SAP GRC Access Control: Function Permission File

[reza_ahoui2]

Hi

I would like to know more about how to handle the contents of function permission file of a rule set. Here are few question with respect to this:

1- What are the best practices in regards to the function permission file? (e.g. note 1330165)

2- How do AND and OR functions behave?Independently and together.

3- How to interpret the contents of this file?

4- If there is a need to add to the file, what are the main considerations?

etc.

Is there a nice document covering some or all the questions above?

Thanks

Reza

[reza_ahoui2 · Accepted solution]

Kindly refer the below Notes for more details on how to handle AND and OR operators in Function- Permission section of a rule set:

1514544 - Explanation of logic between and within permissions

1330165 - Instructions on how to use Operators AND OR NOT

1905343 - Condition type AND is mandatory for single value fields

1744355 - Permission rules without actions

Reza Ahoui

[vijayakumarsuth]

Hi Reza,

Also it is good idea to download standard delivered ruleset to understand how it is structured particularly with FunctionPermission file, please sort it by ruleid for more clarity