SAP Note 1262329 - The Differences between Action Level and Permission Level

Component : Access Risk Management -

Solution : https://service.sap.com/sap/support/notes/1262329 (SAP Service marketplace login required)

Summary :
This SAP Note addresses inquiries regarding differences between action level and permission level analyses within SoD (Segregation of Duties) reports. Specifically, the action level analysis examines transactional conflicts, whereas permission level analysis refines these findings by considering specific authorization objects defined in compliance rules. If authorization objects are not configured, both analysis levels yield identical results. Therefore, conflicts identified at the action level may not appear at the permission level if requisite authorizations are absent, ensuring no permission level risk exists without its counterpart at the action level.

Key words :
running sod analysis reports, authorization objects set, authorization object setting, authorization objects enabled, required authorization objects, terms risk analysis, action level analysis, permission level analysis, action level risk, permission level risk

Related Notes :

1542565Mitigations at Action versus Permission level
1310365Maximum number of rules that can be generated