GRC Migration
Hello GRC Exports,
We are planning to migrate GRC AC5.3 from Windows to Linux using the following procedure.
Source system: Dual Stack GRC AC 5.3 on Windowsn
1. Export/Import the dual stack to target server.
2. Post-Processing steps as per the attached document "GRC - Post system copy steps.docx"
Please suggest us what are all this to be taken care for this migration.
The customer is using all the GRC scenarios.
1. SAP GRC Risk Analysis and Remediation,
2. Compliant User Provisioning,
3. Enterprise Role Management Configuration and
4. Superuser Privilege Management Configuration
In case of Risk Analysis and Remediation, we know that we need to import Rules/Mitigation/Configuration settings.
Please guide what are all other things to be migrated in case of GRC AC 5.3 migartion for all the 4 above secnarios.
Thanks & Regards,
Hari
Hi Hari,
I havent seen the document you are referring to. But if the new machine wont use same host name, IP and FQDN I can see it will be a real pain.
Here is a snip from Note 1251014 - Homogeneous GRC system copy
The following needs to be checked and verified:
-All VIRSA and VT tables are copied over to the new system
-Check to verify old references for your old system do NOT exist in the new system:
1. Configuration > Connectors (Remove if not used)
2. If you are maintaining Workflow, (Configuration > Workflow) make sure the Workflow Service URL references the new host name. (For Compliant User Provisioning)
3. If you are maintaining Custom Tabs, reference the new host name and port (For Risk Analysis and Remediation)
4. Using your J2EE_Admin ID go to Webdynpro > Content Administrator > Maintain Jco Destinations. After a refresh the Connectors are normally not updated. You will need to edit them to reflect new client number, message server, user ID and password. Test and Ping the connection
5. Log back into Risk Analysis and Remediation and under Configuration > SAP Adapter and if the icon (square) is not colored, then select it to activate. Verify the host name and gateway are correct. The program ID comes from SM59 from the RFC destination
regards,
vit
Similar Messages
-
Hello Gurus,
I am looking for an Expert who could assist me in GRC Migration.
I have downloaded the Migration guide, which is available on Market Place.
There is a Migration Tool available (Java Tool), howevre there is nothing mentioned about the migration tool in Migration Guide. This is confusing.
Currently there 2 active modules in GRC 5.3 and those are RAR and SPM.
ARM need to be configured once we migrate to GRC 10.
I need help for migration planning or making a roadmap for Migration and also require help on requirement gathering / Business Blueprinting for ARM.
Please revert back on the same thread.
Thanks in advance.
Regards,
Atul RajwadeHi Atul
I need help for migration planning or making a roadmap for Migration and also require help on requirement gathering / Business Blueprinting for ARM.
This type of help is architecture and strategy experience. Have you done design work before?
If you are hoping for some assistance, you might get a better response if you provide what you are intending to do first and seek clarification on your thoughts rather then just say you need help without specify which parts your need assistance with.
Asking someone to revert back to you this information to close to completing system design for you.
If you do not know how to architect a solution, I recommend you seek a consultant to provide this service to you. The planning and roadmap will come back to the business process design, understanding what data needs to be migrated from 5.3 (e.g. rule set, mitigating controls, etc) as well as how GRC 10 is to be used.
Regards
Colleen -
Hello,
When exporting data from RAR from 5.3 system using GRC migration link i am getting permission error, even i have administator role assigned to me,
and Local folder has full access.
/export_acd\CONNECTORSdata.dat (Permission denied)
Thanks,
PrasantPrasanth,
While importing the .DAT files. I get the below error
"Failed to retrieve data due to failure reading dir"
Did you face this while migration. Any help would be appreciated.
Thanks,
Raghav -
Rule set migration from GRC 5.3 to GRC 10.0
Hello everyone,
I ask you this question: if I want to migrate from GRC 5.3 to GRC 10.0, can I keep my old custom rule set with no modification or I have to make some changes to it to import in GRC 10?
Thankyou in advance for the answers
Greetings
Gianluca
Edited by: Gianluca Mocini on Apr 1, 2011 5:33 PMHi,
The migration utility is very simple. You install it on GRC 5.3 box and then select the items you want to migrate. It will generate tab limited text files and you can use those files to import data into 10.0 box.
