Grc ac fiori risk analysis

[former_member652980]

Hello Gurus,

You all know that we are having risk anaylsis at tcode and object level.

But how do we do that in S4 HANA scenario where TCODES ARE REPLACED BY APPS AND OBJECTS BY S_SERVICE.

BELOW FEW QUESTIONS I HAVE

1.How do we include fiori apps in GRC RISK ANALYSIS ?

2. On what base any two apps conflict ? Is it all sevices, catalogs, groups or any just anyone among them.

Thanks

Salman

[Monsores]

Hi Salman.

Basically you need to prefix Fiori apps with [FAPP] and oData services with [SVC] in your ruleset, as it was already done with [WDY] for Web Dynpro applications, for example.

For some examples (and maybe a starting point), please take a look at GRAC_RA_RULESET_S4HANA_ALL BC Set.

Additionally, SAP Note 2655122 has more details about these action prefixes.

Regards,

Marcelo Monsores