No more typing reviews! Try our Samantha, our new voice AI agent.

Idira Privileged Access Manager vs SAP Access Control comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Idira Privileged Access Man...
Average Rating
8.6
Reviews Sentiment
6.8
Number of Reviews
230
Ranking in other categories
User Activity Monitoring (1st), Enterprise Password Managers (2nd), Privileged Access Management (PAM) (1st), Mainframe Security (1st), Operational Technology (OT) Security (3rd)
SAP Access Control
Average Rating
7.6
Reviews Sentiment
3.5
Number of Reviews
2
Ranking in other categories
Access Management (21st)
 

Featured Reviews

Atul-Gujar - PeerSpot reviewer
CyberArk manager at a comms service provider with 10,001+ employees
Secures critical infrastructures with essential user session audit records
A potential area for improvement is enhancing support for cluster environments and distributed Vaults. Clients in multiple countries that need central access have different challenges that require better solutions from CyberArk. For financial services, CyberArk can improve incident response by ensuring fast support for critical priority tickets to meet compliance requirements. Providing more documentation on CyberArk is recommended for new team members to enhance their troubleshooting capabilities. I understand it's up to the client, but 99% fail to change the demo key, so it's crucial for CyberArk to emphasize changing the key and documenting it as part of the installation process.
reviewer2129061 - PeerSpot reviewer
Sap Its Workstream Manager at a energy/utilities company with 10,001+ employees
Centralized access control has improved risk detection and streamlined multi-system user provisioning
Having one tool to populate many systems for one user is one of the most beneficial aspects of the product, along with the audit part. When using Firefighter, we could have information about what a user modified or did in production because we sometimes have to use an SU01 transaction, so in that case, we use Firefighter. The main benefit for me is that it is a global system to manage the user in many systems, and also the assessment of risk with GRC. We are using Access Request to onboard people. I see some potential improvements for stability because sometimes we do not know why the approval workflow of GRC stops in the middle. When we have a look in GRC, we see that the validation is finished, but that is not the case. Sometimes, we have to check and relaunch GRC. It helps in risk detection. The benefits of SAP Access Control's user permissions management are measured through the reports in GRC. Time savings are obvious. In one request, we are able to create a user in a different system, so it is a time saving. It is a money saving as well because the access manager spends less time creating a user in a different system.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The AI capabilities, including advanced threat detection features, are very helpful for us. They reduce human effort and errors, allowing us to quickly identify and respond to threats."
"The most valuable aspects of the solution include password management and Rest API retrieval of vaulted credentials."
"Users were removed from local administrators group on all desktop endpoints providing a more secure computing environment, allowing only those programs approved to run securely."
"The product has allowed us to improve both the management and access to privileged credentials, while also creating a full audit trail of all activities happening within isolated sessions of all tasks and activities taking place within the solution."
"The most valuable feature is that it is flexible. It has many connectors. that have done well, the EPV and SSH sessions are all being recorded and everything works fine."
"BeyondTrust and ARCOS were introduced in market at that time; these tools are good but do not seem to be as user friendly as CyberArk PAM, which is more convenient in installing and deployment and easier to customize as per client requirement."
"I have used other privileged account management tools in the past; this, by far, outranks them as far as features and usability."
"The product is an important security measure against credential theft. It ensures session isolation and password rotation including pushing passwords to the endpoints."
"It is an SAP product, so it integrates very well with other SAP products."
"Having one tool to populate many systems for one user is one of the most beneficial aspects of the product, along with the audit part."
 

Cons

"The DNA scan should be able to scan Unix machines for privileged accounts."
"it manages creds based on Organizational Units. That is, a "safe" is limited to specific OUs. That makes for very elaborate OU structure, or you risk exposing too many devices by putting most of them in fewer OUs."
"From what I can see, the Systems Integrator is useless. When I ask for the information, nothing is given to me."
"The downside is that it's a big program. To scale excessively, locally, on an on-prem application, takes a lot of servers."
"We need a bit more education for our user community because they are not using it to its capabilities."
"Tech support staff can be more proactive."
"The solution is very expensive and requires a license."
"It is complicated to deploy for Windows servers compared to other vendors."
"Because it took time to get advice on a tricky issue, the support from SAP could be better."
"It would be better if we could also manage other systems with it. Currently, you have to purchase plugins for it to work with other non-SAP systems. It would be good if there is an easy way to integrate SAP Access Control with other non-SAP systems."
 

Pricing and Cost Advice

"The solution is very expensive and requires a license. We pay for an enterprise license."
"It's an affordable platform."
"Licensing fees are paid on a yearly basis."
"It costs us around $200 per user."
"I'm a technician so I don't handle the licensing for CyberArk Privileged Access Manager, but I know that the price for the core license is about €140 per year. There's another type of license, the external vendor license, and that's about €600 and you can manage twenty devices. From what I know, the price for one device in a subscription is about €65 per year. You can buy the CyberArk Endpoint Privilege Manager too, or you can buy some other application or application license with CyberArk Privileged Access Manager, but all other features, such as the Analytics Server is included in the basic CyberArk license. With WALLIX, you need to buy separate licenses for the features."
"It is not a cheap solution. It is expensive as compared with other solutions. However, it is one of the best solutions in their domain."
"The price of CyberArk support could be a little bit less. Otherwise, pricing is fine."
"CyberArk Privileged Access Manager is more expensive than its competitors, such as BeyondTrust, Delinea, and ManageEngine PAM360."
"It is a part of our package with SAP. There is no extra cost in addition to the license."
report
Use our free recommendation engine to learn which Access Management solutions are best for your needs.
908,800 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
12%
Manufacturing Company
10%
Outsourcing Company
9%
Construction Company
7%
No data available
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business59
Midsize Enterprise42
Large Enterprise175
No data available
 

Questions from the Community

How does Sailpoint IdentityIQ compare with CyberArk PAM?
We evaluated Sailpoint IdentityIQ before ultimately choosing CyberArk. Sailpoint Identity Platform is a solution to manage risks in cloud enterprise environments. It automates and streamlines the m...
What is your experience regarding pricing and costs for CyberArk Privileged Access Manager?
My thoughts on the pricing of CyberArk Privileged Access Manager depend entirely on the vendors' requirements. If they want their things to be secure, they have to spend accordingly. We have four t...
What needs improvement with CyberArk Privileged Access Manager?
I believe account discovery and rolling support need to be improved. Account discovery is important when integrating with other systems, as other PAM solutions can perform account discovery and onb...
What needs improvement with SAP Access Control?
SAP Access Control is quite complex. The complexity arises because we need a GRC specialist to set up the connection between GRC and the other system. We also spend time doing some specific configu...
What is your primary use case for SAP Access Control?
The major use case for SAP Access Control is to create an end-user account, and the second purpose is to check the Separation of Duties risk and the risk on our roles and authorizations. Having one...
What advice do you have for others considering SAP Access Control?
We do work with some other SAP products. We are using SAP Access Control with the GRC Access Control product. We are also using the module for Separation of Duties and the Firefighter module. It is...
 

Also Known As

CyberArk Privileged Access Security, CyberArk Enterprise Password Vault
No data available
 

Overview

 

Sample Customers

Rockwell Automation
Information Not Available
Find out what your peers are saying about Microsoft, Okta, Cisco and others in Access Management. Updated: July 2026.
908,800 professionals have used our research since 2012.