Clear access management and documentation at the touch of a button at Oberaigner
The Oberaigner Group develops and manufactures high-revving drive systems for small series and assembles its own innovative all-wheel drive technology to automotive standards for commercial vehicles of tomorrow’s leading automotive brands. Oberaigner has many years of extensive specialist knowledge and expertise in the all-wheel drive transfer case segment and is able to develop and produce customer-specific products for the automotive industry. As a specialist for small to medium-volume series, Oberaigner fully realizes other vehicle variants and transmission systems for niche applications whose special requirements are not covered by the standard product range of vehicle manufacturers. The field of application ranges from vans to trucks, cars, buses and boats.
Time-consuming manual authorization management as a starting point
The manual assignment of authorizations using the ticket system became increasingly confusing and time-consuming. If an employee needed a new access authorization, a ticket had to be created that went directly to the IT department. The task of the IT administrators was now to obtain the information to release the authorization and to set the NTFS authorization via Windows board resources after approval had been granted. The entire process was documented in the ticket. If an overview of assigned access rights was required as part of a certification, which is necessary for the customers of the Oberaigner Group, this information had to be taken from the various tickets or folders in the data structure. The reviews were therefore extremely cumbersome and time-consuming, which had to change.
The search for a convenient solution
The project team, consisting of key users, IT and the project manager, was looking for a convenient, comprehensive solution to better control rights management in the future and simplify evaluations with regard to certifications. They researched various providers on the market. Three of these providers, including the software solution from the Darmstadt-based software manufacturer BAYOOSOFT GmbH, which has been operating since 2001, were examined more closely. The decision was clear. “BAYOOSOFT Access Manager was exactly what we wanted,” recalls Hubert Springer, Head of IT & Building Services.
Commissioning the BAYOOSOFT Access Manager
After the project team was able to see the software solution for themselves in a webinar and the subsequent test installation, the go-ahead was given for commissioning.
First, the project members used the NTFS Permission Analyzer to get an overview of the existing NTFS permissions. The data controllers were then defined, who would later decide on access requests in their area on their own authority. This role was immediately assumed by the department heads, who received training on rights management, in particular on assigning rights using profile groups, later on during the commissioning process. Before the identified rights situation could be migrated to the Access Manager, the data managers made appropriate changes to bring the data structure up to date. The migration began with the IT folders and then the software solution was rolled out to all other departments at the Nebelberg site. This turned out to be uncomplicated thanks to the active support of the Solution Engineer, the primary contact on the part of BAYOOSOFT. The other two locations, Laage and Ottnang am Hausruck, decided against adapting the existing structure and started on a greenfield site. This means that the folder structure from Nebelberg has been adopted and the access rights reassigned according to need-to-know.
Everyday work with the BAYOOSOFT Access Manager
The introduction of the BAYOOSOFT Access Manager has relieved the IT department in the long term. The central self-service portal component involves end users and data managers directly in the access management process so that access requests are processed and documented without the need for IT. The users request their access themselves and the data controllers can decide on the access requests with just one click. “With the help of the Access Manager, access management has become a real self-runner and has taken a huge amount of work off our hands in IT,” praises Hubert Springer. “Reviews are no longer difficult, painstaking tasks, but can be completed at the touch of a button.” The Access Manager also offers other advantages that the project team had not even considered at the beginning. For example, it is possible to store data protection classifications for folders so that it is clear which resources contain or process personal data and how their content must be handled with regard to deletion periods. The auto-access correction function also prevents the re-growth of confusing structures, better known as “historically grown”. The self-service portal proved to be particularly helpful. “It’s the most useful thing for us in our day-to-day work, because IT only has to make sure that the program is running and the users do the rest themselves, including the documentation,” reports Hubert Springer enthusiastically. The problem of the Right Hero was also solved satisfactorily. The trainees only receive the access rights they really need, based on time and automated by the software solution.
Advantages for Oberaigner
The advantages for the Oberaginer Group of using the BAYOOSOFT Access Manager can be summarized as follows:
Conclusion
In summary, it can be said that the use of Access Manager at the Oberaigner Group has been a complete success. Not only was it able to convince the project team quite quickly, but the software solution also performs outstandingly in everyday work in terms of authorization management. The cost/benefit ratio is optimal for Oberaigner, achieving both cost savings and quality improvements. “I would definitely recommend the Access Manager at any time,” says Mr. Springer, praising the software from Darmstadt-based manufacturer BAYOONET AG.
