AC 5.3 RAR: Adhoc analysis

Hi experts,
today we added another client (new source) from the ERP system to Access Control. Thus we have 2 clients from one ERP system and another seperate ERP system connected to Access Control. We also updated the functions for the new system and generated the rules for the corporate ruleset . From my point of view all requirements for an adhoc analysis are met.
When I perform risk analysis on user level for all users, I receive no results.
When I perform exactly the same analysis giving specific user as arguments, I receive results.
The risk analysis on roles works also fine !
Risk analysis for the other client and the other ERP system work fine.
Do you guys have any idea why a risk analysis for all user doesn't work in my case ?
Thanks !
Regards,
Max

Hi,
I tried to look at the log files (ccapcomp.0.log) to find out how the risk analysis in this specific settings run ... for me, it runs way too fast ... there are about 150 users in this client (~2500 on the whole system) and the analysis takes only 35 msec ???? See the log below:
INFO: Foreground : Exec Risk Analysis
Jul 13, 2011 4:35:47 PM com.virsa.cc.xsys.riskanalysis.AnalysisEngine riskAnalysis
INFO: Start Analysis Engine->Risk Analysis ..... memory usage: free=663M, total=2048M
Jul 13, 2011 4:35:47 PM com.virsa.cc.xsys.riskanalysis.AnalysisEngine performActPermAnalysis
INFO: Foreground : Before Rules loading, elapsed time: 1 ms
Jul 13, 2011 4:35:47 PM com.virsa.cc.xsys.riskanalysis.AnalysisEngine performActPermAnalysis
INFO: Foreground : Rules loaded, elapsed time: 19 ms
Jul 13, 2011 4:35:47 PM com.virsa.cc.xsys.riskanalysis.AnalysisEngine performActPermAnalysis
INFO: Foreground : # objects to analyse: 0
Jul 13, 2011 4:35:47 PM com.virsa.cc.xsys.riskanalysis.AnalysisEngine performActPermAnalysis
INFO: Foreground : All Analysis done, elapsed time: 32 ms , memory usage: free=662M, total=2048M
Jul 13, 2011 4:35:47 PM com.virsa.cc.xsys.riskanalysis.AnalysisEngine performActPermAnalysis
INFO: Detailed Analysis Time:
Risk Analysis Time: Started @:Wed Jul 13 16:35:47 CEST 2011
Rule Load Time: Started @:Wed Jul 13 16:35:47 CEST 2011
Rule Load Time:19millisec
Risk Analysis Time:35millisec
Jul 13, 2011 4:35:47 PM com.virsa.cc.xsys.riskanalysis.AnalysisEngine riskAnalysis
INFO: End Analysis Engine->Risk Analysis ..... memory usage: free=661M, total=2048M
Then I took a look into the applications.0.log file and found out that the background job for user and role analysis also ran some ms.
Mon Jul 11 15:10:34 CEST 2011 : --- BKG User Action Analysis (System: XXX(800)) started ---
Mon Jul 11 15:10:34 CEST 2011 : --- BKG User Action Analysis (System: XXX(800)) completed --- elapsed time: 77 ms
Mon Jul 11 15:10:34 CEST 2011 : -
System to Analyze =>XXX(800) -
Mon Jul 11 15:10:34 CEST 2011 : --- BKG Role Action Analysis (System: XXX(800)) started ---
Mon Jul 11 15:10:34 CEST 2011 : --- BKG Role Action Analysis (System: XXX(800)) completed --- elapsed time: 19 ms
Mon Jul 11 15:10:34 CEST 2011 : -
System to Analyze =>XXX(800) -
Mon Jul 11 15:10:34 CEST 2011 : --- BKG User Permission Analysis (System: XXX(800)) started ---
Mon Jul 11 15:10:34 CEST 2011 : --- BKG User Permission Analysis (System: XXX(800)) completed --- elapsed time: 36 ms
Mon Jul 11 15:10:34 CEST 2011 : -
System to Analyze =>XXX(800) -
Mon Jul 11 15:10:34 CEST 2011 : --- BKG Role Permission Analysis (System: XXX(800)) started ---
Mon Jul 11 15:10:34 CEST 2011 : --- BKG Role Permission Analysis (System: XXX(800)) completed --- elapsed time: 14 ms
Mon Jul 11 15:10:34 CEST 2011 : Job ID:251 --- Starting background critical tcd/role/profile analysis
Mon Jul 11 15:10:34 CEST 2011 : Job ID:251, Background Critical Action & Role/Profile Analysis started
Mon Jul 11 15:10:34 CEST 2011 : Job ID:251 --- Completed the background critical tcd/role/profile analysis
Any ideas ? Rules are generated and I checked twice that they are available for System XXX(800) !
Regards,
Max

