How to restrict Functions at Connector Group level

[Former Member]

Hello Experts,

We are on GRC 10.0 with SP21 and we have connected the same GRC systems to two individual (different) project landscapes.

We are having one Ruleset, where we are classifying the project specific custom t codes based on the Connector groups and these custom functions and Risks are mapped to same Ruleset.

Now our requirement is:  We wanted to restrict the project specific GRC admins to create custom functions related to their connector group ( Project specific) only and should not be able to view/update the other project specific data also.

So to restrict the user I have used the GRAC_FUNC auth object but it is helping me to restrict the user at Function name level only not at Connector group level.

Can you guys let me know how to go on the above scenario.

Thanks in advance.

Best Regard,

Siva

[former_member197694]

Hello Siva.

We have only field GRAC_LDSCP (Connector Group) to restrict by using connector group but this this available for authorization object GRAC_ROLED.

Hence you can create custom authorization object by copying GRAC_FUNC and add the field GRAC_LDSCP

hope this solves your requirement

Regards

Baithi