Skip to Content
avatar image
Former Member

Access Controls: Trigger alert when profile SAP_ALL is assigned to a user

I wonder if it is possible in Access Control 10.1 to trigger an alert if the critical Profile SAP_ALL is assigned to a user and notify a monitor. In report

GRAC_ALERT_GENERATION it is not possible to select critical profiles. Any ideas ?

Thanks !

Regards,

Max

Add comment
10|10000 characters needed characters exceeded

  • Get RSS Feed

2 Answers

  • Best Answer
    avatar image
    Former Member
    Feb 07, 2017 at 01:25 PM

    Hi Maximilian,

    As per your requirement, i can suggest 2 way to achieve requirement

    1. Please create alert for Risk ID B019 Maintaining roles or profiles and assigning roles to users

    2. Implement GRC process control with data source as UST04 with profile name as sap_all

    Thanks

    Amit Nanaware

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Feb 14, 2017 at 06:53 AM

    Hi Amit,

    sorry for my late reply. Unfortunately process control is not an Option here.

    But thank you for the hint regaring Risk ID which I could have thought of by myself.

    Tcode = SU01

    ACTVT = 22

    PROFILE = SAP_ALL

    Regards,

    Max

    Add comment
    10|10000 characters needed characters exceeded

    • Former Member

      Alert generation doesn't work on authority object level, just on T-Code Level. So I get an alarm anytime someone runs su01.... So this topic is still not solved