Conclusion:

Simplified user- and permission management through optimization & automation.
Compliance through reporting and conflict checking.
Reducing time for human work through easy-to-understand workflows.

Chapter 1: A Manager’s View

More Value for your company

>	Provisioning
	With ComAdmin you are able to assign digital resources to your user and groups. The definition of resources is done centrally and is valid through your whole enterprise. So, the assignment of permissions is performed following your companies role concept. De-Provisioning: If HR department reports to IT administration that an employee leaves the company, IT administration may very easy and in short time revoke all permissions without removing the user account by itself.
>	Security & compliance
	Features like User Self Service and Auditing & Logging may reduce certain security risks i.e. that an employee has more permissions than allowed. The reporting feature and Conflict Checker ensures that you do not run in a situation you do not know what’s going on in your enterprise. All actions are tracked for compliance and your security manager can get a report just-in-time.
>	Company Chart & IT-Infrastructure
	With ComAdmin you can “bridge” the lag between IT-structure and your business structure. Easily you may use the “HR-departments view” or the “Sales-departments view” to company’s structure and see which permissions employees have – independent from the “IT-departments” view to IT-infrastructure.
>	Cost Reduction
	The automation of administrative tasks will make life much easier for different departments. Granting, Revoking and documentation of permissions will need significant less time.

More Value for your administrators and helpdesk

>	User Permission request management
	See chapter 2

More Value for your employees

>	User Permissions
	Your employees are assigned to defined roles with pre-configured permissions.
>	User Self service
	If a user needs to have more access to resources he can ask for this very easy using a webpage. The request can be confirmed by defined responsible persons. After confirmation the administrator only needs to “click” and the resources are accessible for this user.

Chapter 2: A Technical View

>	Simplified Active Directory group & permission management
	Your status quo: Usually an administrator needs several and time-consuming steps to assign permissions for granting users access to a certain resource. He has to know company’s nomenclature, the local & global group concept etc. Confusing may be also granting permissions from the resources point of view and not from Active Directory user objects point of view.
	Your advantage with ComAdmin: With ComAdmin he performs these tasks in some seconds. Local and global groups will be built automatically – following enterprise nomenclature. Permissions are configured at the user or group level not at resource!
>	User Permission request management
	Your status quo: There is no built-in module in Windows, how users can request access to resources, how and by whom it will be confirmed and so on . . . l
	Your advantage with ComAdmin: User may request access to certain resources by Web. The request has to be confirmed by a defined workflow following your enterprise rules and comes back to helpdesk.
>	Simplified helpdesk management
	Your status quo: Users ask per document or phone calls to get permissions. Helpdesk does not know if he is allowed to grant permissions – he asks the responsible. Then has to perform all technical tasks manually.
	Your advantage with ComAdmin: Users can request permissions automatically by filling in a web form of ComAdmin website “permission request”. After requesting an automated document is generated with all necessary signature fields for requested permissions. Helpdesk can easily proof the document and grant the required permissions automatically.
>	Object nomenclature automated
	Your status quo: There is no build-in feature in Active Directory to enforce your object nomenclature model.
	Your advantage with ComAdmin: With ComAdmin you configure general settings for your object nomenclature (groups, objects) and these settings are enforced automatically.
>	Administration following company’s organizational model
	Your status quo: Usually your organizational model is not reflected by the OU- or role structure in Active directory (following Microsoft’s recommendation).
	Your advantage with ComAdmin: ComAdmin reflects your enterprise organization chart, so you get a simple view to your role concept.
>	Active Directory modification auditing and logging
	Your status quo: You never know who created or modified roles and permissions.
	Your advantage with ComAdmin: ComAdmin audits exactly what changes were made to roles and permissions enterprise wide, when and by whom. So you have a historical view to all changes.
>	Conflict checking
	Your status quo: Usually there is no build-in mechanism checking if your enterprise permission concept is enforced.
	Your advantage with ComAdmin: ComAdmin audits exactly what changes were made. If it detects any conflict between the actual permissions and configured permission concept, you will be notified and prompted for a solution.
>	Active Directory Permission Reporting
	Your status quo: Without 3^rd-party tools you are not able to view and document users access permissions to resources in a acceptable time and readable manner. If compliance asks you the simple question: who is allowed to do what? – what’s your answer?
	Your advantage with ComAdmin: ComAdmin centrally audits security settings from Active Directory and Windows file servers across your enterprise. All modifications are stored – and you will be able to create reports on “what is user X allowed to access” – and why is he allowed to do this (i.e. because of membership in certain groups) – and who permitted this? ComAdmin provides a comprehensive reporting and auditing solution for corporate data stored on a file share. You may easily run just-in-time reports with all required security information.
>	Regulatory Compliance
	Your status quo: Built-in features will not give you really the chance to enforce your regulatory compliance.
	Your advantage with ComAdmin: ComAdmin reviews the key industry and government security regulations that IT managers need to address. By comparing your enterprise permission concept with the real granted permissions you may validate the assigned security and any discrepancies will be found during an audit. Also you are able re-assess all the security configuration to fulfill the requirements. With ComAdmin you are able to monitor, publish and troubleshoot conflicts in a user-friendly way.