What is the difference between ECC security and RAR security
when GRC (RAR<SPM<CUP) is used, when similar functionality can
be performed SAP R3 level(ECC)?
Answers were Sorted based on User's Feedback
Answer / itsgaurav151
The things ECC security and RAR security are different. ECC
is a system whereas RAR is a tool. ECC security involves
securitg data, t-code access, report access and maintaining
the suthorizations. RAR(Risk analysis and Remediation) is a
tool that is used for analysis of risk analysis and its
remeduation as name suggests. Rhis tool determines all
potential risks that arises if a t-code/object/role/auth is
assigned to a user. Also this tool helps to remediate that
risk using mitigation technique.
Is This Answer Correct ? | 6 Yes | 1 No |
Answer / rahman shaik
Simply we can say one thing like In Ecc system you cant find any risk while assigning the roles but in RAR tool it will check the RISK of that particular assignment and if risk is their then we can mitigate and simulate to that risk
I mean its purely for SOD(segregation of duties)
Is This Answer Correct ? | 4 Yes | 0 No |
Can any one tell me briefly , what is the roles and responsibilities of SAP BASIS Security Administrator..
How to find list of authorization objects which having org fields?
A person has different user ids in different systems and you want to manage their authorizations centrally. Is it possible? How would you do it?
What are the issues will face while creating user in the system ?
Userdone tasks with ffid n system send log reports to controller in his work inbox but whenever its open its showing blank screen, why?
what is use of derived roles and where it is used?
where v creat auth group
what is user buffer?
What happens to change documents when they are transported to the production system?
what is difference between se16N and sm31?
Attributes in SE01?
explain the personalization tab within a role?