Re: ARA Risk Function with Multiple Tcodes

Hi Ravi

I would see S_TCODE to be an OR not AND as transaction code is type of "action" in the system.

Based on how GRC works I see it as:

• Critical Action - the user has tcode1 OR tcode2
• SoD - the user has both tcode1 AND tcode2

If your goal is to say if a user asks for any of the transactions in the critical list then defined them as a critical action. E.g the Action could be Unlock User which could be Tcode SU01 OR tcode SU10 along with S_USR_GRP ACTVT = 05.

Have a look at: Rule set - Rules & Rule Types

Regards

Colleen