Knowledge base

Knowledge base / Licensing, security and releases

Updates and release notes

You never reinstall ClearDuty. When a new version is published, every open copy notices within an hour (or at the next visit) and shows an Update now bar. One click reloads the new version; your data, controls and settings stay.

Release notes

2.6.12026-10-31

  • The Excel library file now carries its version in its name (xlsx-0.20.3), so browsers never reuse an older cached copy.
  • The create-account screen uses a neutral example name in its fields.
  • Change packages built from plans saved before 2.3 show the recorded approver and plan name.

2.6.02026-10-31

  • Access DNA: an interactive map of every path from a user through composite and single roles, t-codes and authorization values to business functions and risks. Hover traces a path; every box is an action.
  • Investigation panel: open any user, risk or finding from the dashboard, Access DNA or search, and act on it — evidence, Fix this user, Simulate, add a control, record the decision — without leaving the page.
  • Navigation: breadcrumbs on every screen, Ctrl K search across screens, users, risks, roles, transactions and guides, g-key shortcuts, ? for the shortcut list.
  • Saved views and a business-process filter on Findings; every dashboard measure, chart segment and process bar opens the matching findings.
  • Your place is kept across reloads, and decisions can be undone (Undo bar or Ctrl Z).
  • Palette refined: low risk is now slate rather than green, so risk colours never resemble the brand; tighter corners.

2.5.02026-10-31

  • Dashboard measures defined and kept apart: users analysed, risks in ruleset, risks present, findings (open and mitigated), affected users, decisions and roles — each with a definition on hover or keyboard focus.
  • Severity cards and charts are labelled as open findings; the workflow bar says findings decided.
  • With a single analysis date the trend card shows a snapshot breakdown and explains how to build a trend, instead of a one-point chart.
  • Audit readiness on the dashboard lists every open check with a button that takes you to the exact field or screen to resolve it; the Audit screen has the same Resolve buttons.

2.4.02026-10-31

  • Knowledge base inside the tool: every guide on its own screen, with search; links between articles and the F1 help panel open it directly, and it works offline after the first visit.
  • Clearer usage wording: Exercised means t-codes on both sides were run in the usage period — evidence of activity to prioritise review, not proof that the conflicting activities took place or that a control failed.

2.3.02026-10-31

  • Remediation Studio replaces the ROLESWEEP screen: compare Minimal change, Rebuild from usage, Strict rebuild, your Simulator set and Keep access with controls, side by side with the user’s current access.
  • Business functions: every used t-code is grouped into the activity it serves; functions carrying at least 10% of the user’s activity are marked essential and flagged if a plan disrupts them.
  • Three-step approval (analyst, SAP security review, business owner) bound to a package ID computed from the data, ruleset and plan; approvals lapse when anything changes.
  • Change package for SAP security: SU01 steps in order, expected result, business impact, source-file fingerprints, approvals and verification steps. Export one user or all approved plans.
  • Fixed: removing a composite role now re-assigns the single roles inside it that the user still needs.

2.2.02026-10-31

  • Help on every screen: press F1 or F4 (as in SAP), or the ? next to the title, for what the screen is for, how to use it, what the figures mean and a searchable glossary.
  • Workflow bar on the dashboard: Connect → Analyze → Investigate → Remediate → Prove, with what is still missing at each step.
  • Trace in every finding: user, role, t-code, authorization and function for each side, meeting at the risk.
  • Navigation type refined: real font weights only (no artificial bold), larger labels and the palette’s own colours. Press / to jump to the search box.

2.1.02026-10-31

  • ROLESWEEP · Fix this user: one click from any finding proposes a new role set from your existing roles, built from what the user actually ran (ST03N), with the risks it clears.
  • Business impact: the proposal and the Simulator list every used t-code the change would take away, with run counts, so the business owner can agree it first.
  • Remediation plans: save a proposal, record the business owner’s approval, and find it in the new Remediation plans sheet of the audit pack. Cleared findings move to In remediation.

2.0.02026-10-31

  • New Ledger design: IBM Plex type, a calmer paper-and-ink palette and squared severity markers, so long review sessions are easier on the eyes. Knowledge base added at clearduty.eu/kb.

1.9.12026-10-22

  • First use asks for an account, so every screen and every export carries a named person instead of a placeholder.

1.9.02026-10-22

  • Rules can be switched off as not applicable, with a reason, and are reported as excluded.

1.8.72026-10-22

  • The ClearDuty mark and the main action buttons return to the original green; links, the selected menu item and severity colours are unchanged.

