Dynamics F/SCM Customer Experience (CRM) Dynamics GP Dynamics Business Central (NAV) Dynamics SL Power Platform Fabric Copilot

[Kurt Fischer]

I work for Fossil Group.  In our APAC region we have a regional office in Hong Kong and local country offices in 9 other countries.  Each of these offices has a small accounting team (2-3 people).  When everyone is at work, we are able to deal appropriately with SOD issues.  However, when someone is absent for a week or two, one of the other employees needs to backfill for the position and we assign Person B with the access rights of Person A.  This creates SOD issues.  Our auditors have requested we implement a control requiring the review of all transactions of Person B as an exposure check.  

Do any of you have similar issues and, if so, how have you addressed them?

Thank you.

——————————
Kurt Fischer
Fossil Group
Richardson TX
——————————

[Val Gameiro]

Hey Kurt, I’ve never had this situation, and don’t quite understand it, but I did have a thought which may or not be applicable (again, not sure what the requirement is).

You could create a separate account for the backfill person, to tell the backfill transactions apart from the regular ones.

They’d just have to log off and log in with the different account, or have 2 PCs, one for regular and one for backfill.

V

——————————
Val Gameiro
Senior NAV Analyst
BPL Plasma
Austin, Texas
——————————
——————————————-

[Kurt Fischer]

Val:

Thank you very much for your suggestion.  In fact, this is our current approach.  We have separate accounts set up and provisioned based on each employee’s roles.  Then when an employee is out for an extended period, these accounts are used by the stand-in employee.  Unfortunately, this still results in SOD issues and some form of monitoring control is required.

——————————
Kurt Fischer
Fossil Group
Richardson TX
——————————
——————————————-

[Amanda Mayer]

Kurt,

I haven’t used it myself, but maybe check out Fastpath for both their Audit Trail and Identity Manager solutions.  Identity Manager will allow you to provision temporary access easily and Audit Trail will then allow you to track any changes to pertinent information, when the change was made and what exactly was changed. 

——————————
Amanda Mayer
New View Strategies
Milwaukee WI
——————————
——————————————-

[Kurt Fischer]

Hi Amanda:

We’ll follow-up on your suggestion.  It sounds like a possible way to more easily capture and review usage by the stand-in employee.

Thank you.

——————————
Kurt Fischer
Fossil Group
Richardson TX
——————————
——————————————-