GRC 5.3 Issue

Hi All,
I am using GRC 5.3.
Whenever I pull any Background Job report, I observe that the user groups against the users in the report is incorrect.
I want to know from which table GRC pulls the user group values. In GRC , where can I see the settings for setting the table.
Thanks&Regards,
  Rahul Tayade

Hi Rahul,
GRC pulls user group depending on the field to which it is mapped. If it is mapped to SAP, then it will be pulled from USGRP. If it is mapped to AE, then it will be pulled from  GRC.
This is the standard scenario.
In your case, it was the ORU which has user group assigned to it, in User defaults

Similar Messages

  • SAP GRC CUP password issue

    Hi,
    to get user password, i set email reminder, closing as send password in mail No and password display period : 0.It throws a password as sap default string .How can it be standard password,so user can reset by entering it.In SAP GRC 5.3 AC-CUP 5.3_05.0, I can't see password self service tab too.Is there any better way so user can get password in email as sap standard in 8 words (number , letters or any special characters as set like us).

    when i try to create request type for password self service. i have only these actions to select
    CREATE_USER  Create User 
      CHANGE_USER  Change User 
      DELETE_USER  Delete User 
      LOCK_USER  Lock User 
      UNLOCK_USER  Unlock User 
      ASSIGN_ROLES  Assign Roles 
      SUPER_USER_ACCESS  Super User Access 
      USER_DEFAULTS  User Defaults 
    i can't see any action for password self service in configuration->request type-> create  option.please answer it.

  • GRC RAR Simulate issue

    Folks,  I wonder if you can help...
    We are running GRC 5.3 and I'm currently validating RAR.  I have just tried to test the 'Simulate' functionality in User Level Risk Analysis but get a problem: 
    I am trying to test Action Level Simulation and therefore want to enter a transaction in the 'Value' field - (in order to include or exclude the transaction from the analysis), when I click on the selection icon at the side of the Value field to enter the search screen -I can then select the system I need to search, but then when I perform an unrestricted search ( to return all possible values of transactions).  I get a total of 22000 values returned stopping at transactions beginning with M* - NOT the expected amount of some 90000 transactions in our system.
    I have performed a download/upload of the Static text and SU24 Objects into the GRC system as part of the post installation steps  and the text files produced show all the transactions objects in the system.  Is there anything else I need to do in order to configure GRC to see all the transactions.
    your help will be most appreciated.

    Hello Wei,
    Here are responses to your queries:
    1. When running a RAR incremental role report with 4 rulesets, we encounter a status error on some roles, why is the status showing error while others are complete?
    -> When you run batch risk analysis system runs analysis on multiple roles/users/profiles. Whenever it encounters error for one of the object (role/user/profile), system goes on to next object in sequence and does not stop there. This way risk analysis does not stop if you error for a particular object and tries to complete as much as it can. Now the reason for error on some of the objects can be found later. Try to run risk analysis on that particular object only which failed and then try to troubleshoot the problem with it. check the logs after you run on that particular object.
    2. And also, from 0 - 19% seems to be quite fast, but after that it is running very slow, and i see the CPU comp and Memory uti is very high, any idea what might be the cause?
    -> The time taken to perform risk analysis on objects may vary depending upon the number of auth. objects available with the object. If A role has 30 objects and B role has 2000 then system will take different amonut time to run risk analysis on each one of them. risk analysis on A will complete faster than that of B. In addition to that, since you ar using 4 rulesets , system tries to analysis the objects for all the rulesets. This will increase the risk analysis time considerably.
    Regards,
    Varun

  • No data in downloaded report

    I work in GRC5.3  with RAR, CUP , SPM. When SOD report (or any report)is downloaded clicking on download icon ,it is saved in a zip file in local disk. But when I open the zip..it shows nothing. I need to get the reports in excel format. Can anybody provide solution for this.

