Change / Create Profit Center Master Data in GRC Ruleset

[Former Member]

Our auditors have asked us to add the following Tcodes to the GRC ruleset; KCH5N, KE52, KE55, KE51 and KE56.  They are asking these to be added to Functions for Change or Create Profit Center Master Data.  In reviewing the ruleset, I do not see any functions relating to Profit Center Master Data.  There is function CC02 and CC03 for Cost Center.  Has anyone come across the requirement to add these Tcodes before and if so where would they be applied?

I would appreciate any suggestions. 

[Former Member · Accepted solution]

Hi Darrell

You have two choices to do this.

1 - Perform the update into NWBC. This is easier and quicker.

2 - Update your exisiting ruleset with the changes and then perform the upload.

Since this is the first time you doing, chances are that you will be doing it again, so I suggest number 2 so that you can understand what /why you doing it.

Here are the steps:

- Download the Ruleset onto your local machine through the GRC, SPRO links. Upload this into MS EXCEL and review in detail.

- Understand the ruleset and the relationship with GRC.

- Understand how the BProcesses are linked with the Functions, Tcodes, Permissions, Objects, Risks, Risk Ratings, Active, Inactive.

- Build your new rules into the EXCEL document. Make sure you know the Objects associated with your Tcodes by using transaction SU24

- Save your document as a TEXT file and then upload it onto GRC, SPRO.

- Perform all your SYNCs.

You ready to go.

Rgrds

Sameel Limbada

[Colleen]

Hi Darrell

the SAP delivered rule set should be treated as a baseline or recommendation. It will not contain all the transaction. You will also need to consider any custom transactions that may need to be added to your rule set

Sameel has provided some steps. Regardless of using NWBC Workcenter for Ruleset to create each rule or IMG download/upload functionality, a common step people miss is to generate the rule set so it becomes active.

As an aside, if you have WF activating for Functions and Risks, it is bypassed if you use load functionality in the MSMP.

you will need to discuss with your auditors which other actions (transaction) should not go with to form your SoD rule.