Regards,
Alpesh -
Migration from VIRSA 4.0 to GRC 10.0 (ARA)
Hi Guys,
We've just migrated from VIRSA 4.0 to GRC 10.0. We have only two connectors configured ECC and Finace System.
Rules have been generated and we're using the standard "global" ruleset. The rules seem to be generated successfully ( I've checked in the NWBC that the permissions appear after the risk generation and also I've checked some tables like GRACSYSRULE and GRACACTRULE and risks appear there).
When running a risk analysis report at user level in both the system VIRSA 4.0 and GRC 10.0 the no. of conflicts matches where as no. of mitigation doesnot match.Due to this mis-match we are not in a position to go 100% LIVE with GRC and decommisioning VIRSA. We use concept of mitigated roles and not users. Raised the concern with SAP too 2 weeks back and no luck yet.
Does anyone faced a similar issue? can you give me some light in order to solve the issue?
Many Thanks!
Ratan RoyHi Andrzej,
Thanks for the reply.
I have one more simple question: how can I change the Violation or Mitigation counts to any RISK Ids?
Say for example:I wanted to make changes in violation and mitigation counts in below mentioned risk.
Access Risk ID
Risk Description
No. of Conflict
No. of Mitigation
SOD Object
F020
Open closed periods previously enter incoming payments
72
45 -
Migration CC and FF data from Virsa 4.0 to GRC 10.1 Data Inconsistency
Hello Guru's
We have done Migration from VIRSA 4.0 Compliance Calibrator (CC) and Firefighter (FF) data from to GRCAC 10.1 system.
After Migration, data inconsistency is coming while validation.
Followed standard sap migration guide virsa 4.0 to 10.0
Patch level - GRC AC 10.1 system
SAP_BASIS
740
0008
SAPKB74008
0000
@6H\QAchieved with Support Package@
SAP Basis Component
SAP_ABA
740
0008
SAPKA74008
0000
@6H\QAchieved with Support Package@
Cross-Application Component
SAP_GWFND
740
0008
SAPK-74008INSAPGWFND
0000
@6H\QAchieved with Support Package@
SAP Gateway Foundation 7.40
SAP_UI
740
0010
SAPK-74010INSAPUI
0000
@6H\QAchieved with Support Package@
User Interface Technology 7.40
PI_BASIS
740
0008
SAPK-74008INPIBASIS
0000
@6H\QAchieved with Support Package@
Basis Plug-In
ST-PI
740
0000
0000
SAP Solution Tools Plug-In
SAP_BW
740
0008
SAPKW74008
0000
@6H\QAchieved with Support Package@
SAP Business Warehouse
GRCFND_A
V1100
0006
SAPK-V1106INGRCFNDA
0000
@6H\QAchieved with Support Package@
GRC Foundation ABAP
GRCPINW
V1100_731
0006
SAPK-11506INGRCPINW
0000
@6H\QAchieved with Support Package@
SAP GRC NetWeaver Plug-In
IW_FNDGC
100
0002
SAPK-10002INIWFNDGC
0000
@6H\QAchieved with Support Package@
SAP IW FNDGC 100
WEBCUIF
747
0005
SAPK-74705INWEBCUIF
0000
@6H\QAchieved with Support Package@
SAP Web UI Framework
IW_CBS
200
0009
SAPK-20009INIWCBS
0000
@6H\QAchieved with Support Package@
SAP IW CBS 200
IW_CNT
200
0009
SAPK-20009INIWCNT
0000
@6H\QAchieved with Support Package@
SAP IW CNT 200
IW_SCS
200
0009
SAPK-20009INIWSCS
0000
@6H\QAchieved with Support Package@
Screen Scraping
POASBC
100_731
0001
SAPK-10201INPOASBC
0000
@6H\QAchieved with Support Package@
POA Shared Business Components
Patch level VIRSA 4.0 system
GRCPINW
V1100_731
0008
SAPK-11508INGRCPINW
SAP GRC NetWeaver Plug-In
Kindly let us know after migration, any sap notes need to install.
Regards,
karunakarHello Prasant,
We have migrated VIRSA 4 0 to GRC 10.1 system, after migration we have below issues.
