What is the difference between ECC security and RAR security
when GRC (RAR<SPM<CUP) is used, when similar functionality can
be performed SAP R3 level(ECC)?

Answer Posted / rahman shaik

Simply we can say one thing like In Ecc system you cant find any risk while assigning the roles but in RAR tool it will check the RISK of that particular assignment and if risk is their then we can mitigate and simulate to that risk

I mean its purely for SOD(segregation of duties)

Is This Answer Correct ?    4 Yes 0 No



Post New Answer       View All Answers


Please Help Members By Posting Answers For Below Questions

When would you update a sap table directly?

654


what is the different b/w su10 and su12

2184


How do I change the name of master / parent role keeping the name of derived/child role same? I would like to keep the name of derived /child role same and also the profile associated with the child roles.

900


Explain snc in sap security?

707


how we Custom Authorization Objects and Custom Transaction maintenance and how we do User classification, Running systems measurement reports during license auditing through USMM and SLAW

1870






Explain document transfer-level security?

674


You want to create and maintain user master record. What authorization would you need?

724


Can you explain protecting public keys?

600


how we do CUA configuration in Quality system

1983


Support types of WOs you have faced?

1789


As a SAP security consultant what is the most challenged you faced in previous company?

672


what is user buffer?

733


What is the difference between authorization object and authorization object class?

650


What are the different types of sap security tables?

665


How we Educated client personnel in R/3 Security and general Basis knowledge

1800