This website is not affiliated with, sponsored by, or approved by SAP AG.

GRC Risk analysis Including custom transactions in sox check

SAP Security

Moderators: Snowy, thx4allthefish, jurjen

GRC Risk analysis Including custom transactions in sox check

Postby Jaydhruv » Thu Oct 27, 2011 6:39 am

I am trying to include some custom transactions within GRC Risk analysis configuration.

1.) Selected a custom transaction Zcustmddata
2.) Added relevant SU24 objects for the transaction and also it mimics SU01. so that it belongs to security user management family
3.) created a user "testuser". Assigned him this custom transaction and also PFCG.
4.) Updated GRC function for user assignments with this custom transaction. hence transaction is now part of user assignment.
5.) updated all the rules so that rulesets reflect the change.
6.) Now when i run a sox check on the testuser it should flag a risk R1 between PFCG and ZCustmddata.
For some reason it does not.

Any suggestions are welcome.
Swim monkey
Jaydhruv
 
Posts: 45
Joined: Thu Jun 26, 2003 2:12 am
Location: Florida, USA

Re: GRC Risk analysis Including custom transactions in sox check

Postby AlainR2000 » Mon Jan 16, 2012 1:36 pm

Have you regenerated your customized risk ? If so, have you carefully checked your logic value AND / OR on the permission tab of the function ?
AlainR2000
 
Posts: 21
Joined: Wed Mar 29, 2006 9:36 am


Return to SAP Security

Who is online

Users browsing this forum: No registered users and 5 guests





loading...


This website is not affiliated with, sponsored by, or approved by SAP AG.