RoleGraph: Dynamic SoD, Least-Privilege, and Micro-Segmentation for ERP
9/10
Demand Score
Auditors cite SoD breaches and over-provisioning; attackers exploit flat networks and powerful service accounts to pivot.
8/10
Blue Ocean
Competition Level
$4k-30k
Price/Month
Predicted customer spend
12 days
Time to MVP
Difficulty: Hard
The Problem
A unified access and traffic graph for SAP ERPs that correlates users, roles, Fiori apps, tcodes, objects, RFCs, and east-west flows. It flags SoD conflicts, proposes role refactoring, enforces just-i
🔗 Validated by Real User Complaints
This problem has been verified through 5 real user complaints:
Discussion about RoleGraph: Dynamic SoD, Least-Privilege, and Micro
www.reddit.com
Discussion about RoleGraph: Dynamic SoD, Least-Privilege, and Micro
www.reddit.com
Discussion about RoleGraph: Dynamic SoD, Least-Privilege, and Micro
www.reddit.com
Discussion about RoleGraph: Dynamic SoD, Least-Privilege, and Micro
community.sap.com
Discussion about RoleGraph: Dynamic SoD, Least-Privilege, and Micro
community.illumio.com
Competitor Landscape
- Pathlock
- SAP GRC Access Control
- SailPoint
- Illumio
- Zscaler
Must-Have Features for MVP
Role/object/tcode/Fiori graph ingestion
Automated SoD analysis and refactoring proposals
JIT elevation with time-bound entitlements
MS Teams/Slack approval workflows
Micro-segmentation policy generator for SAP tiers and RFCs
RFC Gateway allowlist manager
Service-account rotation and usage anomaly detection
Elevated-session watermarking/recording
What-if simulator and dry-run mode
⚠️ Potential Challenges
- Political resistance to role cleanups
- Performance and UX impact of JIT controls
- Privacy considerations for session recording
- Coordinating identity and network teams
Risk Level: High
🎯 Keys to Success
- Measurable reduction in SoD conflicts within 60 days
- Minimal disruption to critical processes
- Fast approvals and audit-ready evidence
- Tight integration with SAP and network platforms
Ready to Build This?
This hard-difficulty project could be your next micro-SaaS success.