Function Permission : AND/OR Searchtype upload issue

[Former Member]

Hi All,

We are on GRC 10.0 SP09.

While uploading ruleset, in Function Permissions file we have searchtype AND at some places is taken as OR by the system.

We understand that if searchtype is blank, system consider's it as AND and if there is no object values mentioned also system takes it as AND.

But when we mention it as AND at some places, Error is we have system taking it as OR.

Please help what would be the possible solution, how system considers the permission conditions.

Regards,

Sravan

[neerajmanocha · Accepted solution]

Hi Sravan,

You may would like to go to below SAP Notes related to Operators. These have all the details how rules should be designed with the help of operators.

1330165 -  Instructions on how to use Operators AND OR NOT

1358952 - Rule Architect - logic of the NOT operator

These will have answer to your all queries.........

If you have same object and have ACTVT 01 and 03 in same line item (irrespective of AND/OR), system will consider this as OR between 01 and 03 (means 01 or 02 or 03). Now opertor AND/OR comes next if you have same Field ACTVT in 2 line items. based upon your operator, your 2 line items will be considred in rules.

Hope this helps.

Thanks & Regards

Neeraj

[Former Member · Accepted solution]

Thanks a lot Prem, Filip and Neeraj for your helpful inputs.

Regards,

Sravan

[FilipGRC]

Sravan,

a search operator type may act differently depending on case – below I described possibile ways:

• Values defined in range (value from, value  to) are linked automatically by the operator OR
• Different fields of a one authorization object are linked automatically by the search operator AND
• If the same authorization field types (for example activates 01 and 03) are combined, the search operator decides how the fileds are linked together
• It is recommended that you use search operator not in HR area only! 

Let me know if you need more information,

Filip

[Former Member]

Hi Filip,

Thanks for your reply.

for the third point

If the same authorization field types (for example activates 01 and 03) are combined, the search operator decides how the fileds are linked together

Query-

If we define ACTVT 01 and 03 for same object and searchtype as and/or will operator consider it as what ever defined?

or what value operator takes by default if we maintain searchtype blank in the file we upload in all the scenarios.

Thanks in advance for your inputs.

Regards,

Sravan

[premb]

Hi Sravan,

Is that happenning only in one field or across the field? For example, for ACTVT and BUKRS

ACTVT 01 AND

BUKRS CMP OR

It can have only AND with the fields and not OR. You can have ACTVT 01 OR 02.

If you have different condition, please paste here.

Thanks

Prem

[Former Member]

Thanks for your reply Prem.

Please share if we have any info regarding GRC system's behaviour for the searchtype as you explained one scenario.

Thanks in advance.

Regards,

Sravan