No, you don't have to. When you run the permission level analysis, it performs action level analysis as well as permission gives analysis at auth object level. If you do only action level analysis then RAR won't perform permission level analysis.
To add some more detail, "Permission Level Analysis" will find all your permission and action level risks, while "Action Level Analysis" will only look at action level, most likely giving you TONS of false positives.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.