Arcor’s Three-Month Security Transformation with ALLOut
Arcor’s Three-Month Security Transformation with ALLOut
Arcor, a major Latin American industrial group, successfully overhauled their JD Edwards EnterpriseOne 9.0 security system in three months using the ALLOut Security tool set. This project involved restructuring menus, creating “super-roles,” and automating security settings to meet regulatory requirements and manage 5,000 user profiles across seven countries.
Client in Focus
Arcor is a leading industrial group based in Argentina, specializing in the production of candy, cookies, chocolates, ice creams, and various food products. Operating across seven countries in Latin America, Arcor serves a diverse market with a workforce of 5,000 active users. Known for its extensive product range and significant market presence, Arcor continues to expand its reach and innovate within the food industry.
Arcor faced significant security management challenges due to their extensive operations across seven countries with 5,000 active user profiles. Regulatory requirements necessitated a shift from an ‘open’ to a ‘closed’ security model, which was complicated by the need to manage 130 business processes and 200 cost center pools. The existing system had two million lines of security in the F00950 table and 50,000 lines of row security, making it unmanageable with direct user role assignments and creating security conflicts due to the limitations of the JDE role sequencer.
Arcor utilized the ALLOut Security tool set to overhaul their menu, role, and security structures. They redesigned their menus and created 2,000 “super-roles,” which were directly uploaded into JD Edwards from spreadsheets, allowing for efficient role management. They also mapped 130 functional roles and 200 cost center roles, setting up disallowed role combinations to prevent unauthorized assignments. By automating security settings and converting from exclusive to inclusive row security in a single day, Arcor streamlined their security management processes.
Arcor achieved a comprehensive security restructuring within three months with ALLOut! The new control processes ensured that all users were mapped to super-roles, which in turn were linked to individual roles, minimizing the need for frequent security changes. This approach not only enhanced manageability and compliance with segregation of duties but also eliminated security conflicts, providing the internal controls team with group-level access reports and ensuring that the security team could focus on role assignments without concerns about sequencer conflicts.
