Anyway to fill the multiple owners in Access Control owner Table in GRC 10.0?

Hi,
Is their any way to fill the data in the access control owner table in case we have many owners?
Any script or any table for inserting this at one shot!

Hi Pranjal,
not really recommended, but you can fill directly in table GRACOWNER.
Regards,
Alessandro

Similar Messages

Configure Access Control Owner screen

Hi All,
I am working on SAP GRC project and it's very new to me. I have one user and that user has Access control owners screen.
This role displaying all the Central Owner in the table. When I click one role than Open button gets activated. When i click open button it's navigating to Owner assignment screen in Central Owner Administration. In here i am having two doubts,
1. Is this possible to create duplicate screen of Owner assignment screen
2. If possible how to configure that in Access Control Owners screen.
Your valuable answers will be appreciated.
Thanks in advance.
Regards,
Kathiresan R

Hi Kathiresan,
its not possible for creating duplicate entries for one user with similar owner administration in Access Control Owners tab.
and it is possible, for one user we can able to assign multiple responsibilities.
Once we are in to Access control Owners screen
-> select the user id which you want assign additional responsibility like Risk Owner, MC owner and FF role owner etc.
-->Click on open button and select multiple responsibilities and save the data.
And make sure that user should have the required roles before assigning the responsibilities in access control owners.
Thanks,
Siva

How to allow multiple domains under Access-Control-Allow-Origin

Hi,
We have a domain where will get CORS request from another domain hosted on seperate DC. We can't set
Access-Control-Allow-Origin as * due to security concerns & IIS can't take more than 1 value at a time. Kindly suggest how to pass multiple httpheader for
Access-Control-Allow-Origin.
Regards,
Dhiraj

Hello Dhiraj,
This is not the suitable forum for your question, you may post in
IIS forums for more help.
Thanks for your understanding.
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

GRC Access Control VIRSA_CC_ACTRULHDR table

Hi all,
we are using GRC AC 5.3 SP14.
We have noticed that, using the function "Rule Architect -> Utilities -> Export Rules", table VIRSA_CC_ACTRULHDR is not exported.
In the previous SP it was exported.
Do you know if this table is no more relevant ?
Andrea

Hello Andrea,
I just want to give you some feedback, I know that I'm not answering your question.
I've checked the table VIRSA_CC_ACTRULE and it has the fields: [ACTRISK] ,[ACTIONS] ,[VSYSKEY] ,[FUNCTID] ,[RISKID],[STATUS].
The table you mentioned (VIRSA_CC_ACTRULHDR) has the following columns: [ACTRISK], [RISKID] ,[STATUS] ,[ENABLEORGRULE]
Then it seems that VIRSA_CC_ACTRULHDR only adds ENABLEORGRULE information. If I were a developer I'd check first if there are org. rules defined. If not, it doesn't make sense to export the whole table because it can be generated automatically with the info. in VIRSA_CC_ACTRULE table.
It just a thought, I don't know the source code of the export program and I'm not a developer either (LOL).
I couldn't find any kind of info regarding this in the corresponding note (1168120).
Cheers,
Diego.

Nameidentifier claims is no longer in the token issued by Access Control Service(ACS) with newly created ACS

Hi,
In our existing ACS, when we add a new relying party with that associate with rule as bellow:
input claim type as
htp://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier
and output claim type as
htp://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
When I used the ACS created previously, for token I received, I have
Received claims with existing ACS:
htp://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier:           testoem2,
htp://schemas.xmlsoap.org/ws/2005/05/identity/claims/name:             TESTOEM2-MS,
htp://schemas.microsoft.com/accesscontrolservice/2010/07/claims/identityprovider:                htps://wp8partnerservicesv1-tst.accesscontrol.windows.net/
but for the new ACS namespace, when I configure it exactly the same way, I receive
htp://schemas.xmlsoap.org/ws/2005/05/identity/claims/name:             TestOem2-MS,
htp://schemas.microsoft.com/accesscontrolservice/2010/07/claims/identityprovider:                htps://zackpartnerservice1-tst.accesscontrol.windows.net/'
The nameidentifier claim is no longer in the token.
Does anyone from Azure ACS team know what change in ACS might have cause this issue and how do I config the ACS so that I can get nameidentifier claim in the token too?
since my account is not verified, I use h_ttp instead of http in my question.
thank you,
Zach

Greetings, Zach!
Please refer to this:
https://msdn.microsoft.com/en-us/library/hh446535.aspx
The article elaborates how federated identity works with ACS.
Thank you,
Arvind

