Answer / itsgaurav151

The things ECC security and RAR security are different. ECC
is a system whereas RAR is a tool. ECC security involves
securitg data, t-code access, report access and maintaining
the suthorizations. RAR(Risk analysis and Remediation) is a
tool that is used for analysis of risk analysis and its
remeduation as name suggests. Rhis tool determines all
potential risks that arises if a t-code/object/role/auth is
assigned to a user. Also this tool helps to remediate that
risk using mitigation technique.

Answer / rahman shaik

Simply we can say one thing like In Ecc system you cant find any risk while assigning the roles but in RAR tool it will check the RISK of that particular assignment and if risk is their then we can mitigate and simulate to that risk

I mean its purely for SOD(segregation of duties)

Does s_tabu_dis org level values in a master role gets reflected in the child role?

1 Answers  

---

As a SAP security consultant what is the most challenged you faced in previous company?

0 Answers  

---

How to create user in SAP without giving LASTNAME and INITIAL PASSWORD ?

2 Answers   Accenture,

---

What is the difference between user group in logon data tab and groups tab

2 Answers  

---

The system raised a message that authorizations are missing but you have SAP-ALL. What would you do?

3 Answers  

---

what is the profile

3 Answers  

---

What appears as the last sentence in sap note 587410?

0 Answers  

---

What is the use of RSECADMIN ?

1 Answers  

---

how to get ticket from end user?

5 Answers   Accenture,

---

hi , can any one say what is the exact use of SNC TAB IN SU01,IF IT IS EXTERNAL SECURITY PURPOSE ,WHAT KIND OF SECURITY PURPOSE?

2 Answers  

---

how to do Restricting nodes and Hierarchies through characteristic values and authorization objects

0 Answers   IBM,

---

1.why we use derived role in sap security?2.what is the technical difference between master and derived role?

1 Answers   KPMG,

---