SAP GRC Access Control: Rule Set for Critical Permission S_DATASET

[reza_ahoui2]

Hi

We have created critical permission list in our rule set. Does any one recommend monitoring the following authorisations as a Critical Permission?

S_DATASET ACTVT 06 OR S_DATASET ACTVT 34 OR S_DATASET ACTVT A7 OR S_DATASET FILENAME '*' AND S_DATASET PROGRAM '*' AND

Or would this create a case for over-reporting?

Thanks

Reza Ahoui

[madhusap]

Hi Reza,

First thing you have to check is "what is the risk if a user or role has access to S_DATASET authorization object with mentioned values."

Will it be a risk with object alone or will it be a risk with a combination of Tcode? If the risk is only when a Tcode is given together with S_DATASET then you need to configure Critical Action risk and not Critical Permission risk.

Regards,

Madhu