NSW Department of Customer Service: Modernising SAP Access Management through Intelligent Automation and Governance

The state department modernized SAP access management through intelligent automation and governance, improving user experience, security, compliance, and operational efficiency. The solution supports over 84,000 employees, establishing a scalable foundation for future growth. Download the Document

INTERNAL – SAP Only (delete if public)INTERNAL – SAP Only (delete if public)NSW Department of Customer ServiceModernising SAP Access Management through Intelligent Automation and GovernanceThe NSW Department of Customer Service (DCS) plays a critical role in enabling better outcomes for citizens,businesses, and more than 180 government agencies across New South Wales. Through its digital, regulatory, and sharedservice capabilities, DCS helps deliver secure, reliable, and efficient government services while driving innovation,productivity, and better ways of working across the public sector.As part of its broader digital transformation and enablement agenda, DCS is focused on creating a modern, connected, andsecure digital environment that improves public sector productivity and enables employees to work more effectively. A keycomponent of this transformation has been modernising the way SAP access is requested, approved, governed,provisioned, and removed.With more than 84,000 employees to support, effective access management is critical. Employees need timely access tothe systems and capabilities required to perform their roles, while the organisation must maintain strong controls over whocan access sensitive information and business processes. Balancing speed, usability, security, and compliance across alarge and complex public sector environment presented a significant opportunity for transformation. By automating accessmanagement processes and enforcing consistent governance controls, the solution has significantly improved the userexperience while strengthening security, compliance, auditability, and operational efficiency.Picture Credit | Yancoal, Sydney, Australia. Used with permission.
INTERNAL – SAP Only (delete if public)INTERNAL – SAP Only (delete if public)“The partnership with SAP Cloud Application Services hasfundamentally changed fragmented manual processeswith a single, automated and governed solution on SAPBusiness AI Platform (SAP BAIP). The solution improvesuser experience, strengthens security and compliance,enhances operational efficiency, and establishes ascalable foundation for future business growth throughEnterprise Business Roles (EBRs).Karrie-Ann Pattingale, Director, myWorkZone Platform Operations & StrategicServices, NSW Department of Customer ServiceDepartment of Customer service (DCS)NSW, Australiawww.nsw.gov.au/departments-and-agencies/customer-serviceIndustryPublic SectorEmployees~84,000Products and servicesSAP Business AI PlatformSAP Cloud Application ServicesFeatured solutions and ServicesSAP Business AI Platform,SAP Cloud Application ServicesRole removal requestsautomated, eliminatingmanual process for thisactivityAutomation eliminated theneed for one team dedicatedto manual OrganizationalManagement (OM) tasksBefore: Challenges and opportunities Limited visibility and manual workflow monitor of Enterprise Business Roles (EBRs), transaction codesand role definitions during the access request process Risk analysis, role validation and access governance activities were performed Access removals required separate incidents and manual SAP GRC requests, resulting in fragmentedprocesses and additional administrative effort.Why SAP Cloud Application Services (CAS) Delivers operational and technical support for SAP Business AI Platform, enabling seamlessOperations Dedicated service delivery team ensures governance, collaboration and aligned priorities whilereducing complexity and implementation risks Accelerates adoption of new capabilities and innovations with flexible, scalable services that evolvewith DCS’s needsAfter: Value driven results Automated user provisioning using SAP Identity Provisioning Services (IPS) and SAP cloud services. Enabled self-service access requests, EBR search and role discovery for all employees. Delivered specialised governance capabilities for Access Reviewers and Security Administrators. Introduced automated error handling, escalation management and workflow notifications. Eliminated manual intervention across key access management activities.Transforming Enterprise Access Governance with SAP BTP and SAP Cloud Application ServicesenUS (25/05) © 2025 SAP SE or an SAP affiliate company. sap.com/terms-of-use192 Optimized
INTERNAL – SAP Only (delete if public)INTERNAL – SAP Only (delete if public)Employees~84,000More than 800 accessrequests submitted in the firstmonth using new solutionsOperational efficiency hasimproved by removing manualintervention for EBR processThe Department of Corrections Services (DCS) previously managed SAP access requests across multiple ServiceNow solutions and aseparate access management system that was not integrated with myWorkZone. This fragmented approach resulted in inconsistent userexperiences, manual administration, and limited visibility into access governance and compliance.Users were required to submit different types of requests across multiple systems, while organisational units and work centres relied onfree-text entry, increasing complexity and reducing consistency. Access removals involved separate incidents and manual SAP GRCrequests, requiring additional administrative effort and making it difficult to maintain a streamlined and auditable access managementprocess.To address these challenges, SAP Cloud Application Services (CAS) designed and implemented a modern, enterprise-wide accessgovernance solution leveraging SAP Business AI Platform (SAP BAIP). The solution provides a single, standardised process forrequesting, approving, and provisioning SAP access through myWorkZone, supported by Enterprise Business Roles (EBRs), automatedprovisioning using SAP Identity Provisioning Service (IPS), and embedded SAP GRC risk analysis within the approval workflow.Integration with SAP S/4HANA and enterprise master data services ensures accurate validation, consistent access controls, andstrengthened governance.By automating the end-to-end access lifecycle, DCS has transformed the way SAP access is managed across the organisation. Thesolution delivers: A single, consistent user experience for SAP access requests and approvals. Automated provisioning and de-provisioning, reducing manual effort and administrative overhead. Improved governance, auditability, and compliance through embedded approval controls and SAP GRC risk analysis. Enhanced security by enforcing standardised business roles and automated validation. Greater operational efficiency through streamlined workflows and reduced processing times. A scalable and future-ready platform that supports DCS's ongoing digital transformation initiatives.This engagement demonstrates SAP Cloud Application Services' ability to deliver secure, scalable, and business-focused SAP solutionsthat improve operational efficiency, strengthen governance, and enable organisations to accelerate their digital transformation withconfidence.Accelerating SAP Access Transformation with Automation, Governance, and SAP BTP InnovationenUS (25/05) © 2025 SAP SE or an SAP affiliate company. sap.com/terms-of-useAdoption ImprovedFeatured solutions and ServicesSAP Business AI Platform,SAP Cloud Application ServicesDepartment of Customer service (DCS)NSW, Australiawww.nsw.gov.au/departments-and-agencies/customer-serviceIndustryPublic SectorProducts and servicesSAP Business AI PlatformSAP Cloud Application ServicesThrough strong collaboration between DCS and the SAP CAS team,this initiative has successfully transformed SAP access management,replacing fragmented processes with a secure, cloud-based platformthat improves user experience, strengthens governance, and increasesoperational efficiency. Supporting over 84,000 employees, the solutionestablishes a scalable foundation for future growth while deliveringenduring business value.”Kamal Kandpal, Manager, myWorkZone Platform Enablement andOperation Services, NSW Department of Customer Service