05-05-2016 3:25 PM
Hi Experts,
As per the SAP Note 1133589 - the $ can be replaced by *
That is $ can be used as 'all' or 'any' values in GRC 10 RuleBook.
We have tested the scenario and found that if $ is maintained in the field value then the Risk is showing in case of Role value is manintained as 01,02,03 etc. or even if for * or for blank value also(un maintained Node) - Fine from our perspective.
Wants to know how to replace 200*, *500 kind of values in GRC 10 RuleBook.These values are mentioned in the GRC 5.3 RuleBook and they are working fine there.We tried to test with 200$ and $500 , but the same logic is not working in GRC 10.
Please suggest.
Surajit
05-06-2016 3:02 AM
05-06-2016 7:29 PM
05-09-2016 8:58 AM
Hi Shaik,
In some fields like: ACT_GROUP where the Role name or Pattern of the Role names to be maintained and there we can not provide any exact value or value range.We have to provide some pattern values.
Example: If we wants to provide the Authorization to modify the Roles which starts with YE but not with B, then specifically we have to mention YE*(YE$) to restrict the access.
Please suggets.
05-11-2016 12:37 PM
Hi Experts,
Please help to know the wild card character in GRC 10.1 to represent a patteern like - starts with YE , ends with B etc.
05-12-2016 1:26 AM
Hello Surajit,
I ran couple of test with ranges and risk analysis was able to pick the users.
a) Creates Role with ACT_GROUP value = YE*
b) Developed rule for t-code PFCG with ACT_GROUP and values ( ranges)
Can you try this and see the results.
Thanks
Shaik