Sitemap

Amicuk Programming Answers

Access Control View All Role

-0001-11-30   Views:1

Advertisement

Hello Experts, We are currently implementing GRC Compliant User Provisioning for the client. Apart from the configuration team with role AEAdmin, we have few client experts to look into the sandox system and understand the cnfiguration we made is as

Hello Experts,
We are currently implementing GRC Compliant User Provisioning for the client. Apart from the configuration team with role AEAdmin, we have few client experts to look into the sandox system and understand the cnfiguration we made is as per the requirement.
In doing so, they tend to modify some or other configuration at times knowingly/ unknowingly which lead us to longer debugging time.
Is there a way I can create a UME role with only View Configuration Action to avoid such circumstances.
Thanks
Rashmi

The replay answer
Advertisement
Hi Rashmi,
1- Assign following actions to Role:-
ViewReject
ViewHold
ViewCopyRequest
ViewCreateRequest
ViewSearchRequestAll
ViewRequstAuditTrail
ViewForwardRequest
ViewReRoute
ViewAccessEnforcer
ViewSelectPDProfiles
ViewMitigation
ViewRiskAnalysis
ViewSelectRoles
ViewReaffirms
ViewRiskAnalysis
ViewSelectRoles
ViewReaffirms
ViewApprove
ViewApproverDelegation
Using this action You can saw following Tabs in Access Enforcer
1- Access Enforcer
        -Requests For Approval
        -Create Request
        - Search Requests
        -Requests On Hold
        -Approver Delegation
        -Copy Request
        -Search Request Audit Trail 
        -Role Reaffirms
2-Informer Tab
        -Services Level For Requests
        -Conflicts And Mitigations
        -Request By Roles And Role Owners
        -List Roles And Owners
        -Requests By PD/Structural Profiles
3-Configuration Tab
        -Monitoring
                  -System Log
                  -Application log
       - Upgrade
Rest of the Tabs in Configuration is running along with Modify action in  AE5.2.
2- Some new actions are added by SAP GRC RND Team  In Compliant User Provisioning 5.3( Access Enforcer 5.3) for only view the Initiators,Stages,Path,Connectors,Provisioning,HR Trigger,Userdefaults Etc.
In AE 5.3 independent  View and Modify actions are available
for each tab like for initiators ,Connectors Ect, But this type of provision is not available in AE 5.2.
Regards,
Jagat

Go to See the other 6 answers

Access Control View All Role

Category:DefaultRelease time:-0001-11-30Views:130

Hello Experts, We are currently implementing GRC Compliant User Provisioning for the client. Apart from the configuration team with role AEAdmin, we have few client experts to look into the sandox system and understand the cnfiguration we made is as[More]

GRC Access Control 5.3 - Role Reaffirm Notification Email

Category:DefaultRelease time:-0001-11-30Views:130

Hi Experts, We have GRC 5.3 system and we want to change the content of Role Reaffirm notification email. Is there any way to change the default email text? We want to add few additional lines and CUP link in the email notification. Thanks, RajendraH[More]

Access control for different user groups in APEX 4.0

Category:DefaultRelease time:-0001-11-30Views:130

Hi guys, in Apex 4.0, is there any way to use the access control page to configure access control for different user groups? The access control page currently only has an access control list by users with 3 privileges namely, Administrator, Edit & Vi[More]

Process to activate access control dynamiclly

Category:DefaultRelease time:-0001-11-30Views:130

Hello, I would like to make a process that activate the access control to a specific button, page..etc dynamically according to a condition, something like: " Assign access control (view,edit,admin) of (page#, button..) to user (x) when (condition)&q[More]

Role Based Access Control in Java

Category:DefaultRelease time:2015-10-11Views:130

Hi, we are designing a software solution that makes use of the Role Based Access Control pattern to control access of functions, EJBs, Servlets to certain users based on their "role". I have not been able to understand clearly how that pattern c[More]

ADF UIX Role Based Access Control Implementation

Category:DefaultRelease time:-0001-11-30Views:130

Hi, Can anybody suggest a detailed example or tutorials of how to implement a role based access control for my ADF UIX application. The application users can be dymanically added to specific roles (admin, Secretary, Guest). Based on the roles, they s[More]

Any best practice to apply role based access control?

