Skip to Content
0
Former Member
Jan 24, 2014 at 03:53 PM

SAP VIRSA SOD Issue

47 Views

Hi,

We have one strange issue in VIRSA SOD Analysis - Risk mitigated at role level are still showing at user level analysis.


Parameter - Include Role/Profile Mitigation Control in user Analysis = YES


Scenario 1 : User1 is assigned with only one Composite role. Risks under this composite role 1 are Mitigated at role level. when we run SOD at user level it (with ticking Excluding Mitigation Control Risks ) it shows no Risk found


Scenario 2: user1 now assigned with another composite role 2 ( This has very common roles and it do not have any risks) , when we run SOD at user level (with ticking Excluding Mitigation Control Risks ) it shows Risks of Composite role 1.


can anyone help me in scenario 2 - why it is showing risks which are already mitigated at role level after assigning another composite role ?


Regards,

Satyajit

Attachments

Virsa 2.png (144.3 kB)
VIrsa 1.png (38.6 kB)