ICF services for GRC

[Former Member]

Hi experts,

As per installation guide, it mentioned that we can activate all the ICF services within /sap/public, /sap/bc and /sap/grc.
Is it really necessary to have them all activated?

It is also required to have GRAC and GRPC services activated.  Other than /sap/grc, are there other services?

Thanks,
Henry

[Colleen · Accepted solution]

Hi Henry

I don't believe there is a definitive list of all services to activate and part depends on the functionality you are using. If you need to restrict down it will be via trial and error (you may identify some straight up from launch pad definitions)

some of the BC onces are needed for access like NWBC and POWL.

Regards

Colleen

[dyaryura]

Hello Henry,

As Collen stated it depends on the functionalities you're going to use.

In the note you'll find more details:

1088717 - Active services for Web Dynpro ABAP in transaction SICF

But at the beginning you'll read "..Following the installation you must decide, on an application-related basis, which services you must manually activate...".

definitely activating all of them isn't a good idea, because there are some services that are for testing purposes only and shouldn't be activated.

Just to give you an example you can activate or deactivate the GRC WS that allow you to create a ARQ request or perform a a Risk Analysis. That really depends if you're going to use them or not.

I think you'll get better answers regarding what it's critic and you should restrict in the Security forums.

Cheers,

Diego.