We have added search box. Key in SAP issue keyword to search
TopBottom

Announcement: wanna exchange links? contact me at sapchatroom@gmail.com.

Re: [sap-security] GRC NWBC - how to tell what transactions can be "completed"

Posted by Admin at
Share this post:
Ma.gnolia DiggIt! Del.icio.us Yahoo Furl Technorati Reddit

Reply from SAPAUSSEC on Apr 7 at 6:13 PM
what is meant by completed?

If the comment is true that the transactions cannot be executed
(assuming that is what is meant by completed) then what use is the role?

Remove the role from the person who made the comment and see what they
can complete?

In any case a role with thousands of transactions should be removed and
proper access built which is approved for the relevant users. How does
this user know which transactions they need, which work etc? These types
of comments are usually made by people who have too much access and do
not want to surrender it.

---------------Original Message---------------
From: pkopack
Sent: Tuesday, April 07, 2015 1:36 PM
Subject: GRC NWBC - how to tell what transactions can be "completed"

In GRC using NWBC I can simulate the impact of changing roles/adding transactions. However, I have one role that has access to thousands of transactions. The explanation is that it's ok because the access doesn't allow the user to "complete" all of those transactions. How can I tell which transactions can be complete vs. those that are just "there".

Thx

 
Reply to this email to post your response.
 
__.____._
Manage Settings | Unsubscribe | Create FAQ | Send Feedback
  
Copyright © 2015 Ziff Davis, LLC. and message author.
Ziff Davis, LLC. 28 E 28th Street New York, NY 10016
SAPAUSSEC  

achievements
 
Mark as helpful
View this online
Ask a new question
 
In the Spotlight
Become a blogger at Toolbox.com and share your expertise with the community. Start today.

_.____.__

0 comments:

Post a Comment

T r a n s l a t e to your language