V10 - RA&R Rule set (Transport)

[former_member274402]

Hi,

We have heard that the new rule set in AC canu2019t be transported through the environments (DEV, QAS and PRD) in 10 as itu2019s seen as master data. Does this mean we maintain this in PRD?

Is this true?

Regards, Melvin

[luis_bustamante]

Hi Melvin,

That is not correct. Rules can be transported in IMG -> GRC -> Access Risk Analysis -> SoD Rules -> Transport SoD Rules (or using program GRAC_TRANSPORT_ACCESS_RULES).

Regards,

Luis

[former_member274402]

x

Hi,

I have a question regarding the rule sets. We do continue
changes on our rule sets as business risk services. We have found that we can
transport the rule set through transaction GRAC_RULE_TRANSPORT but have found
that this takes through the complete rule set. We are also aware that these
rules can be uploaded and downloaded directly in production.

My question what is the correct way in doing rule set maintenance
and what will be audit accepted.

Please let me know your feeling around this and any
practical ways you guys implemented will be appreciated.

[neerajmanocha]

Hi Melvin,

I replied to your query in other thread.

In addition to that (also for your this query), you can use program GRAC_COPY_RULES within DEV or QA to copy your rules from one connector to another connector. You can have one Dummy connector (named as same as you have connector in your production server) and copy all the rules into that dummy connector. Once done, you can transport the rules for that dummy connector (which is actually a connector available in production) from DEV to your production server.

By this, you can transport your rules. I am suggesting this because, entire GRC landscape would have different connectors through out the landscape.

Hope this helps.

Thanks & Regards

Neeraj

[Former Member]

We are considering another approach to ruleset transport , this is by making use of logical connectors groups . The idea is to create a logical connector for each physical connector or group of physical connector. The ruleset is always uploaded against a logical connector  in DEV  , transported against a logical connector.

So when it reaches the acceptance or production environment it automatically picks up the right connector assigned to the logical group .

Thanks ,Ranjiv