Role Management - What landscape do I use?

[krysta_osborn]

I'm currently prototyping Role Management in Access Control just to see what it does. I like the idea of maintaining all of my roles from a single platform. I also like the built-in role owner approval and review, although I haven't actually set them up and tried them yet.

Here is my question. If I decide to implement Role Management, it seems like the best practice would be to implement it on our production platform. Then role changes would be made, tested, and approved on production. There would not be any role transports anymore.

Which then begs the question of what to do with development and quality. Does the production platform link to those systems? Or does it still only talk to production back ends?

Any profound thoughts on how you've done it or seen it done would be greatly appreciated!

[Former Member]

Hi Krysta,

SAP GRC AC BRM is good tool to implement the role governance process from one consolidated system. You still have to transport the role across the landscapes:)(If you role changes are in Development then you change the role status to Dev and If its in Quality then you change the status to QA and when the role changes hit production you change the role status to PRD,so that user can request)

https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=263654034

Thanks

Ramesh