This discussion has been locked. The information referenced herein may be inaccurate due to age, software updates, or external references.
You can no longer post new replies to this discussion. If you have a similar question you can start a new discussion in this forum.

How ARM Supports Businesses in Work From Home Scenarios

The increase in remote workers due to COVID-19 (or the Coronavirus) has created some additional challenges for IT, especially in security. And it’s not only employees, but others, like auditors. I wanted to make sure you knew how Access Rights Manager (ARM) can help.

ARM can help in four main areas when handling permissions remotely:

  • Permission visibility
  • Permission management
  • User management
  • Auditing/monitoring

ARM supports administrators, employees, auditors you need to report to, and regulations you need to comply with during increased working from home scenarios.

Permission Visibility:

1. Purpose Groups
Define purpose groups for sensitive AD groups or groups managing access to certain services or platforms.

Supports: Admins and auditors can get a faster and easier overview of sensitive services and resources.

PurposeGroups.png

Define purpose groups for sensitive services or resources.

PurposeGroups3.png

2. Reporting:
Configure the creation of periodic reports to document and to stay informed about important changes in the IT environment. Examples are: “Who has access where?” or ‘‘What is/has been shared?”

Supports: Admins who need to ensure compliance during working from home.

 

Aceess Rights Manager Report example.png

Permission Management  

1. Permission Request Management and Recertification:
Delegate responsibility of permission management on resources to help desk or data owners and enforce periodic entitlement reviews. Request resources with friendly names.

Supports: Reducing workload for admins with automated reports. Enforces least-privilege principle and supports auditors with a stricter permission infrastructure and a cleaner environment over time. It also offers improved reaction time and less time needed until work can continue for employees.

Access Rights Recertification.png

User Management  

1. Web Client Cockpit:
Enable business users and managers to reset passwords, unlock their employees as self-service.

Supports
: Decreasing the workload for admins, providing improved reaction time for employees, and solving problems faster.


2. Analyze and Act—Account expiration:
Check for expiring accounts and passwords via the user scenario in Analyze and Act. Columns need to be added before being available in the scenario.

Supports
: Admins can reduce reaction time, accelerate countermeasures, and provide an improved reaction time for employees with less time needed until work can continue.

Auditing/Monitoring:  

1. AD Alerting:
Alert on membership changes of AD groups providing access to sensible resources or services (e.g., remote access).

Supports
: Admins can reduce reaction time, accelerate countermeasures, and ensure compliance for auditors.

 

ARM AD Alerting.png

 
 

Report who has access where.png



4. AD Alerting: Alert on user lockout events. Identify attack attempts and/or proactively provide support.

Supports
: Admins can reduce reaction time, accelerate countermeasures, and ensure compliance for auditors.

Are there other ways you’ve been using ARM to help maintain control while your workforce is at home? Share in the comments below.