Access Controls: Trigger alert when profile SAP_ALL is assigned to a user

[Former Member]

I wonder if it is possible in Access Control 10.1 to trigger an alert if the critical Profile SAP_ALL is assigned to a user and notify a monitor. In report

GRAC_ALERT_GENERATION it is not possible to select critical profiles. Any ideas ?

Thanks !

Regards,

Max

[Former Member · Accepted solution]

Hi Maximilian,

As per your requirement, i can suggest 2 way to achieve requirement

1. Please create alert for Risk ID B019 Maintaining roles or profiles and assigning roles to users

2. Implement GRC process control with data source as UST04 with profile name as sap_all

Thanks

Amit Nanaware

[Former Member]

Hi Amit,

sorry for my late reply. Unfortunately process control is not an Option here.

But thank you for the hint regaring Risk ID which I could have thought of by myself.

Tcode = SU01

ACTVT = 22

PROFILE = SAP_ALL

Regards,

Max

[Former Member]

Alert generation doesn't work on authority object level, just on T-Code Level. So I get an alarm anytime someone runs su01.... So this topic is still not solved