on 11-09-2009 6:43 PM
Hello,
Can anyone share your thoughts or experience on the SAP GRC AC suite landscape?
How many SAP GRC systems required in SAP landscape from initial development to production?
1. I am assuming that we can have one GRC AC system when implementing all the 4 AC components, and once the implementation is completed we can have another SAP GRC system from go-live onwards. Am I correct? Are there any best practices available on SAP GRC components landscape?
Or
2. Is it a reliable solution having only one GRC AC system in complete SAP landscape?
Thanks in advance.
-Harry
Hi,
1. Whatever you said is correct , But Normally many of them fallow 2 tier architecture in GRC Landscape. We will connect GRC DEV system to ECC DEV and ECC QA and test all the scenario's then we will move GRC Configurations to production and By connecting to ECC production,support phase works.Please see below link for landscape diagram.
[SLD|
Regards,
Joseph
Edited by: joseph reddy on Nov 10, 2009 12:19 PM
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
I agree with Joseph. SAP recommends you to have at least one staging server where you can test and modify configuration before moving them to production for GRC implementaton.
Most of my clients use 3-tier landscape where they tie Dev SAP to Dev AC, QA SAP to QA AC and Prod SAP to Prod AC.
Alpesh
The GRC Landscape can differ tremedously depending on the size and complexity of your business.
It is important to have at least a pre-production system to perform your development & testing but you may wish to have additional production systems for other reasons including:
Segregation of sensitive data - Java authorisations do not allow you to segregate effectively, meaning, you can either see it or you can't. Not see only a subset or change a subset.
Performance management - if you have massive amounts of data, you may not be able to process all of the information so you may have to split reporting by business units etc.
Additionally, if you are using CUP or SPM, you may wish to have a single Production system to manage all user providioning requests i.e. production, QA and development. Therefore, you may choose to connect your pre-production source systems to your productive GRC system.
As you can see, it can get very complex so it really depends on your individual requirements for the tools included.
Simon
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.