SAP GRC Access Control: Management Dashboard Vilation Count

[reza_ahoui2]

Hi

In Management Dashboard of Access Control;

Can someone explain what Permission and Access Risk are if chosen? How are these related to Action Level, Permission Level, Critical Action and Critical Permission (options during ARA)?

Thanks

Reza Ahoui

[Colleen · Accepted solution]

it's a misleading label. Permission should be via Rule

It's either by Risk (Access Risk) or Rule (Permission)

e.g If you have a access risk with 2 functions and both functions have 2 actions then you have 4 RULES

If a user has all 4 actions then they will either have 1 for the Risk Violation or 4 for the PERMISSION level violation

If a user has 3 actions then they they will have 1 for the Risk Violation and 3 for the PERMISSION VIOLATION

sometimes, it's easier to start remediating using the risk violation count as it's more manageable then focus on permission level.

[reza_ahoui2]

Thanks Colleen