1. In table GRACSODRISK (not able to see the medium risk, but in NWBC screen (Access Risks) we are seeing the medium risks.
2. In Function Permission.txt file ( only AND is coming for all, but some OR is avaiable in VIRSA 4 0 system.
And for gap (it automatically taken AND
Example:
AM02
FB02
F_BKPF_BED
ACTVT
2
AND
0
AM02
FB02
F_BKPF_BED
ACTVT
3
AND
1
AM02
FB02
F_BKPF_BED
BRGRU
AND
1
AM02
FB02
F_BKPF_BEK
ACTVT
2
AND
0
AM02
FB02
F_BKPF_BEK
ACTVT
3
AND
1
AM02
FB02
F_BKPF_BEK
BRGRU
AND
1
kindly suggest.
Regards,
Karunakar -
Hello All,
We have migrated data from virsa 4.0 to grc 10.1, all virsa mitigation
approvers and controllers got migrated but we are not able to map new
mitigation approver and controller to the mitigation ids.
The steps we have done below.
1. We have created user id in su01 with necessary authorizations
2. we have declared this user id in Access control owners as a
mitigation approver and assigned to the organization unit
Now we are trying to map to newly created mitigation approver to the
mitigation id but we are not able to find that approver id for the mitigation ids. (only old mitigation ids came from VIRSA only we are able to see, not able to add new mitigation approvers / controllers to the mitigation ids)
Kindly check this issue, this is very critical for us.
Thanks in advance.
Regards,
KarunakarHi Karunakar,
- Assign Owners to Organization unit
- Make these owners as Mitigation Approver and Monitor
- Create Mitigation Id in this Org. unit
Regards
plaban -
GRC 10 Upgrade: Migration Tool Problem
Hi All,
I am in a process to migrate the GRC 5.3 data to GRC 10.0. I have successfully installed migration tool GRCACMIG00_0.sca. I accessed this tool and found the below option on the initial page:
1. DAta Export: Export AC 5.3 Configuration and Master Data
2. Reports: Export Migration Data+Quick Links
3. Administration: Administer Data Export Processes+Quick Links
I have successfully exported the configuration data. However, when I am trying to export the transactional data, much to my surprise, I found that, the option Export AC 5.3 Transactional Data is not available under Data Export.
This link is clearly shown in the migration guide. However, I am unable to get it.
Has anyone got inot such problem? If yes, please share the solution to this problem.
Woiuld appreciate help
Regards,
FaisalHi Prashant,
We are already on higher SP level on 5.3. What else can be causing this issue.
Where can we get more information on this. Transacional data export option is NOT VISIBLE when migration URL or application is executed -
Greetings,
We are currently on GRC 5.3 SP 18 (Java ONLY) and migrating to GRC 10.1. I referred the Migration Guide which outlines that GRC 5.3 needs to be upgraded to SP 20 as pre-requisite for using the "Migration Tool" . Our BASIS team is reluctant to perform this upgrade from SP 18 to SP 20.
Having said thus, I'm exploring options of migrating data from 5.3 to 10.1 without using the "Migration Tool:.
Rule set Migration:
I'm in the process of preparing the 9 different files (listed below) and later utilize the "Upload Rule" option for migrating the Rule set data from 5.3 to 10.1.
While I'm able to gather data for most of the files I'm not sure how can I obtain the data pertaining to the two files (Function Actions and Function Permissions) underlined and highlighted in Red below.
1. Business Process
2. Function
3. Function Business Process
4. Function Actions
5 .Function Permissions
6. Rule Set
7. Risk
8. Risk Description
9. Risk Rule Set Relationship
10. Risk Owner Relationship
Can someone please enlighten me and share their experience with regards to this exercise. Really appreciate your help !
- Janantik.I have done this successfully before. Because you are having issues, I would NOT recommend using the migration tool to move the ruleset. Instead:
1. Download the ruleset files from 5.3
2. The 5.3 tcode-permission file, which defines which tcode permissions from SU24 need to be checked during risk analysis, needs to be split into the two files you mention above in red.
