Method
Rules first, AI second.
The engine calculates effective permissions, tests documented conflict pairs, evaluates privileged and stale access, and scores each result. The AI layer receives only the selected finding and its evidence.
Live enterprise access lab
Portfolio updated regularly
AccessGraph AI
See access risk before it becomes an incident.
An explainable IAM and segregation-of-duties lab that maps identities to roles and systems, detects risky access combinations, and lets reviewers test remediation safely.
Rule-based checks
Findings come from testable permission and account-lifecycle checks.
Fictional test data
The lab contains no customer, employee, or production information.
Explainable AI
AI translates evidence into plain language but cannot create findings.
Identities
7
Role catalog
12
Privileged users
4
Critical risks
4
High risks
4
Analyze an identity export
Import up to 100 identities using the documented role IDs. Validation and analysis run locally in your browser; the CSV is not uploaded.
Enterprise access map
Select a cyan identity node to inspect its effective access.
IdentityRolePrivilegedSystemRisk path
Risk findings
Rules produce the findings; AI only explains the selected evidence.
Session audit trail
Baseline scenario loaded. Findings recalculate automatically.
- Baseline demo scenario loaded
About this lab
A learning lab, not a compliance product.
This lab uses fictional names and simplified checks based on IAM, least-privilege, and SAP Access Control concepts. It is not an SAP-certified product or a substitute for a formal access review.