I have a question:
We have a case that we need to register in RAR risk matrix The J1BTAX transaction (SAP ECC).
I need to add objects: S_TABU_DIS and S_TABU NAM within the same function / risk.
When I add in this way, the risk analysis identifies only cases where there are these two objects: S_TABU_DIS and S_TABU_NAM
But I have other scenarios that should be identified in the risk analysis, such as:
S_TABU_DIS And S_TABU_NAM
S_TABU_DIS only or
Is there any way of registering within the same function (and risk)?
So that the risk analysis validate:
object1 and object2
object1 or object2
is it possible?
This scenario is part of the same risk, did not want to create two risks separating objects.
I know I can use the conditions (AND, OR, NOT) to check, but it works only for fields, not for objects.
I'm using the GRC AC 5.3 - Version: AC-RAR 5.3_21.2