As SailPoint Access Risk Management (ARM) customers prepare to migrate from ECC to S/4HANA, they often have the following common questions:
- Will our rulebooks change?
- Will it support our specific applications, like VSS or DBM?
- Can we continue using our existing rulebook, or will it need updates?
- Are all of the rules from the current workbooks imported into the new S4 workbooks, or do we need to manually import them?
Updates and Customizations with ARM
In the transition to S/4HANA, ARM introduces an updated ARM Rulebook tailored specifically to this environment. While this new rulebook contains enhancements that need to be evaluated and potentially merged into your existing rules, it’s important to note that ARM does not provide baseline risks for industry-specific add-ons, such as DBM or VSS. Custom modifications will be necessary for these specific processes, and these changes will need to be incorporated into your baseline rulebook by your team.
Customer Control and Responsibilities
Customers have complete control over the rulebooks utilized in their environments. When a new tenant is created, the initial default, or “Baseline,” rulebook is uploaded. However, SailPoint does not maintain or modify the rulebooks for existing customer tenants; that responsibility rests solely with the customer.
SailPoint has released an updated version of the baseline rulebook, which encompasses all original risks and permissions details, alongside modifications to support SAP S/4HANA. New tenants will automatically receive this latest version. Existing customers can request a copy of the updated rulebook from customer support at any time. It’s essential to review these updates and assess their impact before making any changes to your current rulebooks.
Administrative Responsibilities
ARM administrators within each organization will be tasked with conducting a delta analysis to determine if updates to their respective rulebooks are necessary. This proactive approach ensures that your access risk management continues to align with your organizational needs during and after the migration process.