GRC AC 5.3 Cross-System generated rules problems

[Former Member]

Hi Experts.

I have the following configuration:

- SAP GRC AC 5.3 SP 18

- Also it has a SoD Cross-System function between ECC and SRM systems, that has tcodes and auth. objetcs from ECC, and only authorization objects from SRM.

In addition, I had launched the Generated Rules Job to set up the violation combination into those Cross-System (ECC vs SRM), but the problem is when a search the authorization rules created for the risks of that function that I´ve talked previously in a Cross-System ruleset, I saw that only creates the violations for ECC sytem and not for SRM and ECC.

Do you know why it doesn´t work properly?
Is there any specific way to generate rules for Cross-system applications ?

Thanks in advance.

[jitan]

Hi Chemi,

For creating the cross system rules, please make sure you select the

Analysis Scope: "CROSS SYSTEM" in both the functions which you

using for creating a cross system risk.

Please change the scope to cross system and regenrate the rules.

The new rules should be generated for the cross system risk.

** In between also check that you have uploaded the authorization

file for SRM for creating SRM function.

Best Regards,

Jitan

[Former Member]

Hi Chemi,

Answer to the question : Is there any specific way to generate rules for Cross-system applications ?

Cross System rules must be generated under Configuration > Cross

Systems > Generate Rule.

when Cross System rules are setup, risks may show as double

because the same risk will show for each individual system and

also for the cross system risk analysis. So if the user has the risk

both within a System and between different systems, the risk will

show twice. 

Best Regards,

Ashish

[Former Member]

Hi Chemi,

For more details please refer to the SAP note 1229926 .

I hope it helps.

Regards,

Yukti