RAR - results are different between management view and risk analysis

[Former Member]

HI,

I have a difference of result between the screen management view and risk analysis.

in RAR

in tab informer --> Management View --> user analysis :

System : HR

Violation count by : Permission

users with violation : 11

the management view tells me 11 users with violation

but when I do a risk analysis by :

tab informer --> Risk analysis --> user level

System : HR

Violation count by : Permission

report type : permission level

in this result and after counting, there are 47 differents users with violation.

is it a bad interpretation reason's ?

is it a known bug ?

thanks

Aurelien

[koehntopp]

Hi Aurelien,

please check your settings - maybe the background report that fills the management report has been run with different options and/or exclusions.

Also, it may be dated - when did you last run a full sync/analysis?

Frank.

[Former Member]

Hi Frank and thanks for your quick response.

I've done a full sync/analyse this morning and I just redid it

and at each time in management view there is a different result ...?

in risk violation,

this morning it was 224 violations and now it's 132

there was no modification in the system between the 1st and the 2nd full sync/analyse

WTF ?

Thanks

[koehntopp]

Well, I'm pretty sure there was some kind of change. Access Control picks up stuff real time, so if only one user had a different role, or one role was changed, you might see totally different results.

The Management Reports are really just supposed to be a snapshot for management (hence the name ). Anything 'real' should be done in User or Role Analysis.

Frank.

[Former Member]

you are right,

many people are working on the system but to be sure I done in a first time a job to full sync + full analyse and the next time I have done only a full analyse.

and the result is different.

1st time : 584 violations

2nd time (30 min after without job sync) : 402 violations

normally if I don't planned a job sync (users, roles, profiles), the result after analyse should be the same ?

[koehntopp]

Again, look at the settings!

Do both analysis jobs use the same settings? The Background job can exclude objects in the job dialog and in configuration settings, and your interactive analysis also has lots of options.

Frank.