User Level Risk Analysis

[Former Member]

Hello All,

Before migrating any role changes to production system or assigning access to user, we perform User level risk analysis in quality system to identify any risk/violation beforehand itself. However to bring quality user access in sync with production access for performing analysis in qualit we are manually copying access to quality which is taking lots of human effort.
Could you please suggest any alternative ways to bring quality and production access in sync with each other.

Currently we are planning to create separate client in quality which will be completely dedicated to risk analysis and will only have UMR data. It is also planned to refresh this client with user access daily or weekly depending on the load. What all will be risk associated with creating new client and what data/tables other then UMR should be considered for risk analysis?

Thanks in Advance for your time and suggestions

[Former Member]

Hi Prakash,

You can definitely use simulation option to check for "What If" scenarios.

Creating a client in quality is not a bad idea either. The quality client has to be created on the target system side and you can perform client copy from production using profiles SAP_PROF and SAP_USER

All the GRC configuration has to be done to add this new client as target system in GRC.

Thanks.

Regards,

Muthu

[alessandr0]

Dear Prakash,

as I understood you correctly you are trying to simulate user level risks before assigning proper authorization. Therefore you can use User Level Simulation where you can simulate role assignments, transaction assignments or profile assignments.

The simulation does not assign authorization in the system and can easily be used for such szenarios.

Best regards,

Alessandro