    Simon,
    The error I had was specific to the opening zip files containing RAR reports using widows default utility, rest of zip files (Non GRC) had no issue.
    I later discovered that Zip format in which RAR downloads the reports isn't compatible with windows defalut utility and u have to use winzip or winrar.
    Amol

  • Installation issue on GRC 7.2.3 on Linux with EBS 12.0.4

    I am following doc http://download.oracle.com/otn_hosted_doc/logicalapps/723Install_GrccSuite.pdf to install GRC. I am doing an installation on Linux and in the section where we are installing Concurrent manager server components.
    As per doc, I have to source the APPL_TOP and run ladbinstall.bin (I am running in GUI mode and not Silient)
    The following is the output.
    -bash-3.1$ ladbinstall.bin
    Preparing to install...
    Extracting the JRE from the installer archive...
    Unpacking the JRE...
    Extracting the installation resources from the installer archive...
    Configuring the installer for this system's environment...
    awk: error while loading shared libraries: libdl.so.2: cannot open shared object file: No such file or directory
    dirname: error while loading shared libraries: libc.so.6: cannot open shared object file: No such file or directory
    /bin/ls: error while loading shared libraries: librt.so.1: cannot open shared object file: No such file or directory
    basename: error while loading shared libraries: libc.so.6: cannot open shared object file: No such file or directory
    dirname: error while loading shared libraries: libc.so.6: cannot open shared object file: No such file or directory
    basename: error while loading shared libraries: libc.so.6: cannot open shared object file: No such file or directory
    hostname: error while loading shared libraries: libc.so.6: cannot open shared object file: No such file or directory
    Launching installer...
    grep: error while loading shared libraries: libc.so.6: cannot open shared object file: No such file or directory
    /tmp/install.dir.32554/Linux/resource/jre/bin/java: error while loading shared libraries: libpthread.so.0: cannot open shared object file: No such file or directory
    I thought that it is not able to find the libraries, so i updated the PATH where libraries are located. I still get the above error. Has anyone come accross this issue and would please share some light on it.
    Thanks.
    Edited by: user495493 on Jul 17, 2009 7:51 PM

    This pulls the value from the APPS Profile
         SQL> select FND_PROFILE.value('APEX_LAUNCHER') from dual ;
         FND_PROFILE.VALUE('APEX_LAUNCHER')
         http://our.group.site:7878
    But
    String l_launcher = ctx.getProfileStore().getProfile("APEX_LAUNCHER"); ------------- doesn't return http://our.group.site:7878
    l_launcher = l_launcher + "/apex/f?p=" + p_application + ":" + p_page;
    l_launcher = l_launcher + "::APPS:::" + p_item_names + ":" + p_item_values;
    if (ctx!=null) ctx.freeWebAppsContext();
    response.sendRedirect(l_launcher);
    Instead I get
    http://our.app.site:8030/OA_HTML/null/pls/apex/f?p=140:2::APPS::::
    Suppose to get
    http://our.group.site:7878/apex/f?p=140:2::APPS::::
    404 Not Found
    Resource /OA_HTML/null/pls/apex/f not found on this server

  • Any issues with using LDAP on LINUX for GRC 5.2 UME?

    Our company is converting our LDAP servers from AIX to LINUX.  The DNS name used in our UME connection should not change.  Are there any issues with using LDAP on LINUX?  We are currently on GRC 5.2 SP9 (in the middle of upgrading to SP12).
    Also, I have been trying to connect our test UME system to a test LDAP box that has already been converted to LINUX but keep getting a 'connection failed' error when I try to test it. 
    Do you have to reboot the server to test changing the LDAP connections?  I've been trying it by going into UME, pulling up the LDAP tab, hitting the Modify button, entering the new userid and password for test LDAP, and hitting the Test Connection button.  I've verified that this userid and password is correct for test LDAP.
    Is there a way to get more information about why the connection failed?
    Thanks.

    I've been told by our LDAP Support group that none of the other configuration settings should have to be changed.  I should only have to change the id and password to connect to a test version of LDAP instead of our regular connection to the production LDAP.
    Can you test a connection for a different userid/password without having to reboot/restart the server?  Do I need to change these two settings, save then, reboot/restart, and then do the Test Connection button?
    Thanks.

