We explore two strategies for setting up your authorizations:
- Exclude Authorization Setup
- Include Authorization Setup The choice between these two methods depends on the desired level of control and the time, money, and capacity you want and can invest.
Exclude Authorization Setup
In an exclude setup, all users initially receive all rights. Only the high-risk rights are removed and separately assigned to users who need them. This is comparable to an office where everyone can move freely, but only the cabinet with personnel files is locked. This method can be implemented quickly and provides a reasonable level of security.
Include Authorization Setup
In an include setup, users receive only the minimal rights necessary to perform their tasks. This is comparable to an office where the front door is locked and people only have access to the departments where they need to be. This method requires more time and effort but offers a higher degree of control and is future-proof.
Pros and Cons Matrix
|
Strategy |
Advantages |
Disadvantages |
|
Exclude autorisation |
Simple function separation for few users (up to about 50) |
Less detailed, smaller risks not always mitigated |
|
|
Takes little time and is cheaper |
Less future-proof with user growth and increasing maturity |
|
|
Less chance of error messages during testing and go-live |
|
|
Include autorisation |
Detailed setup, high degree of control |
Costs more money, time, and capacity |
|
|
Future-proof, works well with organizational growth |
More complex, more error messages during testing and after go-live |
Advice
Unsure which approach best suits your organization? Contact our experts for personalized advice.
Contact us
Do you have questions or comments about our authorization software? We would love to hear from you. Please enter your details in the form below and we will get back to you as soon as possible. You can also contact us directly at the phone number listed on the left.
Our dedicated team is ready to assist you with any questions or concerns. We strive to provide you with the best service possible.
