Landscape for Access Control 5.3

[Former Member]

We are currently installing Access Control 5.3. Our environment consists of the HCM ( Dev, QA and Prod). We have a second environment of ECC for our FI/CO (Dev, QA and Prod). Our question is where do we have Access Control 5.3 reside so we can use it in both environments. I am assuming we can have a Dev and QA landscape of Access Control 5.3 to manage all our environments. What will be our ideal landscape look like. Should Access Control 5.3 reside on a separate box that is linked to each of these boxes.

[Former Member · Accepted solution]

Matt,

My recommendation would be to have at least one staging server (Dev/QA) before Prod for AC 5.3. In simple words, install AC 5.3 on a separate or shared box which connects to your Dev and QA systems and have a separate box for AC 5.3 prod instance which will connect to your prod systems.

This is what SAP also recommends. You don't want to see any issues with prod instance.

Regards,

Alpesh

[Former Member]

Hello Matt,

The ideal Landscape should be as what Alpesh suggested. However, in case there are some constraints for having separate GRC instances for DEV/QA and PRD you can have all of them in a separate box, connecting to each system.

In this case you have to have a very strong policy in place monitoring your Risks and also separate and well defined rule sets for each of the systems.

Regards,

Hersh.

http://www.linkedin.com/in/hersh13