GRC Migration

Hello GRC Exports,
We are planning to migrate GRC AC5.3 from Windows to Linux using the following procedure.
Source system: Dual Stack GRC AC 5.3 on Windowsn
1. Export/Import the dual stack to target server.
2. Post-Processing steps as per the attached document "GRC - Post system copy steps.docx"
Please suggest us what are all this to be taken care for this migration.
The customer is using all the GRC scenarios.
    1. SAP GRC Risk Analysis and Remediation,
    2. Compliant User Provisioning,
    3. Enterprise Role Management Configuration and
    4. Superuser Privilege Management Configuration
In case of Risk Analysis and Remediation, we know that we need to import Rules/Mitigation/Configuration settings.
Please guide what are all other things to be migrated in case of GRC AC 5.3 migartion for all the 4 above secnarios.
Thanks & Regards,
Hari

Hi Hari,
I havent seen the document you are referring to. But if the new machine wont use same host name, IP and FQDN I can see it will be a real pain.
Here is a snip from  Note 1251014 - Homogeneous GRC system copy
The following needs to be checked and verified:
-All VIRSA and VT tables are copied over to the new system
-Check to verify old references for your old system do NOT exist in the new system:
1. Configuration > Connectors (Remove if not used)
2. If you are maintaining Workflow, (Configuration > Workflow) make sure the Workflow Service URL references the new host name. (For Compliant User Provisioning)
3. If you are maintaining Custom Tabs, reference the new host name and port (For Risk Analysis and Remediation)
4. Using your J2EE_Admin ID go to Webdynpro > Content Administrator > Maintain Jco Destinations. After a refresh the Connectors are normally not updated. You will need to edit them to reflect new client number, message server, user ID and password. Test and Ping the connection
5. Log back into Risk Analysis and Remediation and under Configuration > SAP Adapter and if the icon (square) is not colored, then select it to activate. Verify the host name and gateway are correct. The program ID comes from SM59 from the RFC destination
regards,
vit

Similar Messages

  • Need help in GRC Migration

    Hello Gurus,
    I am looking for an Expert who could assist me in GRC Migration.
    I have downloaded the Migration guide, which is available on Market Place.
    There is a Migration Tool available (Java Tool), howevre there is nothing mentioned about the migration tool in Migration Guide. This is confusing.
    Currently there 2 active modules in GRC 5.3 and those are RAR and SPM.
    ARM need to be configured once we migrate to GRC 10.
    I need help for migration planning or making a roadmap for Migration and also require help on requirement gathering / Business Blueprinting for ARM.
    Please revert back on the same thread.
    Thanks in advance.
    Regards,
    Atul Rajwade

    Hi Atul
    I need help for migration planning or making a roadmap for Migration and also require help on requirement gathering / Business Blueprinting for ARM.
    This type of help is architecture and strategy experience. Have you done design work before?
    If you are hoping for some assistance, you might get a better response if you provide what you are intending to do first and seek clarification on your thoughts rather then just say you need help without specify which parts your need assistance with.
    Asking someone to revert back to you this information to close to completing system design for you.
    If you do not know how to architect a solution, I recommend you seek a consultant to provide this service to you. The planning and roadmap will come back to the business process design, understanding what data needs to be migrated from 5.3 (e.g. rule set, mitigating controls, etc) as well as how GRC 10 is to be used.
    Regards
    Colleen

  • RAR DATA Export issue

    Hello,
    When exporting data from RAR from 5.3 system using GRC migration link i am getting permission error, even i have administator role assigned to me,
    and Local folder has full access.
    /export_acd\CONNECTORSdata.dat (Permission denied)
    Thanks,
    Prasant

    Prasanth,
    While importing the .DAT files. I get the below error
    "Failed to retrieve data due to failure reading dir"
    Did you face this while migration. Any help would be appreciated.
    Thanks,
    Raghav

  • Rule set migration from GRC 5.3 to GRC 10.0

    Hello everyone,
    I ask you this question: if I want to migrate from GRC 5.3 to GRC 10.0, can I keep my old custom rule set with no modification or I have to make some changes to it to import in GRC 10?
    Thankyou in advance for the answers
    Greetings
    Gianluca
    Edited by: Gianluca Mocini on Apr 1, 2011 5:33 PM

