Procedure documentationCreating a Supplementary Rule Locate this document in the navigation structure

 

Create a supplementary rule to ensure correct analysis results for a violation that might be reported as a false positive.

Procedure

To create a supplementary rule:

  1. Choose   Setup   Supplementary Rules  .

  2. Choose Create.

  3. From the System dropdown list, select the target system where this supplementary rule resides.

    To create the same rule in multiple target systems, you must create a rule for each system.

  4. Enter the Function ID that requires a supplemental check to determine whether the user can perform the function. If you do not know the function ID, choose Search.

  5. Enter a Risk ID (optional). If you do not know the rule ID, choose Filter.

  6. Enter a description for the supplementary rule.

  7. Enter the Name of any database table.

    You can enter a custom table or an SAP-delivered table.

  8. Enter the user ID or role name in the Check Field Name field (BNAME or UNAME).

  9. The Include Violations dropdown list controls whether the SoD Conflict report includes or excludes the violations for the objects (user, role, profile, and so on) that meet the rule criteria based on the table entries.

    To indicate that the violations for the objects (user, role, profile, and so on) that meet the supplementary rule criteria are included in the reports, choose Yes.

    If you choose No, the report excludes the violations for the objects (user, role, profile, and so on) that meet the criteria of the supplementary check.

    Note Note

    When you match wildcard values, the wildcard value requires an exact match of the entry in the rule and the entry to be checked in the SAP table.

    End of the note.

Result

If you set the parameter [Use Supplementary SoD Analysis] to Yes, the system considers the supplementary rule when it generates the report.