1. Central Authorizer and Roles Presentation to SAPbiz April 14, 2004

2. Presentation to SAPbiz2 Agenda Overview of the Central Authorizer Overview of the Central Authorizer Review Primary Authorizer responsibilities Review Primary Authorizer responsibilities Authorizations in Roles Authorizations in Roles Rolesweb demonstration Rolesweb demonstration Roles Database demonstration Roles Database demonstration

3. April 14, 2004Presentation to SAPbiz3 Central Authorizer: Responsibilities ResponsibilitiesFrequencyBenefits Assist DLCs with authorization maintenance As neededAuthorization accuracy – no authorizations at risk and reduced regulatory exposure Maintain accuracy of authorizations with exception reports Weekly, Monthly, Bi-annually Add/Delete Primary AuthorizersAs neededSmooth processing of requests Maintain funds centers/dept. financial hierarchies As neededMaintain the ability to perform certain business functions

4. April 14, 2004Presentation to SAPbiz4 Central Authorizer Chuck King Chuck King Peggie McGrath Peggie McGrath Carol Wood Carol Wood

5. April 14, 2004Presentation to SAPbiz5 CA Oversight Committee Membership Deborah Fisher (Audit Division, CA Oversight Committee Chair) Deborah Fisher (Audit Division, CA Oversight Committee Chair) John Dvorak (Audit Division) John Dvorak (Audit Division) Gill Emmons (CAO) Gill Emmons (CAO) Kathleen Flynn (HR) Kathleen Flynn (HR) David Goodwin (IS&T) David Goodwin (IS&T) Diane McLaughlin (School of Architecture) Diane McLaughlin (School of Architecture) Lody Petriv (Budget and Financial Planning) Lody Petriv (Budget and Financial Planning) George Petrowsky (IS&T) George Petrowsky (IS&T) Jim Repa (IS&T) Jim Repa (IS&T) Brian Tavares (School of Engineering) Brian Tavares (School of Engineering) Mary Weisse (IS&T) Mary Weisse (IS&T) Carol Wood (IS&T/CA Team Lead) Carol Wood (IS&T/CA Team Lead) Committee meets on a bi-monthly basis

6. April 14, 2004Presentation to SAPbiz6 Primary Authorizers A “Primary Authorizer” (PA) is an administrator in a department, who has the authority to request or grant authorizations on the department's resources (i.e. Warehouse reporting, SAP R/3 spending, Nimbus budgeting, HR contacts, Update Personal Information, etc.).

7. April 14, 2004Presentation to SAPbiz7 Primary Authorizers: Responsibilities ResponsibilitiesFrequencyBenefits Review DLC authorizationsMonthlyAuthorization accuracy – no authorizations at risk and reduced regulatory exposure Revise staff authorizations based upon additions, terminations, or transfers On-going Approve/Deny requests for access to your depts data from staff outside your department. On-going Review funds centers/dept. financial hierarchies As needed, Annually Maintain the ability to perform certain business functions

8. April 14, 2004Presentation to SAPbiz8 Useful links Primary Authorizer List: http://web.mit.edu/sapr3/sw_dist/authreq.html Central Authorizer Web page: http://web.mit.edu/sapr3/sw_dist/ca/auths.html Primary Authorizer guidelines: http://web.mit.edu/rolesdb/www/paresponse.html

9. April 14, 2004Presentation to SAPbiz9 Roles Database The Roles database provides a consistent way to store and maintain access rules for other applications, such as SAP, EHS, etc. Authorizations are stored in the Roles database. Read-only access is available via the Rolesweb interface.

10. April 14, 2004Presentation to SAPbiz10 Rolesweb pages http://rolesweb.mit.edu Authorizations for a person Authorizations for a person Authorizations within a Department Authorizations within a Department Hierarchy of Qualifiers with Authorizations Hierarchy of Qualifiers with Authorizations

11. April 14, 2004Presentation to SAPbiz11 Authorizations in Roles SAP (Financial) SAP (Financial) EHS EHS Graduate Admissions Graduate Admissions Human Resources Human Resources IDDB (MIT ID Database) IDDB (MIT ID Database) LABD (Labor Distribution) LABD (Labor Distribution) META META Nimbus Nimbus Warehouse (SAP Financial and HR reporting) Warehouse (SAP Financial and HR reporting) XSIS (Student info) XSIS (Student info)

12. April 14, 2004Presentation to SAPbiz12 Questions and Discussion