    Hi,
      The migration utility is very simple. You install it on GRC 5.3 box and then select the items you want to migrate. It will generate tab limited text files and you can use those files to import data into 10.0 box.
    Regards,
    Alpesh

  • Migration from VIRSA 4.0 to GRC 10.0 (ARA)

    Hi Guys,
    We've just migrated from VIRSA 4.0 to GRC 10.0. We have only two connectors configured ECC and Finace System.
    Rules have been generated and we're using the standard "global" ruleset. The rules seem to be generated successfully ( I've checked in the NWBC that the permissions appear after the risk generation and also I've checked some tables like GRACSYSRULE and GRACACTRULE and risks appear there).
    When running  a risk analysis report at user level in both the system VIRSA 4.0 and GRC 10.0 the no. of conflicts matches where as no. of mitigation doesnot match.Due to this mis-match we are not in a position to go 100% LIVE with GRC and decommisioning VIRSA. We use concept of mitigated roles and not users. Raised the concern with SAP too 2 weeks back and no luck yet.
    Does anyone faced a similar issue? can you give me some light in order to solve the issue?
    Many Thanks!
    Ratan Roy

    Hi Andrzej,
    Thanks for the reply.
    I have one more simple question: how can I change the Violation or Mitigation counts to any RISK Ids?
    Say for example:I wanted to make changes in violation and mitigation counts in below mentioned risk.
    Access Risk ID
    Risk Description
    No. of Conflict
    No. of Mitigation
    SOD Object
    F020
    Open closed periods previously enter incoming payments
    72
    45

  • Migration CC and FF data from Virsa 4.0 to GRC 10.1 Data Inconsistency

    Hello Guru's
    We have done Migration from VIRSA 4.0 Compliance Calibrator (CC) and Firefighter (FF) data from  to GRCAC 10.1 system.
    After Migration, data inconsistency is coming while validation.
    Followed standard sap migration guide virsa 4.0 to 10.0
    Patch level  - GRC AC 10.1 system
    SAP_BASIS
    740
    0008
    SAPKB74008
    0000
    @6H\QAchieved with Support Package@
    SAP Basis Component
    SAP_ABA
    740
    0008
    SAPKA74008
    0000
    @6H\QAchieved with Support Package@
    Cross-Application Component
    SAP_GWFND
    740
    0008
    SAPK-74008INSAPGWFND
    0000
    @6H\QAchieved with Support Package@
    SAP Gateway Foundation 7.40
    SAP_UI
    740
    0010
    SAPK-74010INSAPUI
    0000
    @6H\QAchieved with Support Package@
    User Interface Technology 7.40
    PI_BASIS
    740
    0008
    SAPK-74008INPIBASIS
    0000
    @6H\QAchieved with Support Package@
    Basis Plug-In
    ST-PI
    740
    0000
    0000
    SAP Solution Tools Plug-In
    SAP_BW
    740
    0008
    SAPKW74008
    0000
    @6H\QAchieved with Support Package@
    SAP Business Warehouse
    GRCFND_A
    V1100
    0006
    SAPK-V1106INGRCFNDA
    0000
    @6H\QAchieved with Support Package@
    GRC Foundation ABAP
    GRCPINW
    V1100_731
    0006
    SAPK-11506INGRCPINW
    0000
    @6H\QAchieved with Support Package@
    SAP GRC NetWeaver Plug-In
    IW_FNDGC
    100
    0002
    SAPK-10002INIWFNDGC
    0000
    @6H\QAchieved with Support Package@
    SAP IW FNDGC 100
    WEBCUIF
    747
    0005
    SAPK-74705INWEBCUIF
    0000
    @6H\QAchieved with Support Package@
    SAP Web UI Framework
    IW_CBS
    200
    0009
    SAPK-20009INIWCBS
    0000
    @6H\QAchieved with Support Package@
    SAP IW CBS 200
    IW_CNT
    200
    0009
    SAPK-20009INIWCNT
    0000
    @6H\QAchieved with Support Package@
    SAP IW CNT 200
    IW_SCS
    200
    0009
    SAPK-20009INIWSCS
    0000
    @6H\QAchieved with Support Package@
    Screen Scraping
    POASBC
    100_731
    0001
    SAPK-10201INPOASBC
    0000
    @6H\QAchieved with Support Package@
    POA Shared Business Components
    Patch level VIRSA 4.0 system
    GRCPINW
    V1100_731
    0008
    SAPK-11508INGRCPINW
    SAP GRC NetWeaver Plug-In
    Kindly let us know after migration, any sap notes need to install.
    Regards,
    karunakar

