According to the SAP wiki2, you can use the Reaffirm Approval option in the MSMP Workflow stage configuration to confirm the identity of an approver when processing an access request. This option requires the approver to enter their user ID and password again before approving or rejecting a request.

According to the SAP Help Portal2, to configure Password Self Service (PSS) to allow end users to reset their password and process changes to their name, two of the actions that are required before PSS can be used are: Activate PSS for User Authentication Data Source in activity Maintain Data Source Configuration and Map the PSS Application to a BRFplus function ID in activity Maintain AC Applications and BRFplus Function Mapping. These actions enable PSS functionality for the data source that contains user authentication information and define the logic for PSS requests using BRFplus application. Therefore, A and C are the correct answers. B and D are not valid actions for configuring PSS, as they are related to other aspects of connector configuration, such as connector settings and connector groups. References: 2 https://help.sap.com/doc/e2ccae7ee6354b169cf845cd665e07fe/1.0%202016-07/en-US/frameset.htm?frameset.htm

According to the SAP Training Course GRC3001, some of the settings that can be configured in both the global and system-specific provisioning configurations are: Account Validation Error (A), Send Password ©, and Deactivate Password (E). These settings control how the user accounts are validated, created, and deactivated during provisioning. Therefore, A, C and E are the correct answers. B and D are not valid settings for both global and system-specific provisioning configurations, as they are related to other aspects of provisioning, such as role delimitation and assignment type. References: 1 https://training.sap.com/course/grc300-sap-access-control-implementation-and-configuration-classroom-018-g-en/

According to the SAP wiki1, GRAC_REPOSITORY_OBJECT_SYNC executes the following programs in this order: 1. Role Sync 2. Profile Sync 3. User Sync 4. Role Search Sync. Role Sync is a program that synchronizes roles from connected systems into the SAP Access Control repository. Profile Sync is a program that synchronizes profiles from connected systems into the SAP Access Control repository. User Sync is a program that synchronizes users from connected systems into the SAP Access Control repository. Role Search Sync is a program that synchronizes role search data from connected systems into the SAP Access Control repository.

According to the SAP Help Portal2, to change the email message delivered to an end user when their access request is rejected, three of the actions that should be done are: Update the required text using a copy of the standard document object (A), Define a custom notification template in table GRFNVNOTIFYMSG (D), and Configure the Notification Event for all relevant paths and stages in MSMP Workflow (E). These actions allow to customize the content and format of the email message and assign it to the appropriate workflow event. Therefore, A, D and E are the correct answers. B and C are not valid actions for changing the email message, as they would modify or overwrite the SAP standard document object, which is not recommended. References: 2 https://help.sap.com/doc/e2ccae7ee6354b169cf845cd665e07fe/1.0%2020 16-07/en-US/frameset.htm?frameset.htm

According to the SAP Help Portal, you can assign emergency access in Emergency Access Management by assigning a firefighter role to a firefighter in SAP Access Control or by assigning a firefighter ID to a firefighter in SAP Access Control. A firefighter role is a role that contains elevated authorizations for performing emergency activities. A firefighter ID is a dedicated user identity that has elevated authorizations for performing emergency activities.

According to the SAP Press blog3, some of the functions of the SAP Access Control solution are issue management and role provisioning. Issue management is a process that allows you to monitor and resolve issues related to access risks, such as policy violations, mitigating control deficiencies, or audit findings. Role provisioning is a process that allows you to request, approve, and assign roles and authorizations to users across different systems.