Risk is coming up after removing a t-code from existing role

[naga506]

Hello,

We have a Role which is existing in our GRC system for a long time, it has some 10+ tcodes in it, it was never shown a risk when assigned to a user, but during the business requirement, we have removed a t-code from it and moved that role to prod, after moving it to prod, it is showing risk for one t-code (function has only t-code, not permissions) for existing users, can someone please let us know why it was not showing any risk previously and showing all of sudden when a t-code was removed from the role.

Few points to remember -

1) Our GRC doesn't have ARM and BRM.
2) Risk was there and generated in GRC from a long time, but showing that risk now.

3) T-codes are not maintained in Menu, they are directly maintained through S_TCODE . (this role was created by some other org before we got this project in our hands and we are aware it is not a best practice).

Regards,

Naga506

[moshenaveh]

Welcome to the SAP Community! Thank you for visiting us to get answers to your questions.

Since you're asking a question here for the first time, I'd like to offer some friendly advice on how to get the most out of your community membership and experience.

First, please see https://community.sap.com/resources/questions-and-answers, as this resource page provides tips for preparing questions that draw responses from our members. Secondly, feel free to take our Q&A tutorial at https://developers.sap.com/tutorials/community-qa.html as well, as that will help you when submitting questions to the community.

Finally, I recommend that you include a profile picture. By personalizing your profile, you encourage readers to respond: https://developers.sap.com/tutorials/community-profile.html.

I hope you find this advice useful, and we're happy to have you as part of SAP Community!