Answer / sridhar

1) Names are changed as below:
RAR ---> Analyze and Manage Risk
SPM ---> Emergency Acces Management
CUP ---> Manage and Provision Users
ERM ---> Business Role management

2) AC, PC and RM are integrated.
3) Completely ABAP based.
4) Works with Web Dynpro Application.
5) You can post REASON CODES after using FF.
6) FF logs review is made as a part of Workflow making it
mandatory and compliant.
7) BRM and BRF+ used to design workflow.
8) Multi Stage Multi Path workflows

Answer / chandu

GRC 5.3

SAP GRC Business object Access control
1.Risk analysis and remediation
2.Super user Privilege Management
3.Compliant User Provisioning
4.Enterprise Role Management
INSTALLATION;
install on java stack
end user access:
any browser(internet explorer )

GRC 10.0
SAP Access Control (from May 2012)
1.access risk analysis
2.emergency access
3.access request management
4.business role management
Installation:
install on ABAP stack
end user access;
through portal browser
futures;
rich setup futures available

Answer / rambabu.a

1)AC 10.0 is based on ABAP box. it is integrated with GRC
PC&RM together.
2)AC 5.3 is using Java box. it is more complex one.
ADVANTAGE:
AC 10.0 is more bug-free and high performence.

Someone has deleted users in our system, and I am eager to find out who. Is there a table where this is logged?

1 Answers  

---

I have uploaded one role(its is derived role) from quality system to development system.After that, i have generated role and tried to move production. while transporting role i am getting below error ' ROLE TYPE IS UNDETERMINED ' can any body please provide the solution?

2 Answers   British Council, CGI,

---

Hii... Any one tell me .. We are using mainly 2 T.R. 1.customizing request. 2.work bench request. Can u tell me ..which are comes under customizing request and which are work bench request

1 Answers  

---

what is the difference between PFCG,PFCG_TIME_DEPENDENCY&PFUD???

3 Answers   IBM,

---

how to adjust user master records?

6 Answers   Accenture,

---

a user is assigned with tcode SA38.how to restrict him to execute only a few reports,say rsusr003.

4 Answers   iGate,

---

which role is commonly used

3 Answers   IBM,

---

what is meant by "Password is not downward compatible"?

1 Answers   Colgate,

---

how do we get list of users who are having mail-id’s in SU01 (Address tab)

4 Answers  

---

i need to give authorisation to a user to su01 tcode but the delete options should not work..i,e the user should be able to Create,disp,change etc but not delete on su01. how cam i do this?

5 Answers   Accenture,

---

What is the User Administration and Role Assignment in CUA.

2 Answers   IBM,

---

Security admin kept trace on a user.But while analyzing it is showing that "zero records" found.Then what to do?

4 Answers   Cognizant,

---