--- title: What Is SAP Access Control? description: SAP Access Control is one tool you can use to ensure your company meets data security and authorization standards. Learn about it in this blog post. image: https://blog.sap-press.com/hubfs/An%20Introduction%20to%20SAP%20GRC%20Access%20Control.png --- [![rheinwerk-sappress-logo-header-1](https://blog.sap-press.com/hubfs/rheinwerk-sappress-logo-header-1.svg)](https://blog.sap-press.com/) [Blog](https://blog.sap-press.com) - Books - Get an overview of our books and courses on every relevant SAP topic. - [Programming](https://sap-press.com/programming/) - [Administration](https://sap-press.com/administration/) - [BI](https://sap-press.com/business-intelligence/) - [Finance](https://sap-press.com/finance-controlling/) - [Logistics](https://sap-press.com/logistics/) - [HR](https://sap-press.com/human-resources/) - [CRM & Sales](https://sap-press.com/marketing-sales/) - [HANA](https://sap-press.com/hana/) - [Introductions](https://sap-press.com/introductions/) - [E-Bites](https://sap-press.com/e-bites/) - [Certification Guides](https://www.sap-press.com/certification-guides/) - [Rheinwerk Courses](https://www.sap-press.com/online-courses/) - Book Subscription - Get unlimited access to all SAP PRESS books! - [SAP PRESS Subscription](https://sap-press.com/subscriptions/) [Administration](https://blog.sap-press.com/tag/administration) # What Is SAP Access Control? ![SAP PRESS](https://blog.sap-press.com/hubfs/Twitter_profile_pic.svg) by [SAP PRESS](https://blog.sap-press.com/author/sap-press) Five key capabilities are enabled by SAP Access Control. This blog post provides a detailed description of these capabilities and how they benefit an organization.   The figure below shows these capabilities. ![SAP Access Control: Capabilities](https://blog.sap-press.com/hs-fs/hubfs/2370_01_003.png?width=510&height=500&name=2370_01_003.png) ## Key Capabilities The primary purpose of SAP Access Control, as mentioned earlier, is to ensure that your organization can adhere to compliance requirements. Three phases are followed in the implementation of SAP Access Control. ### Get Clean Get clean begins with identifying the existing risks. SAP Access Control’s risk analysis and management features identify SoD and critical risks. Further, business teams are responsible for adjusting their processes to reduce potential risks. ### Stay Clean Once risks have been mitigated and remedied, your enterprise must maintain clean systems, which is referred to as “stay clean.” This goal can be achieved through business role management, user provisioning, and privilege management. ### Stay in Control To keep the system clean, periodic reviews of user access, SoD, and firefighter IDs (FFIDs) can be conducted. The process is referred to as *compliance recertification*.   The table below lists the SAP Access Control components used during each phase. ![Components Used in SAP Access Control Phases](https://blog.sap-press.com/hs-fs/hubfs/2370_table_01_002.png?width=890&height=230&name=2370_table_01_002.png)   The next table lists some new features that SAP Access Control 12.0 offers in addition to its standard features. ![New Features in SAP Access Control 12.0](https://blog.sap-press.com/hs-fs/hubfs/2370_table_01_003.png?width=2403&height=4004&name=2370_table_01_003.png)   ## Supported Systems SAP Access Control can be integrated with all SAP NetWeaver systems, as mentioned in Section 1.3.1. To utilize the various components, you must install the GRCPINW plug-in (SAP NetWeaver plug-in for SAP GRC solutions). As of version 12.0, SAP Access Control supports both v1100 and v1200, but not v1000.   RFC connections can be established once the plug-ins are installed.   