Testing authorizations

The auditing in the company requires access to the IT systems to be checked by random sampling at regular intervals. User master records are determined from the central SAP system and Windows Active Directory and compared with the corresponding application (paper form with correct signatures) for the authorizations listed there.  The project comprises defining the procedure, performing the random samples, and documenting the results with the appropriate remark. In order to check the user master records from SAP, the change log of the authorizations over a certain time period is exported as an MS Excel file. The Windows Active Directory is queried using Windows PowerShell.