GRC Roles
GRC Roles
GRC Roles
Note
You must assign this role to the WF-BATCH
user.
Access request SAP_GRAC_ACCESS_REQUESTER The role for the access request end user
Access request SAP_GRAC_ACCESS_APPROVER The role for the access request approver
Access request SAP_GRAC_ACCESS_REQUEST_ADMIN The role for the access request administrator
Access risk analysis SAP_GRAC_RULE_SETUP This role has the authorization to define
access rules
Access risk analysis SAP_GRAC_RISK_ANALYSIS This role has the authorization to perform
access risk analysis
Access risk analysis SAP_GRAC_ALERTS This role has the authorization to generate,
clear and delete access risk alerts
Access risk analysis SAP_GRAC_CONTROL_OWNER This role has the authorization to create
mitigating controls.
Access risk analysis SAP_GRAC_RISK_OWNER This role has the authorization to run access
risk maintenance and access risk analysis.
Access risk analysis SAP_GRAC_CONTROL_MONITOR This role has the authorization to run risk
analysis, mitigating control assignment, and
assign mitigating controls to an access risk.
Access risk analysis SAP_GRAC_CONTROL_APPROVER This role is used for control and control
assignments. It has the authorization to run
risk analysis, mitigating control assignment,
and workflow approval for access risk alerts.
Access risk analysis SAP_GRAC_FUNCTION_APPROVER This role is the delivered agent for workflow
in access control. It has authorization to
approve, create, read, update, and delete
workflow requests.