Restrict no. of entries in the multiple selection of DOCNUM of EDID4 tab

Hi,
Is it possible to restrict number of entries in the multiple selection of DOCNUM of EDID4 table.
i.e., Select the content button on se11 for EDID4 table. We can see the selection screen of the table. Press the multiple selection button of 'DOCNUM', we get a popup. Is it possible to restrict the no. of docnum entry to 500. If i enter more that 500 entries, it should popup a message.
Please share your ideas. I am working on 4.6c.
Points will be rewarded.
Thank you.
Regards,
Ramesh

Hi Atish,
Thanks for your reply. I checked for BAdis. But I couldnt find. Is there any other ways of doing this?
User is trying to import the docnum values from presentation server file using the 'Import from text file' icon on multiple selection popup. As the no. of docnum were 4500, during the execution of this process, other process trying to connect to oracle is going for short dump with message 'Run-time error (Oracle error code: ORA-4031)'. So user wanted to restrict it to 500.
Hope my explanation is clear.
Regards,
Ramesh

I want to fill the data source 0CO_OM_WBS_3 from COSP table.

Hi,
I am working on Plan and actual for cost controlling, I need to fill the data source with data from COSP table.
Please give me the steps for this. I checked in RSA3 for data source it don't have any data, but the corresponding table COSP having data.a
Thanks
Durg

Hi,
See the following DataSources for requirements,
0CO_OM_WBS_1                      WBS elements: Costs
0CO_OM_WBS_2                      WBS elements: Budget
0CO_OM_WBS_3                      WBS elements: Overall plan
0CO_OM_WBS_4                      WBS elements: Statistical key figures
0CO_OM_WBS_5                      WBS Elements: Selections
0CO_OM_WBS_6                      WBS Elements: Actual Costs Using Delta Extraction
0CO_OM_WBS_7                      WBS Elements: Commitment Line Items
0CO_OM_WBS_8                      WBS Elements: Budget Line Items
Use 0CO_OM_WBS_6 for Actual , bcoz it is having Delta Option for Plan you can go 0CO_OM_WBS_2 or 0CO_OM_WBS_3. See the SAP Help on that.
http://help.sap.com/saphelp_nw04/helpdata/EN/08/47c6f8bc1db04a84c9185954208ee7/frameset.htm
In this help you can find complete details of the Tables, you can see help for all above DataSources.
Thanks
Reddy

Airport Utility Timed Access Control does not allow/restrict access to wireless clients per the time set.

I have been trying to setup Timed Access Control in Airport Utility and it does not seem to be working correctly.
In Airport Utility from Edit Timed Access Control I Enter a name for my device (iPad/iPhone any device), enter my mac address, set time for Everyday and use default Between 9:00 AM and 5:00 PM, save and then update. When I go to my device iPad iPhone etc. I still have access even when it is after the time set, 5:00PM. If I set no access it will restrict access also I set a time between 2:00 PM and 5:00 PM and access was restricted. It doesnt seem to matter what the device is. I know that the MAC Adress is set correctly. It seems like an issue with the Utility, possibly time miss match or something. Not sure if I am missing something or if this Utility just has flaws. Please Help.

I changed the default to (no access) and set an entry for my test device (an iPad) to "Everyday Between 9am to 5pm. The iPad was still able to gain access to the network.
Something else to note, if I try to edit the time of an entry it gives me an error on my MBP "Invalid value", "The value for “Timed Access Control” is invalid." This happens even if I delete a digit (number or letter in the time field) and replace with the exact same. Not sure if the two are related. I have tried to edit access from my iPad. I don't get any errors but I still don't get the expected results. I called Apple to try and get Tech support but they were not much help. Thanks again.

How will i display the multiple select ids in the dashboard ?

I have a form where there is a multiple select. When the form is submit, the ids for the multiple select is stored in the database as concatenate. For example, multiple select : 3,9,5,1.
The ids of the multiple select is found in a table TABLE1 and the insertion is done in another table TABLE2.
Now I have to display them in a dashboard.
My question is how will i display the multiple select ids in the dashboard ?
I have to do an innerjoin with TABLE1 to retrieve the names of the multiple select ids. I don't know how to do it because the column name for multiple select in TABLE2 is of type text and the column id in TABLE1 is of type int.
Please help me solve this problem.
Thanks in advance

One general advice is, never store comma-delimited lists in the database. In fact, the reason is to avoid problems like the one you now face.
The major suggestion here is to re-design your database. Make sure each selected item (for example 3, 9, 5 or 1) is stored in its own row.
To solve the problem as it now stands, you could do something like
<cfquery>
select myItems
from table2
where id in (select id from table 1 where ...etc.)
</cfquery>
Then use ColdFusion's list functions to do what your dashboard requires you to do.

