GRC 10.1 AC- RAR- Ruleset cross client?

[Naveen01]

Hi ,

My query: Are GRC rulesets cross client?

i.e I have connector grp G1- pointing to ECC dev system CLNT 200

where I uploaded my custom ruleset to G1.

Now i have a scenario that i need to chnage development client to 100 for Role management.

But - still my ruleset was uploaded in connector for CLNT200....now on performing role level risk analysis will the result work?

its difficult- when we need to decide connectors/connector grp for ruleset upload!!

I assume - i need to add the new connector to connector grp G1/or upload ruleset again for new connector?

Any help appreciated

Best regards,

Naveen

[AndrzejP]

Hello,

yes there is an option to create cross-client ruleset, more information here: http://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=279577142

but in your scenario, I think it would be sufficient to add CLNT100 connector to group G1, upload & generate the rules, then choose client 100 as default for role management / risk analysis in G1.

Please let me know if it helped.

Best regards, Andrzej

[former_member339174]

No GRC Rule set is a master data and it is not cross client, you need upload rule set manually to DEV then transport to other Clients (QUALITY and PROD).

You can Upload rule set again to the new connector GRP.

[Former Member]

Hi Naveen,

the best practice is to map the rule set to connector groups, and map the connectors to the connector groups, this way your rule set will work for all connectors on the connector group. This is done on the initial customizing when defining the connectors.

Hope this answers your question.

Kind regards,

NJ

[Naveen01]

Thanks for your reply NJ!

Well i don't think practically one connector group will be sufficient (if we are using most of GRC components- ARA, RM,CUP and SPM).

Reason- we need to maintain default connector for every connector group, my default connector may be different per GRC components. e.g. my connector for RM should point to DEV system ...different from one for CUP/ARA.

So definitely one group shoudln't be a solution in case we utilize multiple GRC components. I noticed,even SAP provides Global rule set for via multiple connector grp.

I am not sure- if you are using multiple GRC components in your landscape!

Best regards,

Naveen