SAP GRC Access Control: Global Ruleset is gone!

[reza_ahoui2]

Hi

I read somewhere that all BC sets related to rule set (t-code SCPR20), once activated will be automatically combined into the “Global” rule set, which seems to be the default rule set by SAP. For some reason, we don't have any rule set by that name (we have one with a different name).

1) what would happen if we activate a BC?"

2) how can we have Global rule set back?

Thanks

Reza Ahoui

[Colleen]

HI Reza

The GLOBAL ruleset value being gone seems like a deliberate action if you have a custom value. And that's okay

Activating BC set is like any other - when you do it you have to choose the processing option as to whether it's appending or replacing

In relation to GLOBAL - the ruleset object definition is the code and description. The mapping of the ruleset to access risk is against the access risk master data definitions.

To re-establish GLOBAL, you can create the entry and then export your ruleset. Copy all entries in your access risk to custom ruleset mapping and put GLOBAL. Upload the ruleset and you're sorted. When you look at the Access Risk Ruleset tabs, you will see your custom ruleset as well sa GLOBAL.

If this was a deliberate decision, does it matter that you don't have a global value? Good change config parameter for default ruleset is also the custom value.