Enterprise Roles & Attribute Based Management

Background – Global Manufacturing Company

A Global Manufacturing company selected Anomalix to build an enterprise wide RBAC and ABAC strategy to solve manual access administration activities related to user turnover. Anomalix was able to establish a baseline of common access across the various job functions with high turnover. By identifying specific granular entitlements that controlled user access within critical applications by job function, Anomalix was able to identify and encapsulate roughly 80% of user access in Job roles. 

Our Global Manufacturing client has over 350K users with up to 1,200 Job roles that could have as high as 10% turnover daily representing over 1,000 access related change events across 200 applications. Each application in many cases had its own custom entitlement repository that controlled user accounts entitlements. 

‍

How We Helped

Anomalix worked with the Global Manufacturing client to analyze access across 200 applications. Many of these applications supported core business processes and had compliance implications. By implementing Job roles, coupled with automated fulfillment to key systems such as Active Directory, Oracle Financials, RACF and SAP, our client was able to realize ROI within 18 Months.

‍

End Result

1. Mined and Defined 1,200 Job Roles using a combination of attributes.
2. Created Birthright Membership Logic for all Job Roles.
3. Rogue Access and Out of Role Entitlement Reporting.
4. Automated fulfillment for Active Directory, Oracle Financials, RACF and SAP access requests.
5. Implemented enterprise business roles, automated birthright access.
6. On boarded 200 applications onto a centralized Identity governance platform.
7. Improved the end-user access request experience.
8. Strengthened the Global Manufacturer’s overall security and audit posture.