1.8.62026-10-22

  • Type weights set to one scale: headings bold, navigation and labels medium, body text and tables regular, figures bold.

1.8.52026-10-22

  • Menu panel: deeper navy, brighter and crisper labels, darker blue for the selected item.

1.8.42026-10-22

  • One navigation system at every screen size: the grouped sidebar is now the only menu, opening as a drawer from a menu button on smaller screens. The row of tabs is gone.
  • Muzam Consulting shown beside the product name.

1.8.22026-10-22

  • Visual refresh: Inter typeface, softer cards, clearer severity colours (red, orange, blue, green) in light and dark mode, stronger page headers.

1.8.12026-10-22

  • Navigation regrouped into nine sections (Dashboard, SoD analysis, Access analytics, Users & roles, Rules & policies, Mitigation, Reporting, System connections, Settings); screens open as sub-items that expand.
  • System connections is now its own screen, separate from Settings.

1.8.02026-10-22

  • Sign-in and accounts: an administrator creates Admin, Analyst, Reviewer and Viewer accounts; viewers cannot upload, edit or sign off. On the website, Cloudflare Access can handle the sign-in and the tool applies the role mapped to the e-mail address.
  • Setup tab (admins): switch tabs and dashboard sections off for everyone, manage accounts, register SAP systems.
  • System connections: register SAP systems and pull extracts from a ClearDuty Connector running inside your network.

1.7.12026-10-22

  • Excel library upgraded to SheetJS 0.20.3, which fixes a known weakness in older versions when reading crafted files.

1.7.02026-10-22

  • Controlling rule set extended: allocation cycle design vs execution, cost object maintenance vs manual posting, actual costing vs price changes, standard price release vs production close (6 new conflict pairs, 16 catalog entries).
  • Dashboard: severity cards with change since the previous analysis date, conflicts by business process, risk trend across analysis dates, and a tabbed view of top users, risks, roles and processes.
  • Sidebar navigation on wide screens and a global search for users, roles and transactions.
  • Intelligence tab (optional, off by default): priority scores, evidence explanations, role-removal candidates, coverage diagnostics and guided questions, all computed locally. No external AI.
  • Advisory JSON export.
  • Refreshed blue colour theme.

1.6.12026-10-19

  • Publisher details and the SAP trademark notice added at the bottom of the Help tab.

1.6.02026-10-19

  • Transaction catalog of 470 standard SAP transactions across FI, CO, PS, MM, WM, SD, PP, PM, QM, HR, Basis, treasury, FI-CA, IS-U, FM, JVA, RE-FX, EWM and retail, each mapped to an activity.
  • TSTCT upload: your system supplies every transaction code for your release, including new ones from support packages.
  • Unknown codes get a module and role suggestion inferred from SAP naming conventions, marked as inferred.
  • 32 new activities (document change, down payments, bank master, exchange rates, GR/IR, requisition release, RFQ, WM, quotations, capacity, measurement documents, certificates, org management, time approval, security audit, customizing, transports, Basis) and 5 new roles (Basis Administrator, Configuration Expert, Security Auditor, Cashier, Line Manager).
  • The built-in catalog is a separate file on the website, so it can be updated without a new app version.

1.5.02026-10-19

  • Access lookup: type any transaction, Fiori app or plain description (for example "ckmlcp role" or "material ledger") and see the suggested business role, existing roles that grant it, the risks it belongs to and what not to combine it with. Partial codes get "did you mean" suggestions.
  • Fiori app catalog upload and a starter library of common S/4HANA apps.
  • Role designer: find activities by t-code or app name.

1.4.02026-10-18

  • Help centre with a step-by-step SAP extraction guide, plain-language glossary and FAQ.
  • Remediation tracking per finding: status, owner, due date and notes, with filters and an export sheet.
  • Reviewer sign-off tied to the exact results it covers.
  • Workspace backup and restore, so work moves between computers.
  • Works offline after the first visit and updates itself when a new version is published.
  • Management summary sheet in the audit pack.

1.3.02026-10-18

  • Licence keys with evaluation mode.
  • Pseudonymisation of user IDs and role names.
  • Industry packs: 94 business roles for 23 industries.

1.2.02026-10-18

  • Audit tab: run evidence, source completeness, engine tests, GRC reconciliation, change log.
  • Engine: profiles, user master, critical permissions, alternatives, org-level rules, placeholder resolution.

1.1.02026-10-17

  • Role designer with SAP standard business roles.

1.0.02026-10-17

  • First release: findings, roles, simulator, role finder, ruleset, controls, Excel export.
PreviousLicensingNextGlossary

Still stuck? Ask us — we answer within one working day.