audit risks of leaving the dormant user in the system, such as:

1. The User may have left the company but still trying to access the system

2. Other people may try to access the system through the former user’s role

3. When the original person returns, they may be in a new roles and require different access

4. The unlocked user is still “using” company license, generating a cost even though he is not productive in the system

5. Some the users may use the system intermittently and appear to a manula system that they no longer need access so they may be locked without any forewarning

Remove Audit SAP Risk with of User Lock Manager

The auto Audit Lock Manager scans the users who have been inactive or dormant for a specified number of days and locks them. Following are the options available

Just lock the user
Lock the user and move to specific user group
Lock the user and expire the roles
Lock the user and remove the roles
Exclude certain users or user groups
Email user a warning of a lock-out in a specific number of days. This will give the user a chance to login and save their user ID from getting locked
Email list of locked users to system administrators
Backup the role assignment of the users whose roles were removed which will enable these users or new users to revert back the roles if needed
All these features will remove the audit risk by consistently cleaning up the user in the system

Benefits: Reduce Audit SAP Risk with User Lock Manger

Save user license costs by locking users and unnecessarily paying for users who are not using the system
Users who left the company cannot login the system
User getting access by mirroring locked users