Extra Tools. Create own filters. Assign ID number. Create own filters. Assign ID number. Assign name and description. Set a model and risk category

Transcription

1 Extra Tools Create own filters Assign ID number Assign name and description Set a model and risk category Specify authorization objects, authorization object fields and specifications Search for specific profiles Simulate permissions Invoke current status Invoke existing authorization objects Make changes Start modified evaluation Track of changes Work with drag and drop Create own filters In this section you will learn how to create your own audit rules (filters) or add audit rules to existing ones. First open the Excel file. You can see the folder over the defaults or you can redefine it. 1 Assign ID number Assign a new ID number in the column "idfilter". This number must be unique for a filter.

2 Important For each authorization object or profile requires the creation of the same ID number, name, description and model. The linking rule for each row with the same ID number is "AND". 2 Assign name and description Enter the respective name and a German or English (optional) description.

3 3 Set a model and risk category Over the parameter "module" you control the order in the list of audit rules under the tab filter. Use for example "BC" for basic components or "FI" for financial accounting. With "risk" you determine the risk category. Possible values are 0 to 9. This helps with orientation, how critical the validation rules are in terms of regulatory or organizational requirements.

4 4 Specify authorization objects, authorization object fields and specifications Start now with the first authorization objects and the first authorization object fields and enter them in the "Object" and "Field" column.

5 Important For each authorization object field a separate row entry is required. Now enter in the column "from" the possible specification. Several specifications should be separated by commas. The 5 linking rule here is OR. Repeat each step row by row, until you have captured all the authorization objects. Capture transaction codes: Enter in the column objects "S_TCODE" as value and in the column "filed" "TCD" as value. In the column "from" enter the possible TCodes separated by commas (OR linking). 6 Search for specific profiles Often you will search for specific profile names such as "SAP_ALL". Enter the profile name in the column "profile", and leave the column "object", "field" and "from" empty.

6 Simulate permissions With ispicio S, simulations can be performed in regards to the authorization concept (chargeable program option). For this purpose, changes can be made of profiles or authorization objects and the effect of the evaluation results can be analyzed. For example, an authorization object is restricted to a specific profile regarding possible characteristics and evaluate how the number of results is reduced in a filter. 1 Invoke current status Click on "Data model".

7 2 It appears the Data model.

8 3 Invoke existing authorization objects Continue per drill-down to the permission (role / profile / object), that you wish to modify.

9 4 Make changes Select the entry (1) and press for example "delete" (2). Afterwards confirm the question.

10 Note You can easily modify the specification. Click in the relevant box and it is editable. Modify the entry and confirm with Enter. Play with the function to discover the all the possibilities. Nothing can happen! 5 The object has been removed.

11 6 Start modified evaluation Press again "Analyze" in the main window.

12 7 The result is displayed in the usual form.

13 8 Track of changes You have now simulated the desired result. But what are your changes? ispicio S displays it to you. Choose from the combo box "Changed Authorizations" to generate a report.

14

15 9 Work with drag and drop You can also easily move profiles / roles / objects from one user to another. Select the desired entry and drag it with the mouse to another location.

16 10 Run the analysis again and invoke the associated report (as described above).

17