Which of the following functions within SAP GRC Access Control support access certification and review? Note: There are 2 correct answers to this question.

Question

Options

• ARole Review
• BSOD Review
• CRole Reaffirm
• DUser Reaffirm

• A
  10% (5)
• B
  83% (40)
• C
  6% (3)

Explanation

Within SAP GRC Access Control, the Access Certification component supports SOD Review (B) and User Reaffirm (D) as its two core review functions. SOD Review allows managers or compliance officers to periodically review and certify Segregation of Duties violations assigned to users, while User Reaffirm enables periodic recertification of a user's overall system access to ensure it remains appropriate.

Role Review (A) is a distractor - role-related management activities fall under the Business Role Management (BRM) component, not Access Certification. Role Reaffirm (C) does not exist as a named function in SAP GRC Access Control; the certification process operates at the user level (User Reaffirm), not at the role level.

Memory tip: Think of Access Certification as answering two compliance questions - "Do users have risky conflicting access?" (SOD Review) and "Should users still have the access they have?" (User Reaffirm). Both focus on the user, which is why the role-centric options are wrong.

No community discussion yet for this question.