3267060 - Authorization restriction for displaying detection results

Symptom

Detect results are saved in Alerts. How to restrict display range according to..

for example, company code.

User A belongs to company 1000.
User B belongs to company 2000.

User A is allowed to check the detection results of company 1000 only.
Does the Access group in Authorization Object FRA_ALERT allow such a control?

Also, need 2 Roles (Fiori front end and S/4 backend).

- SAP_BR_ACS_INVESTIGATOR
- SAP_FRA_FRAUD_INVESTIGATOR

Both Roles have Authorization object FRA_ALERT,
Field FRA_AG (access group).

Do we have to input the same access group for both Roles?

Environment

SAP BIS 1.5

Product

SAP assurance and compliance software all versions

Keywords

FRA_ALERT authorization object, SAP_FRA_FRAUD_INVESTIGATOR, Front-End Role: SAP_BR_ACS_INVESTIGATOR , KBA , GRC-BIS-DET , Detection , How To

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.