The BHOLD Admin maintains an up-to-date administration of users’ authorizations to information capital.

The BHOLD Admin is the core product group of the BHOLD Enterprise Authorization Management (BHOLD EAM) solution designed for Security Administrators to manage authorizations in accordance with rules and policies.

Roles and Rules
Roles are the foundation of the BHOLD Admin. The Administration makes use of the widely considered best and most proven RBAC Model in the world.

Roles and users are grouped in units. Users may occur in many units at the same time (projects, business processes or cost centers). Specific roles are made available to specific units, project roles occur in projects, business roles in business processes.

In the process of allocating roles to users, the BHOLD Administration ensures that rules such as Segregation of Duty (SoD) and time constraints are preventively enforced.

Inward Access Control
Access to the BHOLD Administration itself is subject to its own Role Based Access Control mechanism enabling control over fine grained role based access exactly meeting the specific needs of specific users like Security Administrators, Application Managers, Project managers or Auditors

 

Each of the BHOLD Governance products works as a webservice on top of the BHOLD Security Administration. Approval and attestation requirements are enforced through role based templates that use the BHOLD Administration as a reference to determine who has the role at the moment of request that is required to approve or attest.

Each service can be accessed by any standard browser. Using or managing the Governance products requires modeling – no programming.

The BHOLD Auditor capability can be used in an off-line mode and is a standard feature of any BHOLD Connector.

The BHOLD Governance products can be deployed as an integral part of the BHOLD Administration and require no specific platform extensions.