Generating RAR Alerts for just certain user groups

[Former Member]

Is there any way to limit a RAR Critical Actions Alert to just certain users? Or, only if these users access certain data?

We've had a request to monitor and send out a notification for some transactions, but only for certain users. These transactions are available to many employees, but it is only a concern if someone from a certain group uses them. Even then, it's only a concern if they access certain data.

As an example (this is not the actual request), you have a transaction like say XD 03 (Customer Display) and its available to most everyone in the company. You also have customers assigned to different company codes. The issue then is that you have a certain group of users that are only supposed to look at customers for just one specific company code. Ideally, you would want to be notified if they use this transaction to look at customers for other company codes. At the very least, you want to know when they use this transaction so you would know to check on their usage.

If this can't be done using the RAR Alerts, is there maybe another way to perform this montoring/notification?

Thanks.

[Former Member]

Hi Bob,

GRC RAR would not help you in this case. However you can restrict the Users through Roles which are assigned to them.

For example : for tcode XD03 check maintain the authorization object F_KNA1_BUK with Activity 03 and Company code 1000 (depending upon your requirement). Assign the Role to User who require the access to view the Customers for the company 1000.

Hopefully this may meet your expectations.

Regards,

Nikita Sharma.

[Former Member]

Nikita -

The XD03/Company Code example was just used to illustrate our situation. The actual restrictions we need cannot be built into the SAP transactions in question. For a long term solution, we are in the process of building custom transactions. We need a short term solution for monitoring access, until the new custom transactions are ready.

Thanks.

[Former Member]

Hi Bob,

Any reason you dont want to use the system logs? And want to stick to GRC only?

Thanks!

Chinmaya

[Former Member]

Chinmaya -

I am just trying to answer this request from our management from the perspective of the GRC systems. Whether or not there are SAP tables/files/etc. that could satisfy this request is a question that our Basis support group will answer. I only support GRC.

Thanks.

[Former Member]

Well system logs is the way to go here.

Thanks!

Chinmaya

[Former Member]

Hi Bob,

Have you tried using system logs from Sm18/SM19/Sm20, they shoul dmeet your requirments.

You probably dont need GRC for this.

Thanks,

Chinmaya