Quantcast
Channel: SCN: Message List - Governance, Risk and Compliance (SAP GRC)
Viewing all articles
Browse latest Browse all 8113

Re: EAM ID based or Role based? Why settle for just one?

$
0
0

Thanks Kevin. I can see where you coming from.

 

"You mentioned about looking at the Logon Pad with Role based, and that is not possible with that.  No offence meant."

  • None taken (I strongly believe the best way to learn is to ask questions even though if they sound silly) I am aware that this is only possible in Role based(look at the logon pad) and that we cannot look at the logon Pad if ID based is enabled, however as I mentioned it wouldn't make any difference considering the Firefighter will not be needing the logon pad in Role based!

 

"I also want to mention that from a Centralized vs Decentralized scenario, this is only relevant to ID Based FF.  and truly the choice is Centralized ONLY or Centralized and Decentralized and the latter is really dependent on the security you allow to your Firefight users."

  • Roger that! I am aware of that but thank you for confirming it.

 

"Having done this from both a customer and consulting standpoint, I have never heard this request before, and truly I feel that this would be horrendous to try to manage.  Just my opinion."

  • It might be true and at this point my focus is not so much on the efficacy of this scenario but as to the functionality of the module. Considering Role based FF looks like a better option if some how the risk involved (No designated log reports, tracking etc) can be countered, It would make sense to to give regular FF tasks as Role based and really critical tasks as ID based (Given its better security measures).

 

Once again thank you for your valuable input on this matter Kevin.Much appreciate it.


* I know there is a fine line between Stubbornness and Persistence, so I'll make sure I don't cross over.

 

Regards,

Leo..


Viewing all articles
Browse latest Browse all 8113

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>