  • List of Issues/ problems in SAP GRC AC 5.3 Implementation

    Hello,
    Can anyone provide me with the list of most commonly occurring problems related to
    1- SAP GRC Suite Installation
    2- RAR Module implementation
    3- CUP Module implementation
    4- ERM Module implementation
    5- SPM Module implementation
    6- SAP PC 2.5 implementation
    7- SAP RT Module implementation
    8- SAP GRC Suite Upgradation.
    Thanks in advance!!!

    Hi Abdul,
    As such there are no issues in implemeting the AC modules.
    Just make sure that you undeploy previously installed SP before deploying the new Support packages.
    1. You have to upload the initial file (xml files) again in CUP and ERM. These files should be corresponding to latest support pack.
    2. upload the CC 53_Messages.txt file in RAR with every upgrade.
    Also restart the server after deploying any following the above steps.
    For RT you can follow the note 1225960, 1060673 and make sure to restart the server after configuring the SAP Adapter.
    Regards,
    shweta

  • Enhance GRC issue status report columns

    Hello GRC Gurus
    I am new to GRC application and I have a requirement to enhance u201CIssue Statusu201D report  fields.
    Process:
    Goto -> Report Center - > "Issue status" Report -> run based on the condition. It will display ll the issue report in a ALV table formate with the columns
    Organization     Subprocess      Control       Issue     Ectu2026(As configured in SPRO)
    But my requirement is to add a Custom additional Field to the ALV table report:
    Is there any enhancement to add the custom field in to the report  and implement  logic to populate data to the same?
    Kindly let me know your comments.
    Thanks you ,
    Regards,
    Magesh
    Edited by: mageshB on Dec 28, 2010 6:10 AM

    Yes, of course.
    Kindly look into the view cluster:
    VC_GRFNREPCOLUMNSC - Reporting: Customizing of report columns
    VC_GRFNREPCUST           - Report: Customizing

  • Issue to add t-codes & functions in ERM role request GRC 10.0 - SP 5

    Hi
    We are on SAP GRC 10.0 - SP5. We are facing a strange issue while creating a Role request.
    After Defining the role, we are unable to add actions and there is no option of add/delete.
    Similarly while adding Functions, we are getting an error of Function module doesnot exist.
    On SP5 we could able to add t-codes successfully. Is this an issue with SP5.
    Thanks and Best Regards,
    Srihari.K

    Hi Diego,
    We applied the SAP Note. Now we could able to add the function from RAR rule set to a role. But this is brining all the t-codes in the function.
    We could not able to add the Actions directly into the role while defining. There is no add button appearing in Action edit screen where we can add t-codes to the role manually.
    We are on GRC 10.0 - SP5. Does anybody has this issue and got it resolved?
    Thanks and Best Regards,
    Srihari.K

  • GRC 10.1 Simplified Access Request and Remediation View Issues

    Hi Everyone,
         We recently upgraded our GRC 10.0 environment to 10.1, SP 5 and am having the following issues--has anyone else also experienced?
    In the simplified access request form, it keeps telling me to enter a “valid user ID”—even though the ID is valid and works fine in the normal access request screen. Also tried to search and then select the ID in this field with the same error.
    In the SoD Remediation view, I keep getting “No Data Found”, even though in the detail view, there are risks the same request:
    I’ve checked the following things:
    I’ve used IE 8, IE 9, FireFox, Chrome, and the NWBC to see if any of these fix the issue
    I double checked the 10.1 “upgrade guide” to make sure Gateway configurations are correct
    It looks like we are on the latest support packs:
    Any help on this would be greatly appreciated!
    Thanks,
    Brett

    Hi Brett,
    For Remediation issue you can check the below thread.
    http://scn.sap.com/thread/3574790
    Regards,
    Neeraj

  • Issue with Authorization sync job in GRC 10.1

    Hi,
    I am facing below issue while running the authorization sync job in 10.1 after importing the configuration data as part of migration from 5.3 to 10.1.
    we have GRC server and plugin system on the same SP level 04.
    Error:
    Error in GRCAC101EC; Reason Error in RFC; 'Function module "/GRCPI/GRIA_AUTH_G
    PFCG authorization sync failed with errors
    Thr RFC connection is working fine and the connector settings are done in GRC. Also the RFC user has SAP_ALL.
    Regards,
    Giridhar

    the sp seems a little low
    have a look at Error in RFC; 'Function module "/GRCPI/GRIA_PROF_GET_RANGES" not'