    Hello Prasant,
    We have migrated VIRSA 4 0 to GRC 10.1 system, after migration we have below issues.
    1. In table GRACSODRISK (not able to see the medium risk, but in NWBC screen (Access Risks) we are seeing the medium risks.
    2. In Function Permission.txt file ( only AND is coming for all, but some OR is avaiable in VIRSA 4 0 system.
    And for gap (it automatically taken AND
    Example:
    AM02
    FB02
    F_BKPF_BED
    ACTVT
    2
    AND
    0
    AM02
    FB02
    F_BKPF_BED
    ACTVT
    3
    AND
    1
    AM02
    FB02
    F_BKPF_BED
    BRGRU
    AND
    1
    AM02
    FB02
    F_BKPF_BEK
    ACTVT
    2
    AND
    0
    AM02
    FB02
    F_BKPF_BEK
    ACTVT
    3
    AND
    1
    AM02
    FB02
    F_BKPF_BEK
    BRGRU
    AND
    1
    kindly suggest.
    Regards,
    Karunakar

  • We have migrated data from virsa 4.0 to grc 10.1, all virsa mitigation approvers and controllers got migrated but we are not able to map new mitigation approver and controller to the mitigation ids.

    Hello All,
    We have migrated data from virsa 4.0 to grc 10.1, all virsa mitigation
    approvers and controllers got migrated but we are not able to map new
    mitigation approver and controller to the mitigation ids.
    The steps we have done below.
    1. We have created user id in su01 with necessary authorizations
    2. we have declared this user id in Access control owners as a
        mitigation approver and assigned to the organization unit
    Now we are trying to map to newly created mitigation approver to the
    mitigation id but we are not able to find that approver id for the mitigation ids. (only old mitigation ids came from VIRSA only we are able to see, not able to add new mitigation approvers / controllers to the mitigation ids)
    Kindly check this issue, this is very critical for us.
    Thanks in advance.
    Regards,
    Karunakar

    Hi Karunakar,
    - Assign Owners to Organization unit
    - Make these owners as Mitigation Approver and Monitor
    - Create Mitigation Id in this Org. unit
    Regards
    plaban

  • GRC 10 Upgrade: Migration Tool Problem

    Hi All,
    I am in a process to migrate the GRC 5.3 data to GRC 10.0. I have successfully installed migration tool GRCACMIG00_0.sca. I accessed this tool and found the below option on the initial page:
    1. DAta Export: Export AC 5.3 Configuration and Master Data
    2. Reports: Export Migration Data+Quick Links
    3. Administration: Administer Data Export Processes+Quick Links
    I have successfully exported the configuration data. However, when I am trying to export the transactional data, much to my surprise, I found that, the option Export AC 5.3 Transactional Data is not available under Data Export.
    This link is clearly shown in the migration guide. However, I am unable to get it.
    Has anyone got inot such problem? If yes, please share the solution to this problem.
    Woiuld appreciate help
    Regards,
    Faisal

    Hi Prashant,
    We are already on higher SP level on 5.3. What else can be causing this issue.
    Where can we get more information on this. Transacional data export option is NOT VISIBLE when migration URL or application is executed

  • How to migrate Master Data (Rule set etc.) from GRC 5.3 to 10.1 without using the "Migration Tool"

    Greetings,
    We are currently on GRC 5.3 SP 18 (Java ONLY) and migrating to GRC 10.1. I referred the Migration Guide which outlines that GRC 5.3 needs to be upgraded to SP 20 as pre-requisite for using the "Migration Tool" . Our BASIS team is reluctant to perform this upgrade from SP 18 to SP 20.
    Having said thus, I'm exploring options of migrating data from 5.3 to 10.1 without using the "Migration Tool:.
    Rule set Migration:
    I'm in the process of preparing the 9 different files (listed below) and later utilize the "Upload Rule" option for migrating the Rule set data from 5.3 to 10.1.
    While I'm able to gather data for most of the files I'm not sure how can I obtain the data pertaining to the two files (Function Actions and Function Permissions) underlined and highlighted in Red below.
    1. Business Process
    2. Function
    3. Function Business Process
    4. Function Actions
    5 .Function Permissions
    6. Rule Set
    7. Risk
    8. Risk Description
    9. Risk Rule Set Relationship
    10. Risk Owner Relationship
    Can someone please enlighten me and share their experience with regards to this exercise. Really appreciate your help !
    - Janantik.

