GRC repository

[Former Member]

Where can I find the CC's repository? I mean that I want to get the SoD's rule.

[Former Member]

Hello Zeng,

You need CC Rules for which version 4.0 or 5.X.

If 4.0, then you need to contact SAP GRC support.

If 5.x, then these Rule files are attached with every support pack of CC 5.X (UNCAR the SAR )

Regards,

Surpreet Bal

[Former Member]

Sorry Zeng, but risk files come separately. The example you mentioned comes after uploading rule files.

Here is the hierarchy to create rules:

Rule set is container for your rules.

Business processes contain definition of risk.

Risk is made up from the combination of function.

Function contains action and permission.

Conflict between action and/or permission creates a risk.

The rules you see are made up from all the .txt files contained in that .zip file.

Regards,

Alpesh

[Former Member]

Hi Zeng,

You won't be able to find standard rule set anywhere else other than on Service marketplace. The ruleset basically gets delivered with the installation package. Once you down the java installation package, the .sar file with contain a .zip file which will contain all the rule set data.

Regards,

Alpesh

[Former Member]

Alpesh,

Thanks for your reply.

I found the 5.3_download_files.zip file, and there a lot of *.txt files in it.But I don't think this is the SoD rule's file.

GRC check a risk on User Analysis at Permission Level:

Conflicting Actions | Risk Description | Level | Business Process

-

---

OBR1&CMOD | B00103A01 | Medium | Basis

This means that OBR1&CMOD bond together will be a risk. But I cound find the definition in the *.txt file .

Evan Du