FUNCTION_ACTION : this file represents S_TCODE objects and TCD fields mapped to each function (Function to Tcode relationship). In the 5.3 file, you will filter on object S_TCODE and field TCD, and you will get a complete list that now represents "FUNCTION_ACTION". BUT instead of having all the jumbled permission info, you will just have 3 columns: Function - Tcode - Status.
3. The remaining permissions that are left over, after taking out the S_TCODE -TCD items, represent the "FUNCTION_PERMISSION" file in GRC 10.
4. Manually create the excel spreadsheets for each file.
5. Copy and past each sheet to a unique .txt file.
6. Upload the ruleset manually through SPRO-->GRC-->Access Control-->Access Risk Analysis-->SoD Rules-->Upload SoD Rules.
7. Select each file and then upload to the correct Logical Group.
This is a huge pain, but it works. Let me know how this goes and if you need any assistance.
-Ken -
Hi All,
One of my client is expecting to use GRC 10.1. Currently they have GRC 5.3 and want to upgrade to GRC 10.1
Can anybody give me benefits of both options - Upgrade vs Migration then it would be great ?
Thanks,
Aditi ShahHello Steve,
Migration you deploy Java component and extract data form 5.3 and import in 10.
still lots of work to be done like and implementation as there are pre-requisite.
second approach does not need to extract all data from 5.3 system(apart from Ruleset,if at all its required)
I never migrate workflows better to create new one identical and faster i believe .
Second approach is little time consuming but good from my point of view.
In java stack people normally go with 2 system landscape .
there has been client where in ABAP people go with 3 system landscape.
now where tricky consulting part play and which data to be imported where.
and few other points needed to be looked like when you use tools and import data.
you actually import all transaction data which contain all active and inactive
expired.
in you go with 2nd option you will have only valid data to start with.
Regards,
Prasant -
Migrate SAP GRC AC 5.3 SP13 (System A - System B)
Hello all,
currently we have setup 2 SAP GRC AC 5.3 SP13 SAP instances (DEV / PRD) for the customer's SAP ERP system landscape. Those systems also contain some customer business functionality.
Because of business requirements the PRD Java Instance needs to be deleted and built up again from scratch with another WebAS Java Release Version (same SID, same Hardware, etc.).
Our plan is now to setup a dedicated Java instance which will contain the PRD installation of SAP GRC AC (new SID, different hardware, etc.) to avoid similar problems in the future. Therefore we have to migrate all of the RAR data from the "old" Java instance to the newly setup Java system. We especially need to migrate all of the RAR analysis data (e.g. SoD violation analyses of previous months, etc.), otherwise we would loose all of this information when the "old" installation is deleted and built up again.
I have checked all of the SAP documentation for SAP GRC AC 5.3 and only found these clues:
In document "SAP GRC AC 5.3 Configuration Guide v3.16 - Chapter Utilities -> Export Utility / Import Utility" it only says
something about exporting / importing rule sets, mititgating controls, etc. Can these tools also be used to export / import
analysis data too ?
In document "SAP GRC AC 5.3 Installation Guide v2.2 - Chapter Post-System Copy Configuration" it only says something about
steps to be executed if the SAP GRC AC installation was done via system copy. But there is no information about migrating RAR analysis data.
In document "SAP GRC AC 5.3 Operations Guide v2.1 - 7.2 Backup strategies" it says that in order to restore the system "you need to back up all tables with the following prefixes: VIRSA and VT". Can we simply do a backup of all of those tables, import
them into the database of the new system and the use the export/import utility to move all of the configuration etc. from the old system to the new one ?
Regards,
Benjamin
Edited by: Benjamin Schlotz on Jun 30, 2011 11:57 AMHello Sunny, hello Frank,
thanks for the quick replies.
I did know about the SNOTE regarding the post migration steps, but the To-Do's Frank posted had some additional info in them.
One question remains still open though:
How to actually migrate all the GRC AC RAR data (incl. old analysis data) from System A to System B
Our intended course of action would be:
1. Deploy SAP GRC AC on System B (same Version, SP-level etc. as in System A)
2. Export all VIRSA* and VT* tables from DB of System A, import them all in DB of system B
3. Export all configuration, etc. from System A, import it into System B (using the export / import functionality within RAR)
4. Do all the post-migration tasks described by you
Would you agree with that course of action / know any pitfalls, etc ? We need to have all the "old" RAR analysis data from System A in System B after the migration because System A will be shutdown and deleted.
