Hi, everybody. I had an Issue related with GRC AC 10 alert monitor that is reporting that some users triggered SoD risks TR54 , TR01 and TR03 originated by transactions: ML81N - service entry against purchase order and FB05 - post with clearing. Both transactions are not available for those users because they don´t have the authorization profiles in the UMR.
Nevertheless we observed that both actions (ML81N and FB05) were invoked by a "CALL TRANSACTION" instruction from anjother program report.
I believe that this is a false positive alarm that were triggered even though the users have not assigned functions of risk.
I will appreciate your comments.
Best Regards.
Victor Sarabia
IT GRC Manager