    I have done this successfully before.  Because you are having issues, I would NOT recommend using the migration tool to move the ruleset.  Instead:
    1. Download the ruleset files from 5.3
    2. The 5.3 tcode-permission file, which defines which tcode permissions from SU24 need to be checked during risk analysis, needs to be split into the two files you mention above in red.
    FUNCTION_ACTION : this file represents S_TCODE objects and TCD fields mapped to each function (Function to Tcode relationship).  In the 5.3 file, you will filter on object S_TCODE and field TCD, and you will get a complete list that now represents "FUNCTION_ACTION".  BUT instead of having all the jumbled permission info, you will just have 3 columns: Function - Tcode - Status.
    3. The remaining permissions that are left over, after taking out the S_TCODE -TCD items, represent the "FUNCTION_PERMISSION" file in GRC 10.
    4. Manually create the excel spreadsheets for each file.
    5. Copy and past each sheet to a unique .txt file.
    6. Upload the ruleset manually through SPRO-->GRC-->Access Control-->Access Risk Analysis-->SoD Rules-->Upload SoD Rules.
    7. Select each file and then upload to the correct Logical Group.
    This is a huge pain, but it works.  Let me know how this goes and if you need any assistance.
    -Ken

  • Which option is the best - Upgrade from GRC 5.3 to 10.1 or migration from GRC 5.3 to 10.1

    Hi All,
    One of my client is expecting to use GRC 10.1. Currently they have GRC 5.3 and want to upgrade to GRC 10.1
    Can anybody give me benefits of both options - Upgrade vs Migration then it would be great ?
    Thanks,
    Aditi Shah

    Hello Steve,
    Migration you deploy Java component and extract data form 5.3 and import in 10.
    still lots of work to be done like and implementation as there are pre-requisite.
    second approach does not need to extract all data from 5.3 system(apart from Ruleset,if at all its required)
    I never migrate workflows better to create new one identical and faster i believe .
    Second approach is little time consuming but good from my point of view.
    In java stack people normally go with 2 system landscape .
    there has been client where in ABAP people go with 3 system landscape.
    now where tricky consulting part play and which data to be imported where.
    and few other points needed to be looked like when you use tools and import data.
    you actually import all transaction  data which contain all active and inactive
    expired.
    in you go with 2nd option you will have only valid data to start with.
    Regards,
    Prasant

  • Migrate SAP GRC AC 5.3 SP13 (System A - System B)

    Hello all,
    currently we have setup 2 SAP GRC AC 5.3 SP13 SAP instances (DEV / PRD) for the customer's SAP ERP system landscape. Those systems also contain some customer business functionality.
    Because of business requirements the PRD Java Instance needs to be deleted and built up again from scratch with another WebAS Java Release Version (same SID, same Hardware, etc.).
    Our plan is now to setup a dedicated Java instance which will contain the PRD installation of SAP GRC AC (new SID, different hardware, etc.) to avoid similar problems in the future. Therefore we have to migrate all of the RAR data from the "old" Java instance to the newly setup Java system. We especially need to migrate all of the RAR analysis data (e.g. SoD violation analyses of previous months, etc.), otherwise we would loose all of this information when the "old" installation is deleted and built up again.
    I have checked all of the SAP documentation for SAP GRC AC 5.3 and only found these clues:
    In document "SAP GRC AC 5.3 Configuration Guide v3.16 - Chapter Utilities -> Export Utility / Import Utility" it only says
    something about exporting / importing rule sets, mititgating controls, etc. Can these tools also be used to export / import
    analysis data too ?
    In document "SAP GRC AC 5.3 Installation Guide v2.2 - Chapter Post-System Copy Configuration" it only says something about
    steps to be executed if the SAP GRC AC installation was done via system copy. But there is no information about migrating RAR analysis data.
    In document "SAP GRC AC 5.3 Operations Guide v2.1 - 7.2 Backup strategies" it says that in order to restore the system "you need to back up all tables with the following prefixes: VIRSA and VT". Can we simply do a backup of all of those tables, import
    them into the database of the new system and the use the export/import utility to move all of the configuration etc. from the old system to the new one ?
    Regards,
    Benjamin
    Edited by: Benjamin Schlotz on Jun 30, 2011 11:57 AM

