Knowledge base / Getting started
Getting started
ClearDuty runs in your browser. You load a few SAP tables, the analysis runs on your computer, and you get a list of segregation-of-duties findings with the evidence behind each one. Nothing is installed and nothing is uploaded.
Before you start
- A current desktop browser: Chrome, Edge, Firefox or Safari.
- Someone with display access to transaction SE16N, usually SAP security or Basis. The exports take about 30 minutes.
- Optional: your SAP GRC ruleset export, if you want to use your own rules from day one.
1. Try it on sample data
Open clearduty.eu/app. On first use you create an account; this first account is the administrator, and its name appears on every analysis and audit pack. The account lives in your browser only. Choose Load sample data on the Data tab to see a fictional company with 24 users.
2. Export the tables from SAP
Three datasets are required: role authorizations (AGR_1251), user assignments (AGR_USERS) and a ruleset. Composite roles (AGR_AGRS) and the user master (USR02) make the result more accurate. The exact fields and SE16N settings are in SAP extracts.
3. Load your files
On the Data tab, upload each file as CSV or Excel. Column names from SAP tables and GRC reports are recognised automatically. Your first upload clears the sample. The Data checks box tells you what is missing or inconsistent, for example unresolved $BUKRS placeholders that need AGR_1252.
4. Work the findings
Open SoD Analysis → Findings. Start with findings marked Exercised and Critical. Select a row to see why it fires and the options to fix it. See Reading a finding.
5. Prove it
On the Reporting (Audit) tab, record the source system and row counts, approve the ruleset version, reconcile with GRC if you have it, sign off and export the audit pack. See Audit evidence.
Still stuck? Ask us — we answer within one working day.