False Positives showing for Roles with no transactions

[Former Member]

Hello everyone,

We are facing a weird issue. If we do a Role level Risk Analysis for a role in which no t-code is maintained in PFCG, the system shows the standard risk P038. This risk is shown for all the roles in which there is no t-code maintained.For all the rest of the roles the risks shown are correct.

Can anyone help in this regard?

Regards,

Mayuresh

[Colleen]

Hi Mayuresh

Have you run your synch recently?

Also, when you say it has no t-code are you only looking at the PFCG role menu? Have you checked if someone has manually inserted S_TCODE into the PFCG authorisation?

Have you made any changes to standard risk P038?

[Former Member]

Hi Colleen,

Have you run your synch recently?

Yes

Also, when you say it has no t-code are you only looking at the PFCG role menu? Have you checked if someone has manually inserted S_TCODE into the PFCG authorisation?

There is no t-code in the PFCG role menu. Also, i did search for S_Tcode object in the authorization section, but couldnt find any

Have you made any changes to standard risk P038?

No change has been made to standard risk P038

Thanks,

Mayuresh

[Former Member]

HI Mayuresh,

Are you running the Ad-hoc risk analysis or the offline risk analysis? Are you facing the same issue in

both Ad-hoc and offline risk analysis?

Thanks

Japneet singh

[Former Member]

Hi Japneet,

I am running Ad-hoc risk analysis.

Thanks