GRC RAR version relative to SAP upgrade to ECC 6

[Former Member]

Hi,

Currently we are on GRC RAR version AC-RAR 5.3-13.3. We are upgrading our SAP from ECC 5 to ECC 6 and the latest support pack. What GRC RAR version do we need to be on to identify any potential SOD issues on the ECC 6 system? Are there any other potential pitfalls that we should be aware of?

Thanks,

John Burk

[simon_persin4]

Hi John,

You will need to install the correct version of the VIRSANH / VIRSAHR agents. This should align to the SAP_BASIS release version e.g. 640, 700, 710 which you can see from transaction SAINT or from the System --> status menu.

It will need to align to the support pack level of the RAR Java system (in your case VIRSANH 13, VIRSAHR 11).

Simon

Edited by: Simon Persin on Feb 2, 2012 5:49 PM

[Former Member]

Hello John,

Are you using a customized rule set?

SAP provides rule updates periodically:

For example:

1446680 - Risk Analysis and Remediation Rule Update Q2 2010

You'll find that some specific changes are performed in these rule updates, and some of these changes are only for ECC 6.

You might want to check also here:

Note 986996 - GRC Access Control- Best Practice for Rules and Risks

Then, the point is not the GRC version, but the rule set. Of course, you have to upgrade the RTAs.

Cheers,

Diego.