  • Enterprise Portal Configuration Issue - GRC 10.0

    Hi All,
    I am following AC10EP Configuration guide to integrate portal and GRC 10.0.
    According to the configuration guide i need add any entry for SPML under AUTH integration scenario as shown below.
    When I am trying to add the same in my system i am getting the issue as "Choose the key from allowed namespace" as shown below.
    Please suggest if there is any solution to get this fixed.
    Regards,
    Sai.

    Hi Prasant,
    Thanks for the details.
    I have made all my configuration correctly. Just now my issue got fixed. I got the same message as shown above and when i clicked on ENTER button it just accepted and went through.
    It is just a warning message and i stopped seeing it without clicking on ENTER button
    Though its not a issue, I made it an issue for myself
    Hopefully if anyone come across the same should correct it seeing this post
    Regards,
    Sai.

  • Adobe Offline Forms issue in GRC System

    Experts:
    I am working on creating a Offline Form for GRC Process Control  in SAP GRC System. I have couple of doubts.
    1. In the Form property, there is a new field call 'Inbound Handler'.    The document which I referred says  that, this 'inbound handler' helps in processing the inbound pdf's which comes thro mail.       In this place we need to select the class developed with 2 methods, 1.Create Instance and 2. Handle PDF.    And the document also talks about creating a separate class and referring it in the exit rules (SO50).     I am not sure whether Inbound Handler is a replacement for Exit Rules (SO50) so something else.  Please Clarify.
    2. While generating the PDF file, as you know we call the series of function modules. I have problem with the FM ' CALL FUNCTION fm_name' . When this FM is executed,  normally it should generate the PDF and XML which will be available in fp_formoutput-pdf and fp_formoutput-xml.  But in this system even when there is no issues with the export parameters, the FM is not able to generate the PDF and XML. Both fp_formoutput-pdf and fp_formoutput-xml are coming as EMPTY. Result of which when the FM 'FP_JOB_OPEN' is called it displays the message 'No Job Started' and exits the program.  This same program works find in ECC 6.0 system. Can anyone thro some light on this?
    Line: -
    TYPES: BEGIN OF st_test,
           one   TYPE string,
           two   TYPE string,
           three TYPE string,
           END OF st_test.
    DATA: it_test TYPE st_test  OCCURS 0.
    DATA: wa_test TYPE st_test.
    DATA: fp_outputparams type sfpoutputparams.
    DATA: fm_name TYPE rs38l_fnam.
    DATA: fp_docparams TYPE sfpdocparams.
    DATA: result TYPE sfpjoboutput.
    DATA: fp_formoutput type fpformoutput.
    SELECTION-SCREEN BEGIN OF BLOCK b1 WITH FRAME TITLE text-b02.
    PARAMETERS: p_taskid TYPE grfntaskplan-taskplan_id DEFAULT 'DF492600B7308BF19F5E00237D624FE0' OBLIGATORY,
                p_email  TYPE ADR6-SMTP_ADDR DEFAULT 'a@b' OBLIGATORY,
                p_tmail  TYPE ADR6-SMTP_ADDR DEFAULT 'a@b'' OBLIGATORY,
                p_form   TYPE fpwbformname   DEFAULT 'ZAOF_TEST',
                p_langu  TYPE spras          NO-DISPLAY DEFAULT 'EN',
                p_countr TYPE land1          NO-DISPLAY DEFAULT 'US',
                p_pages  TYPE fppagecount    NO-DISPLAY DEFAULT 2,
                p_loop   TYPE i              NO-DISPLAY DEFAULT 1.
    SELECTION-SCREEN END OF BLOCK b1.
    INITIALIZATION.
    START-OF-SELECTION.
    wa_test-one = 'One'.
    wa_test-two = 'Two'.
    wa_test-three = 'Three'.
    append  wa_test to it_test.
    END-OF-SELECTION.
    CALL FUNCTION 'FP_FUNCTION_MODULE_NAME'
      EXPORTING
        i_name     = p_form
      IMPORTING
        e_funcname = fm_name.
    fp_outputparams-getpdf = 'X'.
    fp_outputparams-nodialog = 'X'.
    CALL FUNCTION 'FP_JOB_OPEN'
      CHANGING
        ie_outputparams = fp_outputparams
      EXCEPTIONS
        cancel          = 1
        usage_error     = 2
        system_error    = 3
        internal_error  = 4
        OTHERS          = 5.
    IF sy-subrc <> 0.
      MESSAGE ID sy-msgid TYPE sy-msgty NUMBER sy-msgno
          WITH sy-msgv1 sy-msgv2 sy-msgv3 sy-msgv4.
    ENDIF.
    DO p_loop TIMES.
      fp_docparams-langu   = 'E'. "p_langu.
      fp_docparams-country = 'US'."p_countr.
      fp_docparams-FILLABLE = 'F'.
      fp_docparams-dynamic = 'X'.
      fp_docparams-UPDATE_INTERACTION_CODE = 'X'.
      CALL FUNCTION fm_name
        EXPORTING
          /1bcdwb/docparams  = fp_docparams
          Ztest      = it_test
        IMPORTING
          /1bcdwb/FORMOUTPUT = fp_formoutput
        EXCEPTIONS
          cancel             = 1
          usage_error        = 2
          system_error       = 3
          internal_error     = 4.
    ENDDO.
    CALL FUNCTION 'FP_JOB_CLOSE'
      IMPORTING
        e_result       = result
      EXCEPTIONS
        usage_error    = 1
        system_error   = 2
        internal_error = 3
        OTHERS         = 4.
    IF sy-subrc <> 0.
      MESSAGE ID sy-msgid TYPE sy-msgty NUMBER sy-msgno
          WITH sy-msgv1 sy-msgv2 sy-msgv3 sy-msgv4.
    ENDIF.
    Thanks in Advance
    Vijai
    Edited by: Thomson VijaiAnand on Apr 21, 2010 11:15 AM

