Sensitive Rules

Sensitive rules state that certain transactions codes are of a sensitive nature. Access to these should be limited to a few users and should follow a defined approval process while granting the access to these transactions codes.

As an example, the procedure to build rule conditions for a 'Sensitive Transaction Code' type of rule is provided below:

Sensitive Transactions Codes

Sensitive transactions codes rules list transaction codes (T-Codes) that are sensitive in nature. If performed by an unauthorized person, it may result in fraudulent transactions.

Sample Rule

• Rule Book Name: Activity_SAP_UAI_Sensitive Transactions_v60
• Rule Control Number: UAI_ST0009
• Rule Name: Sensitive HR Transactions
• Rule Type: Sensitive or Conflicts Rule
• Object: Transactions
• Build rule conditions

The Sensitive HR Transactions rule helps to identify all users and roles assigned the transactions listed in this rule. Users and roles assigned these sensitive objects are displayed as violations in the analysis results.