esmGUI by Sarnia
Unlock your security potential: administer ACF2, RACF and Top Secret ESMs and unlimited security databases at the same time through a modern, easy-to-use GUI
A lightweight data transportation layer means security managers and administrators are able to manage unlimited security databases, and combine the results into a single report. These table style reports enable changes by overtyping values, generating the appropriate commands for the relevant ESM type, and enabling faster updates and changes.
Executing a single script can report on a bad actor xID across all ESM databases.
- Disablement of malicious actors can be applied within minutes across your enterprise, compared to hours if this is being done manually
- You are provided with comprehensive post-analysis information to ascertain the degree of enterprise penetration.
A modern GUI interface allows for efficient administration consistent across all aspects of the product.
- Advanced filtering of data to focus on specific data through a range of predefined filters to advanced logic-driven filtering
- Editing of data can occur at any time regardless of filtering and sorting, and can be performed over multiple entries simultaneously for efficiency consistency and accuracy
- Exporting of data is as simple as selecting the columns and rows you require and exporting
- Filtering, sorting, and export definitions can be saved per report and automatically applied when a report is created for efficient repetitive processing
- Data can be dynamically viewed via various views such as listing, field compare and matrix to enable efficient analysis without executing the report again
- Reports and generated commands can be saved, shared, or sent for authorisation before further action is taken
Multiple searches can be executed to build a diverse range of targets to include in a single report.
- Searches can be appended to existing search results to identify all targets to be included in a report
- Select entries as desired from the results and a combined report will be executed
- Search for a specified LogonID/UserID/ACID (termed xID) across all ESM databases and produce a combined report
- For example, the xID report above could then have the Contract Date, Disablement Date and Manager Name updated across every instance with a single edit and the appropriate commands generate.
You can easily configure all your ESM databases, allowing simultaneous administration.
- Configure the IP address and port, add system components and the base security profiles, and you’re ready to go
- No user installation is required, you only require access to an up-to-date web browser
- All security processing contained within ESM databases are configurable to your trust levels for various systems such as sandboxes
Advanced functionality
esmGUI by Sarnia is unique in that brings together functionality that is not usually available in ESM administration tools.
- You can compare an unlimited number of xIDs or security definitions and make changes on the comparison report to perform RBAC, standardise access or make compliant
- Dynamic ‘No-Code’ scripting to perform repetitive processing that can be changed dynamically as required and the ability to share corporate scripts
- Data from an ITSM application can be incorporated via CSV or an established interface to ensure accurate data and efficient operation
- ‘Common’ field names can be assigned to varied field names across ESM databases so they are treated the same
- Formats and values for individual fields can be customized to maintain corporate standards by ESM, such as UID ranges, TSO values, etc. and are enforced when edited
- Empty fields over all records are dynamically hidden to reduce report clutter but available if required, such as Group revoke date
- Unused fields per each xID are dynamically hidden to reduce report clutter but can be added with a single click if required, such as unused segments
- Context Editing is used for complex records to provide information on each component and more efficient editing
- Edits to any field can be undone to original value without affecting any other edits
Multi occurrence entries such as groups can be easily cloned, and a new value selected from a dynamically retrieved group list - Systems within current scope is as easy as selecting the systems you desire – and can be changed at any time
- Commands can be made generic and then will be automatically replicated based on matching selected systems, ready for execution
- Custom reports with a specific set of fields can be achieved by selecting just the fields required