Rule analysis (page description)
To open the Rule Analysis page go to Compliance > Governance Administration > Rule Analysis.
Identities that have access to certain critical SAP functions, may violate compliance rules and can pose a significant security threat. On the Rule Analysis page, you can display all compliance rules with the SAP functions and user accounts that violate them (see Displaying compliance rules with SAP functions). You can investigate the rule violation to determine the reason for it and take action if necessary.
If you click a compliance rule in the list, a new page opens (see Rule Analysis – Rule (page description)) displaying the user accounts and identities violate that rule (see Displaying compliance rules with SAP functions).
The following table gives you an overview of the various features on the Rule Analysis page.
Table 270: Columns
|
Rule |
Shows you the compliance rule's name. |
|
Description |
Shows you the compliance rule's description. |
|
Significance |
Shows you how high the risk is if this compliance rule is violated. |
TIP: You can show less data by using the column filters. For more information, see Filtering.
Rule Analysis – Rule (page description)
To open the Rule Analysis – Rule page go to Compliance > Governance Administration > Rule Analysis > Click a rule.
On the Rule Analysis - Rule page you can examine a rule violation selected on the Rule Analysis page (see Rule analysis (page description)) to find the reason for it and take any necessary measures (see Displaying compliance rules with SAP functions).
The following table gives you an overview of the various features on the Rule Analysis – Rule page.
Table 271: Columns
|
User account |
Shows you the name of the SAP user account that violates the compliance rule. |
|
Identity |
Shows you the name of the identity that violates the compliance rule. |
|
Analyze rule violation |
Click By role to display details of the rule violation roles and profiles.
Click By ability to display details of SAP functions and transactions.
|
TIP: You can show less data by using the column filters. For more information, see Filtering.
Rule violations by user (page description)
To open the Rule Violations page go to Compliance > Governance Administration > Critical Function Analysis.
On the Rule Violations by User page, you can display all rule violations of identities associated with critical SAP functions (see Displaying rule violations of identities with critical SAP functions).
Clicking an identity in the list opens a new page (see Rule violations for an identity (page description)) that displays critical SAP functions and rule violations of the corresponding identity (see Displaying rule violations of identities with critical SAP functions).
The following table gives you an overview of the various features on the Rule Violations by User page.
Table 272: Columns
|
Full name |
Shows you the name of the identity that violates the compliance rule. |
|
Central SAP user account |
Shows you the name of the central SAP user account that the identity uses. |
|
Primary department |
Shows you the primary department of identity that violates the compliance rule. |
|
Functional area |
Shows you the functional area of the identity that violates the compliance rule. |
TIP: You can show less data by using the column filters. For more information, see Filtering.
Rule violations for an identity (page description)
To open the Rule Violations for <identity> page go to Compliance > Governance Administration > Critical Function Analysis > click an identity.
On the Rule Violations for <identity> page, you can investigate an identity to determine the reason for a rule violation and take action if necessary (see Displaying rule violations of identities with critical SAP functions).
Here you can find out which of the identity's SAP functions was involved in the violation and the rules that caused the violation.
The following table gives you an overview of the various features on the Rule Violations for <identity> page.
Table 273: Columns
|
SAP functions from ... |
|
Function definition |
Shows you the identity's SAP function name. |
|
Description |
Shows you the identity's SAP function description. |
|
Significance |
Shows you how high the risk of this SAP function is. |
|
Rule violations by ... |
|
Rule number |
Shows you the rule number of the compliance rule that the identity violates. |
|
Rule |
Shows you the name of the compliance rule that the identity violates. |
|
Description |
Shows you the description of the compliance rule that the identity violates. |
|
Significance |
Shows you how high the risk of this rule violation is. |
|
Functions |
Shows you the identity's SAP function name. |
TIP: You can show less data by using the column filters. For more information, see Filtering.
