Colleen, Neeraj,
Thanks for your insights and links that you provided. It certainly added to my knowledge. However, also, something specific that I was looking for (as stated in my original post) was -
I am not sure which amongst the following should I ask the basis team to activate:
GRAC_RA_RULESET_COMMON SOD Rules Set
GRAC_RA_RULESET_SAP_BASIS SAP BASIS Rules Set
GRAC_RA_RULESET_SAP_ECCS SAP ECCS Rules Set
GRAC_RA_RULESET_SAP_HR SAP HR Rules Set
GRAC_RA_RULESET_SAP_NHR SAP R/3 less HR Basis Rules Set
GRAC_RA_RULESET_SAP_R3 SAP R/3 AC Rules Set
We are on ECC 6 at the moment. We do utilise some HR functionalities in ECC 6 but would not like to define any risks/rules for HR within GRC AC at the moment as these are not very critical to us and are monitored externally.
Any helps/suggestions/insights on this would be highly appreciated. What is not clear from SAP documentation is what is the difference between some of these BC sets, specifically
GRAC_RA_RULESET_SAP_R3 SAP R/3 AC Rules Set and
GRAC_RA_RULESET_SAP_ECCS SAP ECCS Rules Set and
GRAC_RA_RULESET_SAP_R3 SAP R/3 AC Rules Set
which makes it confusing for me to decide which one should I be using.
Many thanks.
Ronnie.