G2

Filip N.

SAP Security consultant

Mid-Market (51-1000 emp.)

8/4/2026

"Fast, Intuitive SAP authrorization analysis with powerful What-If Insights"

4.5/5

What do you like best about smartGRC?

As a SAP Security & Authorization consultant, I run analyses on client environments without waiting for a full enterprise GRC deployment. Uploading a role catalogue and user assignments as flat files gives me a working SoD, SAT and FUE analysis in one afternoon.

The what-if capability changed how I present recommendations. Instead of "remove this transaction", I show clients the FUE impact instantly - data-driven trade-offs beat opinions every time.

What I use most:

-Bulk role import via XML or file upload

-SoD ruleset with sensible defaults for standard SAP areas

-Risk definitions in business terms - process owners read reports without me translating

The UI is genuinely intuitive, which is rare in the GRC category. Review collected by and hosted on G2.com.

What do you dislike about smartGRC?

The API documentation could be more detailed - I had to reach out to support when integrating smartGRC with a client-side automation pipeline. Mobile experience is also limited (understandable for a GRC tool, but occasionally I need a quick check from my phone during a client meeting). Nothing that blocks day-to-day work, but worth flagging for consultants who juggle multiple client environments in parallel. Review collected by and hosted on G2.com.

What problems is smartGRC solving and how is that benefiting you?

Two main problems it solves for me as a consultant.

Problem 1: Waiting weeks for a full enterprise GRC deployment before I can show a client where their SoD conflicts and FUE risks are. With the cloud version I upload extracts, run analysis, deliver findings within days.

Problem 2: Making outputs usable for clients. Traditional GRC dumps thousand-row Excels; smartGRC structures results by process area with business-term risk names. Process owners read the report and act on it without me translating.

Net benefit: shorter sales cycles for new engagements and higher perceived value on delivery. I can propose paid discovery on real client data, not on generic slides. Review collected by and hosted on G2.com.