Hello Colleen,
Thank you for your answer.
Yes, I'm looking for GRC Access controls. What is the process to implement it? Do I need to get a consultant for this GRC implement or can I do it ? Can I do the GRC impletment in the test system first to get a hand on first b4 move it to production or just do directly from production?
As of now all the roles what we have are little mess and required a clean up, what is your recommendation: redesign/build completely new roles or modify existing. What is the best practice guide to build a new roles?
Yes, I do have a "Firefighter" role that will assign to developer as needed (will remove it after they done). What is the transaction to run the logs EVERYTHING that they did durring Firefighter period?
(SM20 does not meet our requirement as it only show the transaction they user start.)
Regrad,
MV