Risk Analysis Permissions not displaying

[Former Member]

Experts,

When I perform a Role Risk Analysis and select Report type "Action Level" I populate accurate results. However, when I perform the same analysis for "Permission Level" I get "No Violations Found".

I'm not entirely sure why this is occurring. I recently upgraded from CC4.0 to RAR 5.3 and migrated the rules over from CC4.0 including permissions rules so I don't think that is an issue.

Please advise.

Thanks in advance.

Regards,

Kunal

[Former Member · Accepted solution]

Hi Kunal,

If there is a role that is not generated in the backend, then the results of Action Level & Permission Level will defer.

Can you make sure all roles in backend are generated.

Best Regards,

Sirish Gullapalli.

[Former Member · Accepted solution]

Kunal,

This may be an expected result. Action level permission will show all the tcode to tcode violations which can lead to false positives. When you do permission level analysis, RAR analyzes risk at more granular auth object level. Compare the permission level rules and the action level violation to confirm this.

Alpesh