Modeling of the ERP system permissions management
ERP system has just been on the line, the system of rights management are not always pay attention to. We paid more attention to whether the system is running smoothly, the data is accurate, the financial accounts, and whether able to get on and so forth. In fact, this time in order to ensure that the system quickly turn up to many privileges of the user is often magnified. A few months later, with the ERP system operation gradually stabilized, the system management issues within the competence of the slowly become more prominent. Specifically manifested in the following areas:

Do not have a clear mandate principle, can not explain the exact reasons why the license or not to authorize
With the ERP system is running more smoothly, the user gradually felt the value of the system, so you will be asked to open their additional functionality. For the system privileges managers, faced with a substantial increase in applications for permission to whether it is open or not open, it seems, and can not find a clear standard. So, please charge of examination and approval department has become one of the most effective solutions. As long as the relevant departments in charge of accreditation, IT departments open verdict. However, this is only from the management responsibility to solve the problem of who is in charge, did not resolve the basic issues of rights management. An authority that is open or not open an access is determined by an individual to determine whether the necessary (whether this person is the applicant, authority administrator, or department heads), or by a management rules to decide. From a standardized, scientific and meticulous management point of view, of course, should be the latter; from a risk control perspective, even more should be the latter.

In fact, with such a large integrated ERP systems have been gradually adopted, business operations of information processing and transfer efficiency were actually significantly increased. However, any transaction has two sides, in this case, if the license properly, the risk of business operations information, greatly increased. Such risks mainly include two aspects, one where there was no more necessary to understand the information employees can keep abreast of such information, greatly increasing the possibility of leaks; second, there is no need for the original operation or processing of such information staff has of these powers, increasing the possibility of loss of control of management.

Therefore, for the implementation of the ERP system, enterprises should establish a set of business activities based on the ERP system privileges management system. For particular employees, what should have what kind of authority, depending on their business processes within the system's role and engaging in activities? "Business event-driven" should be to determine whether an employee has a certain power of important principles. "Business activities" of the order can be achieved in the form of Excel tables, but it has proved difficult to ensure that such technical means "business activities" combing the comprehensiveness and accuracy is also more difficult to maintain them. The establishment of a business process-based "business activities" model, is a more advanced technological means.