    Hi Thomson 
      I met a similar probleam.
      Could you explain how you get it through?
    Thanks

  • Search request issue in GRC AC10.0

    Hello Experts,
    When we want to check the status of the request logged by others by using the below option we are not getting any results
    GRC 10.0 with SP14.
    My Home ->My Profile -> Request Status then click on the Change Query. In the Change query screen enter the request number created by others and click on Preview.
    This is not authorization issue. We tested with user having SAP_ALL authorization.
    Does anyone has any idea?
    Thanks in advance
    Hari

    Hi Hari,
    When we talk about page My Home  / My Profile, this shows the information which is related to me/us only. If end user logon using this page/link, he/she can see his/her own data.
    Change Query is to filter the existing data which comes at the time of loading/refreshing the window. This should not show data out of scope.
    So request status using my home page would not be able to show data for other users.
    Search Request link is the only way to check others request data.
    Thanks & Regards
    Neeraj

  • Offline Form Issue in SAP GRC System

    Experts:
    I am working on creating a Offline Form for GRC Process Control  in SAP GRC System. I have couple of doubts.
    1. In the Form property, there is a new field call 'Inbound Handler'.    The document which I referred says  that, this 'inbound handler' helps in processing the inbound pdf's which comes thro mail.       In this place we need to select the class developed with 2 methods, 1.Create Instance and 2. Handle PDF.    And the document also talks about creating a separate class and referring it in the exit rules (SO50).     I am not sure whether Inbound Handler is a replacement for Exit Rules (SO50) so something else.  Please Clarify.
    2. While generating the PDF file, as you know we call the series of function modules. I have problem with the FM ' CALL FUNCTION fm_name' . When this FM is executed,  normally it should generate the PDF and XML which will be available in fp_formoutput-pdf and fp_formoutput-xml.  But in this system even when there is no issues with the export parameters, the FM is not able to generate the PDF and XML. Both fp_formoutput-pdf and fp_formoutput-xml are coming as EMPTY. Result of which when the FM 'FP_JOB_OPEN' is called it displays the message 'No Job Started' and exits the program.  This same program works find in ECC 6.0 system. Can anyone thro some light on this?
    TYPES: BEGIN OF st_test,
           one   TYPE string,
           two   TYPE string,
           three TYPE string,
           END OF st_test.
    DATA: it_test TYPE st_test  OCCURS 0.
    DATA: wa_test TYPE st_test.
    DATA: fp_outputparams type sfpoutputparams.
