NTT DATA, Inc. SAP Security & GRC Consultant Interview Questions and Answers

SU22 is used to maintain authorization defaults, SU24 is used to maintain authorization checks, and SU25 is used to maintain the upgrade of authorization objects.

• SU22 is used to set default values for authorization fields

• SU24 is used to maintain authorization checks for transactions and reports

• SU25 is used to maintain the upgrade of authorization objects during system upgrades

• All three transactions are used in SAP to m

To troubleshoot GRC ARM request submission issue, follow these steps:

• Check if the user has the necessary authorization to submit the request

• Verify if the request is complete and all mandatory fields are filled

• Check if there are any system errors or connectivity issues

• Review the GRC logs to identify any errors or warnings

• If the issue persists, escalate to the GRC support team for further investigation

MSMP workflow is a tool for defining and executing approval processes in SAP systems. BRF+ is an application used to create business rules.

• MSMP workflow is used to define and execute approval processes for various business scenarios in SAP systems.

• It allows for the creation of complex approval workflows with multiple levels of approval and parallel processing.

• BRF+ is an application used to create business rules that ca...read more

Roles can be imported in GRC using the Role Upload functionality.

• Navigate to Access Management > Role Upload

• Select the system and upload the role file in CSV format

• Map the fields and validate the data

• Submit the job for import

Risk analysis for custom tcodes can be done using SAP GRC Access Control.

• Create custom roles and assign tcodes to them

• Run risk analysis using SAP GRC Access Control

• Analyze the results and mitigate any identified risks

• Regularly review and update custom roles and tcodes

• Consider using SAP GRC Access Control's continuous compliance monitoring feature

Expert mode in PFCG allows advanced customization of authorization roles.

• Expert mode provides access to additional tabs and fields for fine-tuning roles.

• It allows for more complex authorization logic and the ability to add custom fields.

• Expert mode should only be used by experienced users as it can be complex and difficult to troubleshoot.

• Examples of advanced customization include restricting access to specific transac

Centralized EAM system has a single database while Decentralized EAM system has multiple databases.

• Centralized EAM system is easier to manage and maintain.

• Decentralized EAM system provides more flexibility and autonomy to individual departments.

• Preference depends on the organization's size, structure, and requirements.