Additionally, SAP Access Control 12.0 supports HR integration with [SAP ERP](https://learning.sap-press.com/what-is-sap#sap-erp) and [SAP S/4HANA](https://learning.sap-press.com/sap-s4hana) for configuring HR triggers. To use this feature of SAP Access Control, the GRCPIERP plug-in must also be installed.   SAP Access Control 12.0 also supports SAP Identity Management and non-SAP identity management applications, which you can integrate with web services. Cloud applications like [SAP Ariba](https://blog.sap-press.com/what-is-sap-ariba), SAP Concur, and [SAP SuccessFactors](https://learning.sap-press.com/sap-successfactors) Employee Central can be connected using SAP Cloud Identity Access Governance/[SAP Business Technology Platform](https://learning.sap-press.com/sap-btp) (SAP BTP) cloud connectors.   When an application lacks a standard connector or integration capability, Pathlock adapters can be used.     Editor’s note: This post has been adapted from a section of the book *[SAP Access Control: The Comprehensive Guide](https://www.sap-press.com/sap-access-control_5636/?utm_source=sappressblog&utm_medium=referral&utm_campaign=Blogs&utm_term=2370_chapter1&utm_content=2370)* by Raghu Boddu. ## Recommendation [![SAP Access Control: The Comprehensive Guide](https://blog.sap-press.com/hs-fs/hubfs/2370.jpg?width=170&name=2370.jpg)](https://www.sap-press.com/sap-access-control_5636/?utm_source=sappressblog&utm_medium=referral&utm_campaign=Blogs&utm_term=2370_chapter1&utm_content=2370) **SAP Access Control: The Comprehensive Guide** Manage on-premise user access with this comprehensive guide to SAP Access Control. Begin with step-by-step installation and configuration instructions. Then implement key SAP Access Control modules, including access risk analysis, emergency access management, and access request management. Learn to manage business roles, review user access, evaluate segregation of duties risks, and configure automation workflows. This is your all-in-one guide to SAP Access Control! [Learn More](https://www.sap-press.com/sap-access-control_5636/?utm_source=sappressblog&utm_medium=referral&utm_campaign=Blogs&utm_term=2370_chapter1&utm_content=2370) ![SAP PRESS](https://blog.sap-press.com/hubfs/Twitter_profile_pic.svg) **by [SAP PRESS](https://blog.sap-press.com/author/sap-press)** SAP PRESS is the world's leading SAP publisher, with books on ABAP, SAP S/4HANA, SAP IBP, intelligent technologies, SAP Business Technology Platform, and more! [Administration](https://blog.sap-press.com/tag/administration) [![Share on facebook](https://7528309.fs1.hubspotusercontent-na1.net/hub/7528309/hubfs/raw_assets/public/mV0_d-web-default-modules_hubspot/img/facebook-color.png?width=24&name=facebook-color.png)](https://www.facebook.com/share.php?u=https%3A%2F%2Fblog.sap-press.com%2Fwhat-is-sap-access-control%3Futm_medium%3Dsocial%26utm_source%3Dfacebook) [![Share on linkedin](https://7528302.fs1.hubspotusercontent-na1.net/hub/7528302/hubfs/raw_assets/public/mV0_d-web-default-modules_hubspot/img/linkedin-color.png?width=24&name=linkedin-color.png)](https://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fblog.sap-press.com%2Fwhat-is-sap-access-control%3Futm_medium%3Dsocial%26utm_source%3Dlinkedin) [![Share on twitter](https://7528304.fs1.hubspotusercontent-na1.net/hub/7528304/hubfs/raw_assets/public/mV0_d-web-default-modules_hubspot/img/twitter-color.png?width=24&name=twitter-color.png)](https://twitter.com/intent/tweet?original_referer=https%3A%2F%2Fblog.sap-press.com%2Fwhat-is-sap-access-control%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&url=https%3A%2F%2Fblog.sap-press.com%2Fwhat-is-sap-access-control%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&source=tweetbutton&text=) [![Share on