What is the difference between standard,sorted and hash table

<b>can anyone say what is the difference between standard,sorted and hash tabl</b>

Hi,
Standard Tables:
Standard tables have a linear index. You can access them using either the index or the key. If you use the key, the response time is in linear relationship to the number of table entries. The key of a standard table is always non-unique, and you may not include any specification for the uniqueness in the table definition.
This table type is particularly appropriate if you want to address individual table entries using the index. This is the quickest way to access table entries. To fill a standard table, append lines using the (APPEND) statement. You should read, modify and delete lines by referring to the index (INDEX option with the relevant ABAP command). The response time for accessing a standard table is in linear relation to the number of table entries. If you need to use key access, standard tables are appropriate if you can fill and process the table in separate steps. For example, you can fill a standard table by appending records and then sort it. If you then use key access with the binary search option (BINARY), the response time is in logarithmic relation to
the number of table entries.
Sorted Tables:
Sorted tables are always saved correctly sorted by key. They also have a linear key, and, like standard tables, you can access them using either the table index or the key. When you use the key, the response time is in logarithmic relationship to the number of table entries, since the system uses a binary search. The key of a sorted table can be either unique, or non-unique, and you must specify either UNIQUE or NON-UNIQUE in the table definition. Standard tables and sorted tables both belong to the generic group index tables.
This table type is particularly suitable if you want the table to be sorted while you are still adding entries to it. You fill the table using the (INSERT) statement, according to the sort sequence defined in the table key. Table entries that do not fit are recognised before they are inserted. The response time for access using the key is in logarithmic relation to the number of
table entries, since the system automatically uses a binary search. Sorted tables are appropriate for partially sequential processing in a LOOP, as long as the WHERE condition contains the beginning of the table key.
Hashed Tables:
Hashes tables have no internal linear index. You can only access hashed tables by specifying the key. The response time is constant, regardless of the number of table entries, since the search uses a hash algorithm. The key of a hashed table must be unique, and you must specify UNIQUE in the table definition.
This table type is particularly suitable if you want mainly to use key access for table entries. You cannot access hashed tables using the index. When you use key access, the response time remains constant, regardless of the number of table entries. As with database tables, the key of a hashed table is always unique. Hashed tables are therefore a useful way of constructing and
using internal tables that are similar to database tables.
Regards,
Ferry Lianto

Difference between SAP Access Control and IDM

Hi Expert,
I have one question What is the difference between SAP Access Control and SAP Identity Management ?

Ali,
That's a good question, but a tough one.
While both applications can do most of what the other can do, it's a matter of specialization in my opinion.
Access Control is all about managing and controlling access to SAP system roles and has the ability to report on role conflicts for compliance and reporting purposes. (I'm sure I'm leaving a lot out, but maybe a GRC / AC expert can fill in more details)
SAP IDM is about managing the user life cycle with regards to landscape and enterprise systems. It will handle the creation, update and ultimately the removal (or de-provisioning) of users in SAP ABAP, SAP JAVA, LDAP, JDBC, and API based applications. It will also do Role Management through a web based UI (User management is web based as well). and as of the latest Service pack for SAP IDM 7.2, it will do attestation (limited certification) as well. It is a definite upgrade to CUA as it will work with a greater variety of systems, include workflows and approvals.
GRC will do some provisioning, but it's somewhat limited, as is IDM's compliance abilities.
The applications are designed to work together, however it does not have a great track record and the integration is typically heavily modified to work as desired.
If you have specific questions, feel free to post / DM. Obviously I am more knowledgeable about IDM, but I'll be happy to help you in any way possible.
Regards,
Matt

Access Control Lists on USB drive connected to AirPort Extreme

I have a Seagate 320GB drive mounted in a NexStar 2 IDE drive enclosure and connected via USB to my AirPort Extreme Base Station, running version 7.4.1 firmware upgrade.
Every time I restart the computer or unmount the network drive, an access control list appears to be written to the drive when there should be none, according to Disk Utility. I can tell when there are problems with the drive because the desktop icon turns from bright blue to grey-blue. I have to unmount the drive from the base station and connect it directly to the computer via firewire in order for Disk Utility to examine it. Generally, Disk Utility will report "Incorrect number of Access Control Lists (It should be 0 instead of (whatever number found) )
Does anyone know why these Access Control Lists are appearing? Is there any easy way to locate them and remove them, other than disconnecting it from the base station and connecting to the computer?
This problem happens with several different drives, in various NexStar 2 and NexStar 3 enclosures.

