Change in Access Control components on the Service Marketplace

[Former Member]

Hello GRC community:

We would like to inform you that as of yesterday (5/30) the Access Control components for support messages/SAP Notes have been changed (they have actually been replaced so all messages/notes logged under the old component will be moved/replaced to the new).

The main 4 components are now:

New: GRC-SAC-ARA Access Risk Management

Old: GRC-SAC-SCC Risk Analysis & Remediation (formerly Compliance Calibrator)

New: GRC-SAC-ARQ Access Request

Old: GRC-SAC-SAE Compliant User Provisoning (formerly Virsa Access Enforcer)

New: GRC-SAC-EAM Emergency Access Management

Old: GRC-SAC-SFF Superuser Privilege Management (formerly Virsa Firefighter)

New: GRC-SAC-BRM Business Role Management

Old: GRC-SAC-SRE Enterprise Role Management (formerly Virsa Role Expert)

There are also NEW components specific to areas of functionality. If you are not sure of what component to log your message under, please use the main components above.

GRC-SAC-ADS Directory Services

GRC-SAC-BI Access Control BW

GRC-SAC-CONF Configuration

GRC-SAC-DAS Dashboard

GRC-SAC-REP Repository

GRC-SAC-RPT Reporting

GRC-SAC-UAR User Access Review

GRC-SAC-UPG Installation & Upgrade

GRC-SAC-WF Workflow

Ramelyn Paredes

AGS Primary Support

[Former Member]

Hello COmmunity,

To Summarise in Short: New features introduced to V10.0 : GRC 10.0 is ABAP based, so extraction of data from users is fast & analysis as well.

As usual, the names for the Access control tool has been changed

A. Access Risk Analysis (RAR)

1. USOBT & object information will be automatically updated with GRC rather than manual upload (earlier version)

2. Mass Users can be imported from .CSV file for risk analysis, Role analysis etc.,

3. Variant creation / reuse for any report analysis

4. Option of having multiple rule sets & simulating users across multiple rule sets at same time

5. Risk analysis for CUA, Composite roles

6. Mitigation by system, risk id, mass mitigation for users, audit trail etc.,

7. Risk analysis for HR objects

B. Emergency Access Management (SPM)

1. Mass reporting for all FF users, Ids, Executions

2. Centrally maintained for all systems rather than individual ERPs.

C. User Access Management (CUP)

1. Customizable Access request forms

2. HR based role assignment for position, org unit

3. IDM integration using GRC Web services

D. Business Role Management (ERM)

1. Concept of Business role mapping for Technical roles.

2. Audit Trails & PFCG Change history.

Finally, the look, reporting format has been changed to provide additional information for analysis.

More important - GRC V5.3 support is till 2015 & SAP has planned to push the customers to upgrade to 10.0. Eventually SAP is also planning to release GRC 11.0 by mid next year. So we have to wait & watch the show