{"id":6271,"date":"2021-03-31T08:08:59","date_gmt":"2021-03-31T06:08:59","guid":{"rendered":"http:\/\/inprosec.com\/success-case-role-redesign-vceaa\/"},"modified":"2025-07-03T16:58:15","modified_gmt":"2025-07-03T14:58:15","slug":"success-case-role-redesign-vceaa","status":"publish","type":"post","link":"https:\/\/www.inprosec.com\/en\/success-case-role-redesign-vceaa\/","title":{"rendered":"Success Story: SAP\u00ae Role Redesign at VCEAA"},"content":{"rendered":"

One of the biggest success stories of our company has been the implementation of a role redesign project based on best practices that reduced more than 96.5% of the Role Segregation Conflicts<\/strong> that existed in different SAP systems. Because of this we want to explain how the process has been from the first moment.<\/p>\n

This case was presented at the SAP GRC Europe Event in Nice on June 18, 2015<\/em>.<\/a><\/p>\n\n

VCEAA is the subsidiary of Votorantim Cimentos<\/a> in Europe, Africa and Asia. Votorantim Cimentos is one of the TOP 10 largest cement companies in the world:<\/strong><\/p>\n

 <\/p>\n

\"\"<\/a><\/h2>\n

The Challenge<\/strong><\/h2>\n

The difficulty of the role redesign was the existence of different SAP systems for each of the countries<\/strong>, which made the project tasks difficult since it was necessary to replicate the entire role model for each of the SAP systems<\/strong>. On the other hand, each country had a different role model, one based on users, one based on positions and one based on tasks\/activities.<\/strong><\/p>\n

These two points meant, on the one hand, that the security teams managing the roles had different strategies that prevented centralization, and on the other hand, the lack of a global nomenclature made the management and provisioning of roles very difficult.<\/p>\n

Inprosec Solution<\/strong><\/h2>\n

Due to the need to comply with the SoX regulation, the project was divided into two phases, the first focused on a drastic reduction of access to reduce risks and SoD conflicts<\/strong> that were not required by users and a second phase where the basis of a new role model would be defined, based on global best practices<\/strong>, so that countries would follow the same criteria in role management.<\/p>\n

Previously, roles were managed locally<\/strong> and without a clear definition when it came to creating roles. To give an example, the situation was:<\/p>\n