Change Management & Change Transport Process in GRC AC RAR

[Former Member]

With RAR not being able to leverage the SAP ABAP Change Management Process (CTS) what is the best practise for controlling the changes for RAR rule set ?

How do we acheive job segregation from

1. Making Changes to Rules in Dev RAR

2. Transporting (Importing) them to RAR Prod

How do we make sure the 'Import Rules' functionality is restricted. ? (Can we remove Action 'ImportRules' from all the roles and restrict that to one role & restrict the administrator from making role assignments directly in RAR (Only from CUP) )

Thanks

[Former Member]

Hi Prashanth,

You can restrict the access by removing the action ImportRules from the customized role that you can create in UME for RAR.

Thanks,

Darshan