GRC AC10 with CRM 701

Hi Expert,

Wanted to ask you if anybody have experience integrating GRC AC10 with a CRM System.

My main concern is that CRM security works in a different way as the ECC. For example, a user can have a PFCG role in CRM but if he does not have a Business Role assigned he can do anything.

Additionally, that Business Role must have Navigational Links and has to be assigned to an organizational object (throught PPOMA tcode).

So, how does the GRC AC10 do in order con combine those different security elements/considerations that CRM has in order to make accurate Risk Analysis?

Any comments would be appreciated.

Regards,