Skip to Content
Jul 13, 2018 at 03:26 PM

How to decide which Authorization objects to be activated in the GRC Ruleset



While customizing the Standard Rule set, I added some Standard transactions to a custom Function. Now, While maintaining the Function-Permissions for these t-codes, how to decide which objects and values need to be checked for the respective T-code as there would be many objects Corresponding to these t-codes and not all would be required for Risk Analysis.

I believe, ideally, these objects/Values need to be provided by the respective Functional Teams, but can we decide on the objects/Values without their help?