Access security is one of the most critical control issues in an ERP environment. The goal of ERP access control is to maintain data confidentiality, integrity, and availability. Thus, uncontrolled access exposes organizations to cyber criminals who steal subsequently sell critical data to competitors. To control this issues, modern ERP systems employ role-based access control (RBAC) which is a formal technique for grouping together users according to the system resources they need to perform their assigned tasks.

Required:

i. Describe the fundamental concept behind the rule of the least access.

ii. Explain a potential problem in an ERP environment.