Authorization trace for SAP CRM at RWZ: Set up and manage roles more efficiently

Less effort, more security with apm atlantis

RWZ is the third largest of the main cooperatives active in agricultural trade in Germany. Around 2,800 employees work at over 220 locations throughout Germany. It is active for over 150 member cooperatives, 40,000 farmers, winegrowers and horticulturists as well as thousands of commercial and hundreds of thousands of private customers. Around 600 employees from various sales groups and RWZ divisions work with SAP CRM.

Image Source: Raiffeisen Waren-Zentrale Rhein-Main eG (RWZ)

Project goal

The project at a glance

The great challenge in SAP CRM was the widely varying authorization requirements of the sales groups and business areas of RWZ. In addition, the organizational data, such as sales area data in SAP CRM, was not available for derivation. Until now, the continuous maintenance of roles and authorizations has always involved considerable effort due to its high complexity. For this reason, RWZ was looking for a secure SAP solution that would implement the company’s authorization requirements efficiently and in compliance with the law.

Scope

The requirements for the new solution included:

Creation of master roles and definition of own derivation values using authorization trace
Automatic check for critical transactions
Significantly simplified role administration
Einfache und sichere Vergabe und Verwaltung von Zugriffsrechten

Result

With SAP CRM, RWZ Rhein-Main eG (RWZ) is well positioned to manage its customer relationships. Through the additional use of the GRC solution apm atlantis from valantic, the cooperative can particularly quickly meet the different authorization requirements of sales groups and business areas in SAP CRM. Possible risks due to critical authorizations can now be identified in advance.

Authorization trace quickly sums up requirements

The convenient authorization trace in apm atlantis proved to be a great advantage not only for day-to-day business, but also for setting up the new authorization roles: By creating master roles and defining your own derivation values, a large number of dependent roles were generated in a short time. Compared to SAP standard options, a great deal of effort was saved here.

Reduce the daily administration effort

The effort for role and authorization maintenance could be reduced many times over. The authorization analysis has also been considerably simplified by the optimized execution of the authorization trace.

Check critical authorizations in advance

Possible risks due to inadvertently wrongly assigned critical authorizations can no longer even arise at RWZ. To this end, the cooperative checks in advance with apm atlantis whether critical authorizations exist when creating or changing a role. Clear notifications allow the allocation of the relevant authorisations at any time in accordance with GRC guidelines.

Nils Meißner

Group Leader Application Consulting, RWZ

”The use of apm atlantis significantly accelerated the initial authorization setup in SAP CRM and the assignment of authorizations during the project phase, which enabled the implementation of SAP CRM to be completed on schedule, among other things.“

Nils Meißner

Group Leader Application Consulting, RWZ

”We had already had positive experience with the apm atlantis GRC solution from valantic (formerly realtime) in SAP ERP. Therefore, the decision to use the solution in SAP CRM was easy for us.“

Benefits for the RWZ

Accelerated Initial Authorization Setup in SAP CRM

Faster assignment of authorizations

Simplified authorization analysis through optimized authorization trace

Prevention of risks by checking critical authorizations

User-friendly handling

Rüdiger Hoffmann

Managing Director
valantic ERP Consulting

+49 221 454 67 00