Answer / sridhar

1) Names are changed as below:
RAR ---> Analyze and Manage Risk
SPM ---> Emergency Acces Management
CUP ---> Manage and Provision Users
ERM ---> Business Role management

2) AC, PC and RM are integrated.
3) Completely ABAP based.
4) Works with Web Dynpro Application.
5) You can post REASON CODES after using FF.
6) FF logs review is made as a part of Workflow making it
mandatory and compliant.
7) BRM and BRF+ used to design workflow.
8) Multi Stage Multi Path workflows

Answer / chandu

GRC 5.3

SAP GRC Business object Access control
1.Risk analysis and remediation
2.Super user Privilege Management
3.Compliant User Provisioning
4.Enterprise Role Management
INSTALLATION;
install on java stack
end user access:
any browser(internet explorer )

GRC 10.0
SAP Access Control (from May 2012)
1.access risk analysis
2.emergency access
3.access request management
4.business role management
Installation:
install on ABAP stack
end user access;
through portal browser
futures;
rich setup futures available

Answer / rambabu.a

1)AC 10.0 is based on ABAP box. it is integrated with GRC
PC&RM together.
2)AC 5.3 is using Java box. it is more complex one.
ADVANTAGE:
AC 10.0 is more bug-free and high performence.

How will you mitigate a user against an authorization object which is decided as sensitive by Business

1 Answers   IBM,

---

What are the 5 things you'll do if you have sap system to maintain (Sap securiy)

1 Answers   Accenture, Ernst Young,

---

What is the difference between ECC security and RAR security when GRC (RAR<SPM<CUP) is used, when similar functionality can be performed SAP R3 level(ECC)?

2 Answers   ADP, Baidu,

---

what is workprocess thresholdtime?

1 Answers   Accenture,

---

1.Is it possible to have a request type by which we can change the validity period of a user? If possible, then what are the actions?

2 Answers  

---

SAP R/3, BI, HR, EP Security, GRC AC 5.3, XI/PI Administration www.learnbasis.com

1 Answers   IBM,

---

whats the meaning of relocation in transport request ?

1 Answers   TCS,

---

if user enters a tcode how the system knows what action should be done ?

3 Answers   Deloitte, Pranav Systtech,

---

You want to force a user to change their password. How would you do it?

2 Answers  

---

How do I change the name of master / parent role keeping the name of derived/child role same? I would like to keep the name of derived /child role same and also the profile associated with the child roles.

0 Answers  

---

Hi , Currently i am working in an MNC company as an SAP Security tier1 member , we will take care of User Administration , Profile/authorization administration activities .Could any one tell me , is i am eligible to apply for an SAP Security job for 2 years experience . Could any one tell me about SOD , SOX Audit and Virsa tool , i have never worked before . Prakash

3 Answers   IBM,

---

What does the profile generator do?

0 Answers  

---