Same problem for me, exept that it happends after copying a file to the drive. It don't happend if I just mount and unmount the disc. The same for all discs I have tryed.
2009-03-04 12:59:30 +0100: Disk Utility started.
2009-03-04 12:59:43 +0100: Verifying volume “UltramaxB”
Starting verification tool: 2009-03-04 12:59:43 +0100
2009-03-04 12:59:43 +0100: Checking Journaled HFS Plus volume.
2009-03-04 12:59:43 +0100: Checking Extents Overflow file.
2009-03-04 12:59:43 +0100: Checking Catalog file.
2009-03-04 12:59:43 +0100: Checking multi-linked files.
2009-03-04 12:59:43 +0100: Checking Catalog hierarchy.
2009-03-04 12:59:43 +0100: Checking Extended Attributes file.
2009-03-04 12:59:43 +0100: Incorrect number of Access Control Lists
2009-03-04 12:59:43 +0100: 2009-03-04 12:59:43 +0100: 2009-03-04 12:59:43 +0100: (It should be 5427 instead of 5430)
2009-03-04 12:59:43 +0100: Checking volume bitmap.
2009-03-04 12:59:44 +0100: Checking volume information.
2009-03-04 12:59:44 +0100: 2009-03-04 12:59:44 +0100: The volume UltramaxB needs to be repaired.
2009-03-04 12:59:44 +0100: Error: Filesystem verify or repair failed.2009-03-04 12:59:44 +0100:
2009-03-04 12:59:44 +0100: Disk Utility stopped verifying “UltramaxB” because the following error was encountered:
Filesystem verify or repair failed.
2009-03-04 12:59:44 +0100:

"Assign Access Control" returns error for essbase apps in shared services

Hello,
I installed and configured Oracle EPM 11.1.2 (Foundation, Essbase, Planning, Reporting&Analysis):
OS: Windows Server 2008 Sp2 (32bit)
Default Installation with default ports,
Installation of all components on the same server,
no clustering
EPM System Diagnostic says that everything is OK.
Now I want to assign filter access for an essbase database in the Shared Services.
Starting the menu item "Assign Access Control" in Shared Services returns the following error:
Error 404--Not Found
From RFC 2068 Hypertext Transfer Protocol -- HTTP/1.1:
+10.4.5 404 Not Found+
The server has not found anything matching the Request-URI. No indication is given of whether the condition is temporary or permanent.
+....+
Can anybody help ???
best regards,
Nicole

Hello,
here's what I found out so far:
I get the error if I start the shared services console via the URL "http://servername:port/interop/index.jsp" and then select the "assign access control" for an essbase database.
If I start the shared services console via the workspace everything works fine.
Does anybody know what to do so that it also works if I start the shared services console via URL?
best regards,
Nicole

"Assign access control" not appearing under Essbase in shared services

Hi Everyone,
Can anyone point out the reason behind this? This is leading to all sorts of problems. Configuration is as follows:
App Server: Foundation, EAS, Planning, Reporting, Web Analysis, Workspace on Tomcat
DB Server: Essbase and SQL Server
Essbase is on Shared Services mode.
This is actually very urgent. Would be grateful for any help.
Thanks,
Sayantan

This has been posted in the essbase forum > "Assign access control" not appearing under Essbase in shared services
Cheers
John
http://john-goodwin.blogspot.com/

Can't Add To Access Control List Airport Express

We have both Airport Extreme (2) and Express Base Stations (3) to create a wireless network. On the Extremes I can click the Add button in Access Control in the Airport Admin Utility to add people to the list. On all the Express Base Staions I can edit or delete entries already on the list but can't add any new ones. I can export an Access Control List but not import one. The button is greyed out only the button works. I could add to the lists in the past and I'm not sure when it stopped working. The network structure and settings have not changed. Has anyone heard of this problem?
Aiport Express Mac OS X (10.4.8)

WDS is used on two Express units to relay the signal from the main base station but not on third one which is connected directly to the network via ethernet.
On the internet connected Express the Airport Network setting is:
Wireless Mode: Create a Wireless Network (Home Router)
All base stations have the same name to allow roaming.
Internet is connected using Ethernet.

Anyway to fill the multiple owners in Access Control owner Table in GRC 10.0?

Similar Messages

Maybe you are looking for