email](https://7528311.fs1.hubspotusercontent-na1.net/hub/7528311/hubfs/raw_assets/public/mV0_d-web-default-modules_hubspot/img/email-color.png?width=24&name=email-color.png)](mailto:?subject=Check+out+https%3A%2F%2Fblog.sap-press.com%2Fwhat-is-sap-access-control%3Futm_medium%3Dsocial%26utm_source%3Demail&body=Check+out+https%3A%2F%2Fblog.sap-press.com%2Fwhat-is-sap-access-control%3Futm_medium%3Dsocial%26utm_source%3Demail) ### Comments ### Latest Blog Posts [![Implementing SAP Access Control](https://blog.sap-press.com/hs-fs/hubfs/Implementing%20SAP%20Access%20Control.png?height=600&name=Implementing%20SAP%20Access%20Control.png)](https://blog.sap-press.com/implementing-sap-access-control) [Administration](https://blog.sap-press.com/tag/administration) ## [Implementing SAP Access Control](https://blog.sap-press.com/implementing-sap-access-control) [Read More](https://blog.sap-press.com/implementing-sap-access-control) [![An Introduction to Business Role Management with SAP Access Control](https://blog.sap-press.com/hs-fs/hubfs/An%20Introduction%20to%20Business%20Role%20Management%20with%20SAP.png?height=600&name=An%20Introduction%20to%20Business%20Role%20Management%20with%20SAP.png)](https://blog.sap-press.com/an-introduction-to-business-role-management-with-sap) [Administration](https://blog.sap-press.com/tag/administration) ## [An Introduction to Business Role Management with SAP Access Control](https://blog.sap-press.com/an-introduction-to-business-role-management-with-sap) [Read More](https://blog.sap-press.com/an-introduction-to-business-role-management-with-sap) **Subscribe to our blog!**Get notified about future blog updates. - - - - - ### The official SAP PRESS Blog As the world’s leading SAP publisher, SAP PRESS’ goal is to create resources that will help you accelerate your SAP journey. The SAP PRESS Blog is designed to provide helpful, actionable information on a variety of SAP topics, from SAP ERP to SAP S/4HANA. Explore ABAP, FICO, SAP HANA, and more! ### SAP Blog Topics - [All Topics](https://blog.sap-press.com) - [Logistics](https://blog.sap-press.com/tag/logistics) - [Programming](https://blog.sap-press.com/tag/programming) - [FICO](https://blog.sap-press.com/tag/fico) - [Administration](https://blog.sap-press.com/tag/administration) - [Business Intelligence](https://blog.sap-press.com/tag/business-intelligence) - [What Is?](https://blog.sap-press.com/tag/what-is) - [Featured](https://blog.sap-press.com/tag/featured) - [CRM & Sales](https://blog.sap-press.com/tag/crm-sales) - [Video](https://blog.sap-press.com/tag/video) - [Human Resources](https://blog.sap-press.com/tag/human-resources) ### Blog curated by [![Rheinwerk Publishing & SAP PRESS Logo](https://blog.sap-press.com/hubfs/rheinwerk-sappress-logo-header-1.svg)](https://sap-press.com) [Visit the SAP PRESS Store](https://sap-press.com) ### About - [Home](https://sap-press.com/) - [About Us](https://sap-press.com/the-publisher/) - [Contact](mailto:info@rheinwerk-publishing.com) - [Legal Notes](https://sap-press.com/legal-notes/) - [Privacy Policy](https://sap-press.com/privacy/) - [Terms of Use](https://sap-press.com/terms/) - [Guest Posting](https://blog.sap-press.com/guest-posting) © 2026 Rheinwerk Publishing, Inc. | Change Privacy Options ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "SAP PRESS", "url" : "https://blog.sap-press.com/author/sap-press" }, "dateModified" : "2024-08-14T12:07:16.528Z", "datePublished" : "2020-10-19T13:00:00.000Z", "headline" : "What Is SAP Access Control?", "image" : [ "https://blog.sap-press.com/hubfs/An%20Introduction%20to%20SAP%20GRC%20Access%20Control.png" ], "mainEntityOfPage" : { "@id" : "https://blog.sap-press.com/what-is-sap-access-control", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://blog.sap-press.com/hubfs/Logo-1.jpg" }, "name" : "Rheinwerk Publishing, Inc." } } ```