ERP ERP Security, Access Control & Role-Based Permissions 2

Question 1

What is the recommended approach when designing roles in an ERP RBAC system?

Accepted Answer

Create roles based on job functions shared by multiple users

Answer

Create one unique role per individual user for maximum specificity

Answer

Grant all users the same base role and add individual exceptions

Answer

Use department names as role names regardless of actual duties performed

Question 2

During ERP implementation, what is a 'role matrix'?

Accepted Answer

A document mapping job positions to the system roles and permissions required

Answer

A visual diagram showing how ERP modules integrate technically

Answer

A technical schema for the authorization configuration database

Answer

A report showing user login frequency categorized by assigned role

Question 3

What is the biggest security risk associated with 'role bloat' in ERP systems?

Accepted Answer

Users accumulate excessive permissions over time, violating least privilege

Answer

The system runs slower due to excessive role definition records

Answer

New employees cannot be assigned appropriate roles quickly enough

Answer

Role names become too long for the system database to store efficiently

Question 4

What is 'role inheritance' in ERP access control design?

Accepted Answer

A hierarchical structure where child roles inherit permissions from parent roles

Answer

When a new employee receives access rights from the previous person in that position

Answer

When roles are automatically assigned based on the organizational chart hierarchy

Answer

The transfer of access rights from terminated employees to their replacements

Question 5

What is a 'composite role' in SAP ERP security terminology?

Accepted Answer

A container that groups multiple single roles together for easier user assignment

Answer

A role that spans and applies across multiple company codes simultaneously

Answer

A role granting simultaneous access to both financial and HR data

Answer

An automatically generated role based on analysis of historical user behavior

Question 6

What is 'provisioning' in the context of ERP user account management?

Accepted Answer

The process of granting, modifying, or revoking user access rights

Answer

Setting up physical hardware infrastructure required for the ERP deployment

Answer

Training new users on how to effectively use their assigned system functions

Answer

Creating scheduled backup copies of all user account data and preferences

Question 7

When should user access rights be formally reviewed in an ERP environment?

Accepted Answer

Annually and whenever an employee changes job roles or responsibilities

Answer

Only when an employee is terminated or voluntarily leaves the organization

Answer

Every five years as part of the system upgrade and major refresh cycle

Answer

Only when a security breach or unauthorized access incident has been detected