Regards,
Benjamin -
*Hello Experts ,*
*We are planning for Migrate existing GRC ( 5.2 ) from Windows platform to HPUX.*
*Whereas my question is , do I need to deploy GRC component after Target Server build ( installing Web as JAVA ) or will my Export / Import will take care of it..?*
*Thanks*
*Deepak Joshi*>Whereas my question is , do I need to deploy GRC component after Target Server build ( installing Web as JAVA ) or will my >Export / Import will take care of it..?*
Once basis team have successfully migrated to new hardware using export import method, there is no further steps to be done if the target system host name and SAP GRC instance details are same with your existing GRC system. However if the target system hostname and instance details are like port etc are changed then you need to do some post migration steps like changing the URLS, changing the ports etc as per the topics under post System copy steps in the Installation/configuration guides. -
Migration MIC to GRC Process Control
Dear colleagues,
Does anyone have experience in migrating MIC 1.0 or 2.0 to GRC Process Control?
I got different information from the same company (...don't ask) regarding the possibility to migrate, so I just wonder who really knows.
Thank you in advance.
RRLet me be more specific. I am relating to the product currently available:
A migration path from MIC to Process Control is not available yet. A migration from MIC to Process Control has not been done yet.
However as both applications have similar objectives a migration may be feasible as a project solution. SAP may also offer such a migration. -
Migration of GRC AC 5.2 configurations into GRC AC 5.3
Hello,
I already have GRC AC 5.2 on 1 system. We have GRC AC 5.3 installed on a seperate system.
We would like to download/ upload all the rules, functions, risks, mitigations etc from old GRC AC 5.2 to new GRC AC 5.3 system.
My query is.
What would be the best approach among the below 3 options.
Option 1- Download rules, functions, risks, mitigations from old GRC AC 5.2 and upload them to new GRC AC 5.3 system. (I assume it will append)
Option 2- Export rules, functions, risks, mitigations from old GRC AC 5.2 and Import them to new GRC AC 5.3 system. (I assume it is overwrite)
Option 3- Install GRC AC 5.3 System and upload 5.3 ruleset, functions, risks and mitigations and then download 5.2 rules, risks, mitigations, and upload them in 5.3?
Thanks for your valuable inputs in advance.
Thanks,
HaleemHaleem,
Here is my respone:
Option 1: This is not even an option. There is no way you can download and upload the files with append option. Append option requires files in totally different format.
Option 2: This may or may not work. I have never done it.
Option 3: This is your best bet.
Alpesh -
GRC AC5.3 CUP Requests Transaction Data Migration to 10.1
Hi,
We are starting a new upgrade from AC5.3 to AC 10.1 project. In migration document it mentioned that we can migrate CUP requests transactional data to 10.1.
our management is asking to maintain the CUP transaction data in AC10.1 application for future reference for auditing requirements. After closing of all old CUP requests we need to migrate CUP Requests Data into 10.1.
Is it possible? If possible, Please let me know if there are any challenges from your experience from your upgrade projects of same requirement.
Thanks,
Sathish.Hi Ram,
Good Day,
Is that possible to download old CUP request as PDF format in AC 10.1 as part of data migration
Regards
Narayanan
Maybe you are looking for
-
I am new to PSE 12 and am trying to import my photos from folders on my desktop which I have organized by the categories I had in my previous program (Creative Memories). Many of my photos are located in multiple folders, i.e. one photo could be in
-
my older iPod my husband wants to use and his netbook does not have cd drive. How do I down load iPod and iTunes info for this product so he can now use it?
-
Word 2010 Template Saving issues
When I save my new templates, they do not appear in the "My Templates" folder. What is the path for this folder? I can find the template in Recently created, but never in My Templates. I don't see a way to set the template path in the options secti
-
Hi All, BDLS conversion job completed successfully but spool shows below tables in red. Table Name Field Name Number of Relevant Entries Number of Converted Entries TBD05 RCVSYSTEM
-
We keep getting an Error has ocurred while downloading Adobe Reader Update.