Answer / itsgaurav151

The things ECC security and RAR security are different. ECC
is a system whereas RAR is a tool. ECC security involves
securitg data, t-code access, report access and maintaining
the suthorizations. RAR(Risk analysis and Remediation) is a
tool that is used for analysis of risk analysis and its
remeduation as name suggests. Rhis tool determines all
potential risks that arises if a t-code/object/role/auth is
assigned to a user. Also this tool helps to remediate that
risk using mitigation technique.

Answer / rahman shaik

Simply we can say one thing like In Ecc system you cant find any risk while assigning the roles but in RAR tool it will check the RISK of that particular assignment and if risk is their then we can mitigate and simulate to that risk

I mean its purely for SOD(segregation of duties)

How to insert missing authorization?

0 Answers  

---

What is a composite role?

0 Answers  

---

What is use of Licence Data tab in SU01 ? and they have types like CAT-II,CAT-III,CAT-IV what is its use then ? Is there any difference between these ?

5 Answers   Patni,

---

whats the meaning of relocation in transport request ?

1 Answers   TCS,

---

what is temp role and copy role ?

5 Answers   Accenture, TCS,

---

What are the issues will face while creating user in the system ?

8 Answers   Accenture,

---

what is sap security?

1 Answers  

---

what is diff b/w su01 and su10?

5 Answers   IBM,

---

How can assign miising authorizations in BI?

1 Answers   Philips,

---

in which table we can find all authorization groups

5 Answers   Cognizant,

---

Scheduled a job for user master reconciliation , a user is in a validity date and roles assigned to that user are in validity date, but for reasons roles has been removed from the user master record, what could be the reason, this is not related to position based security, could some explain?

2 Answers  

---

what is parameter id and what is user group in su01 ?

3 Answers   Cap Gemini,

---