RAR 5.3 - Organisation Level grouping

[Former Member]

Hi All,

I am currently running an project to setup a new Restricted Transaction ruleset, the business require the results to be grouped together by Organisational Level, for example:

If a user has access to VK11 they want to know the Sales Org (VKORG) value also, however they do not want to see the value but what the underlying Company Code this is used for (Value 2010 = GB01 and 2060 = GB02 etc)

So what they are after is something that looks like:

Joe Black has VK11 access to GB01 and GB02 rather than Joe Black has access VK11 with value 2010 and 2060.

Without building 100's of single Functions with one transaction and org value within is there another way around this?

I have read some documentation around Organizational Rules but this states that Org Level rules are not designed to be used to group org levels together for Management reports.

Does anyone have any ideas?

Kind Regards

Andrew

[Former Member]

Hi Andrew,

This depends on whether you treat specific org values as risks or if you just want to know what people have.

RAR is designed to specify the rules around access and not just to run analysis on who has what.

If you have specific company codes which are particularly high risk, then specify them as such in the ruleset and you can then make use of the Org rule functionality if needed.

If you want to know who has access to a specific list of org level values then you may find that running reports from SUIM or against AGR_1252 may yeild better results.

Simon