    Hello Sunny, hello Frank,
    thanks for the quick replies.
    I did know about the SNOTE regarding the post migration steps, but the To-Do's Frank posted had some additional info in them.
    One question remains still open though:
    How to actually migrate all the GRC AC RAR data (incl. old analysis data) from System A to System B
    Our intended course of action would be:
    1. Deploy SAP GRC AC on System B (same Version, SP-level etc. as in System A)
    2. Export all VIRSA* and VT* tables from DB of System A, import them all in DB of system B
    3. Export all configuration, etc. from System A, import it into System B (using the export / import functionality within RAR)
    4. Do all the post-migration tasks described by you
    Would you agree with that course of action / know any pitfalls, etc ? We need to have all the "old" RAR analysis data from System A in System B after the migration because System A will be shutdown and deleted.
    Regards,
    Benjamin

  • GRC Landscape OS Migration

    *Hello Experts ,*
    *We are planning for Migrate existing GRC ( 5.2 ) from Windows platform to HPUX.*
    *Whereas my question is , do I need to deploy GRC component after Target Server build ( installing Web as JAVA ) or will my Export / Import will take care of it..?*
    *Thanks*
    *Deepak Joshi*

    >Whereas my question is , do I need to deploy GRC component after Target Server build ( installing Web as JAVA ) or will my >Export / Import will take care of it..?*
    Once basis team have successfully migrated  to new hardware using export import method, there is no further steps to be done if the target system host name and SAP GRC instance details are same with your existing GRC system. However if the target system hostname and  instance details are  like port etc are changed then you need to do some post migration steps like changing the URLS, changing the ports etc as per the  topics  under post  System copy steps in the Installation/configuration guides.

  • Migration MIC to GRC Process Control

    Dear colleagues,
    Does anyone have experience in migrating MIC 1.0 or 2.0 to GRC Process Control?
    I got different information from the same company (...don't ask) regarding the possibility to migrate, so I just wonder who really knows.
    Thank you in advance.
    RR

    Let me be more specific. I am relating to the product currently available:
    A migration path from MIC to Process Control is not available yet. A migration from MIC to Process Control has not been done yet.
    However as both applications have similar objectives a migration may be feasible as a project solution. SAP may also offer such a migration.

  • Migration of GRC AC 5.2 configurations into GRC AC 5.3

    Hello,
    I already have GRC AC 5.2 on 1 system. We have GRC AC 5.3 installed on a seperate system.
    We would like to download/ upload all the rules, functions, risks, mitigations etc from old GRC AC 5.2 to new GRC AC 5.3 system.
    My query is.
    What would be the best approach among the below 3 options.
    Option 1- Download rules, functions, risks, mitigations from old GRC AC 5.2 and upload them to new GRC AC 5.3 system. (I assume it will append)
    Option 2- Export rules, functions, risks, mitigations from old GRC AC 5.2 and Import them to new GRC AC 5.3 system. (I assume it is overwrite)
    Option 3- Install GRC AC 5.3 System and upload 5.3 ruleset, functions, risks and mitigations and then download 5.2 rules, risks, mitigations, and upload them in 5.3?
    Thanks for your valuable inputs in advance.
    Thanks,
    Haleem

    Haleem,
      Here is my respone:
    Option 1: This is not even an option. There is no way you can download and upload the files with append option. Append option requires files in totally different format.
    Option 2: This may or may not work. I have never done it.
    Option 3: This is your best bet.
    Alpesh

  • GRC AC5.3 CUP Requests Transaction Data Migration to 10.1

    Hi,
    We are starting a new upgrade from AC5.3 to AC 10.1 project. In migration document it mentioned that we can migrate CUP requests transactional data to 10.1.
    our management is asking to maintain the CUP transaction data in AC10.1 application for future reference for auditing requirements. After closing of all old CUP requests we need to migrate CUP Requests Data into 10.1.
    Is it possible? If possible, Please let me know if there are any challenges from your experience from your upgrade projects of same requirement.
    Thanks,
    Sathish.

    Hi Ram,
    Good Day,
    Is that possible to download old CUP request as PDF  format in AC 10.1 as part of  data migration
    Regards
    Narayanan

Maybe you are looking for