SAP GRC Access Control: Ruleset for SRM WebDynpro

[reza_ahoui2]

Hi

We re-activated BC in SAP GRC and came across few rules covering SRM Webdynpro risks (attached txt file and screenshot). They are coming as inactive (status 1), which we will activate (changing to status 0). However, as you can see they all having operator AND which is my concern as they may never happen all together!

Do we have to change the operator to OR in any case?

Thanks

Reza Ahoui

srm-webdynpro.txt

srm-webdynpro.txt

[vijayakumarsuth]

Hi Reza,

It is purely based on customer organization's requirement, when a customer organization need to activate certain permission then it is good suggestion to review and update the condition (AND or OR) values as well based on requirements. The standard delivered rule mostly contains very common practices and customers are welcome to update the rules as their requirements with Auditor or GRC consultants