Category:DefaultRelease time:-0001-11-30Views:130

Hi, I am starting to apply the access permissions for new users as being set by admin. I am choosing Role Based Access Control for this task. Can you please share the best practices or any built-in feature in JSF to achieve my goal? Regards, FaysiHi,[More]

Using Roles with Access Control Pages

Category:DefaultRelease time:-0001-11-30Views:130

Hi, I was curious if someone might be able to shed some light for me on an issue. I have a matrix of users who can read or write on different pages. So there are various roles created Admin can write all pages Reader can read all pages Medium Users c[More]

To run OHS at port 80 using solaris role based access control

Category:DefaultRelease time:2015-10-11Views:130

Hi. I already know & have done setuid root to ohs/bin/.apachectl to allow ohs to listen to port 80. Now on a new OFM 11.1.1.4 install, I want to use Solaris Role Based Access Control (RBAC) instead. Is it possible? RBAC does work as I can run a home[More]

401 Unauthorized Error when accessing a task from REST API which contains Role or Privilege in Access Control definition

Category:DefaultRelease time:-0001-11-30Views:130

Hi Team, As of IDM 7.2 SP8 patch2, when we use Enterprise role or Privilege in the access control definition of a task, accessing this task from UI5 i.e REST API is giving unauthorized error even though user is already having the required role or pri[More]

Importing a pkg with rely on server storage and roles for access control

Category:DefaultRelease time:-0001-11-30Views:130

Hi we run std 2008 r2.  I'm reading documentation on prot levels during pkg import to catalog at https://msdn.microsoft.com/en-us/library/ms141747(v=sql.105).aspx but unfortunately the definition of prot level "rely on server storage and roles for ac[More]

Hot
I am currently running an old G5 mac with CS4 and am in the process of updating to a new imac and a new Macbook pro. I would like to run creative cloud on both but do I need to install the original CS4 and update or can I just sign up for a year and [More]
iPhoto on my ipad no longer sees my photostream in the albums page of the iPhoto app since IOS 7 upgrade?? I can see my photostream and shared photostreams in the ordinary Apple photo app on the iPad. Prior to IOS 7, all these photostreams were visib [More]
I feel really stupid asking this but, is it possible to move music from an iPod onto iTunes? The reason I'm asking this is because my Aunt has a Fifth Generation iPod and she asked me to put a few episodes of lost (Downloaded with iTunes) onto her iP [More]
Hi, I am working on setting up the PO release stratey at my client. They request that a notification is sent to the approver when a PO gets blocked. I was able to successfully activate the standard workflow and receive the notification. I am doing th [More]
Although I've come close to finding my specific issue when perusing the discussions, I haven't had much success. I shot in 16:9 on the XL2. I changed all my settings in FCP before logging and capturing to accommodate this. It looks fine in FCP, inclu [More]
Hi I am a new owner of the 6110 and everytime I try to navigate to a destination I get a message saying "GPS position outside of map" What am I doing wrong I bought the phone in Spain and lve in the mountains but receive a good signal. I look fo [More]
Hi All, I'm trying to close out posting change notices manually by marking the status as U through LU02. Not able to create TO and clear this as the stock is no longer available and these are very old ones. The problem is that the source and destinat [More]
Hi, Like Oracle Linux, can we download Oracle AIX 6.1 operating system download from Oracle. -JanQ: Like Oracle Linux, can we download Oracle AIX 6.1 operating system download from Oracle. A: No. You need to contact your OS vendor for this. Oracle Li [More]
Dear All, While doing the J1iH - additional excise transaction - the above error is appearin and the above GL belongs to AED account and the A0 tax code is output tax code is shown in  error message (which i have not used any where) but if i am tryin [More]
Hi everyone I'm trying to install MS Visual Studio 2010 in my laptop, but it get stuck on this point shown in snap shot. I've installed this several times before but now i can't, even I installed my windows again but the problem is same. I'm using wi [More]