    DATA: fm_name TYPE rs38l_fnam.
    DATA: fp_docparams TYPE sfpdocparams.
    DATA: result TYPE sfpjoboutput.
    DATA: fp_formoutput type fpformoutput.
    SELECTION-SCREEN BEGIN OF BLOCK b1 WITH FRAME TITLE text-b02.
    PARAMETERS: p_taskid TYPE grfntaskplan-taskplan_id DEFAULT 'DF492600B7308BF19F5E00237D624FE0' OBLIGATORY,
                p_email  TYPE ADR6-SMTP_ADDR DEFAULT 'a@b' OBLIGATORY,
                p_tmail  TYPE ADR6-SMTP_ADDR DEFAULT 'a@b'' OBLIGATORY,
                p_form   TYPE fpwbformname   DEFAULT 'ZAOF_TEST',
                p_langu  TYPE spras          NO-DISPLAY DEFAULT 'EN',
                p_countr TYPE land1          NO-DISPLAY DEFAULT 'US',
                p_pages  TYPE fppagecount    NO-DISPLAY DEFAULT 2,
                p_loop   TYPE i              NO-DISPLAY DEFAULT 1.
    SELECTION-SCREEN END OF BLOCK b1.
    INITIALIZATION.
    START-OF-SELECTION.
    wa_test-one = 'One'.
    wa_test-two = 'Two'.
    wa_test-three = 'Three'.
    append  wa_test to it_test.
    END-OF-SELECTION.
    CALL FUNCTION 'FP_FUNCTION_MODULE_NAME'
      EXPORTING
        i_name     = p_form
      IMPORTING
        e_funcname = fm_name.
    fp_outputparams-getpdf = 'X'.
    fp_outputparams-nodialog = 'X'.
    CALL FUNCTION 'FP_JOB_OPEN'
      CHANGING
        ie_outputparams = fp_outputparams
      EXCEPTIONS
        cancel          = 1
        usage_error     = 2
        system_error    = 3
        internal_error  = 4
        OTHERS          = 5.
    IF sy-subrc <> 0.
      MESSAGE ID sy-msgid TYPE sy-msgty NUMBER sy-msgno
          WITH sy-msgv1 sy-msgv2 sy-msgv3 sy-msgv4.
    ENDIF.
    DO p_loop TIMES.
      fp_docparams-langu   = 'E'. "p_langu.
      fp_docparams-country = 'US'."p_countr.
      fp_docparams-FILLABLE = 'F'.
      fp_docparams-dynamic = 'X'.
      fp_docparams-UPDATE_INTERACTION_CODE = 'X'.
      CALL FUNCTION fm_name
        EXPORTING
          /1bcdwb/docparams  = fp_docparams
          Ztest      = it_test
        IMPORTING
          /1bcdwb/FORMOUTPUT = fp_formoutput
        EXCEPTIONS
          cancel             = 1
          usage_error        = 2
          system_error       = 3
          internal_error     = 4.
    ENDDO.
    CALL FUNCTION 'FP_JOB_CLOSE'
      IMPORTING
        e_result       = result
      EXCEPTIONS
        usage_error    = 1
        system_error   = 2
        internal_error = 3
        OTHERS         = 4.
    IF sy-subrc <> 0.
      MESSAGE ID sy-msgid TYPE sy-msgty NUMBER sy-msgno
          WITH sy-msgv1 sy-msgv2 sy-msgv3 sy-msgv4.
    ENDIF.
    Thanks in Advance
    Vijai
    Edited by: Thomson VijaiAnand on Apr 21, 2010 11:15 AM

    Hi Thomson 
      I met a similar probleam.
      Could you explain how you get it through?
    Thanks

Maybe you are looking for