Similar Messages

Best Practice for Hyperion Planning : Essbase or Dataform for Adhoc Analysi

Hi,
with Hyperion Planning, you are able to start an Adhoc Analysis from an Hyperion Planning Dataform or from an Essbase cube?
What is the best way / pro / contra ? thanks in advance
.... I 've juste notice that when you delete the dataform the Retrieve doesn't work anymore :-( .... and with Essbase you get some "un-useful" dimension as HSP_Value
Regards
xavier

A couple of other things that go with Planning as the data source:
1) You have access to all of the non-Essbase data -- think SmartLists, text (okay, it's there now in Essbase, but not from Planning applications) fields, supporting detail, etc. If you want users to see that relationally stored data, the only other way to get it in Excel is to run a Financial Reports report into Excel (or hack the tables and write SQL to pull the stuff -- did that pre 11x and it's too much work).
2) There's a performance hit when going against Planning, just like there is when Planning is the data source in Financial Reports.
Using a form to limit dimensionality - isn't that what SmartSlices are for? I guess it's another way to get to the same place. Although you have to administer the SmartSlices, I would imagine they would break less often than a form might. Having said that, once built, how often do you delete a form?
It's really nice that ad-hoc analysis from forms are now possible, but I've always thought of it as nice feature to have alongside data entry, never as the primary path into Essbase analysis.
Just my $0.02.
Regards,
Cameron Lackpour

How to influence join condition in Adhoc analysis

We have a subject area created that has *2 facts tables*. In one of the adhoc reports, the report query is taking the join from the second fact table instead of the first fact table for columns picked from common dimensions. Need to know how to influence join condition in Adhoc analysis, or OBIEE criteria with which the fact to make a join is chosen.
Requirement is to have a count of records in Dimension table, based on first fact - failure part, and then second fact - failure reason.

Hi User,
Set an implicit fact column in presentation layer to force a join,
http://gerardnico.com/wiki/dat/obiee/implicit_fact_column
Regards,,
Dpka

HFM Adhoc Analysis

Hi All,
I have a query regarding Adhoc Analysis in Smartview.
In an Adhoc reports when I click on ZOOM IN or Double click on any of the parent in Account or Entity Dimesion the child is repeating or duplicates the number of times I use double click or Zoom in function.
For Example if I have a parent as Service Revenue and 5 Accounts under it, when in click on Zoom function the 5 childs can be viewed .But when I reclick on the same Parent once again Service Revenue, its agian repeating the childs again and again the number of times i click the zoom in function.
How can I get the Childs only once. Can any one assist me on the below issue.

Hi Srikanth
When you don't want the children comes from parent again and again when you click in Parent member like Zoom Out or In , Do not click the same multiple times, thats it.

GRC Access Control 5.3 - RAR Risk Analysis in offline mode

Hi expert,
I'm trying to do RAR Risk Analysis in offline mode following this guide (https://www.sdn.sap.com//irj/sdn/go/portal/prtroot/docs/library/uuid/20a06e3f-24b6-2a10-dba0-e8174339c47c). But to generate User Action file the ABAP have a problem when try to get a COMPOSITE ROLE field for a Role that is asociate to many Composite role as the unique record consists of fields IDUSER, ROLE and ACTIONFROM . Someone know how we can solve this conflict?
Best Regards!

I'm sorry, I think I haven't made myself clear enough. The thing is that the User Action File has a "Composite Role" field and we don't know how fill it when the Single Role belongs to multiple Composite Roles. This is because of the primary key, we can't make multiple records for each userid/role combination, each one with one different Composite Role, such as the following example:
USERIDX/ROLEX/ACTIONX/ACTIONX/PROFILEX/COMPOSITEROLE1
USERIDX/ROLEX/ACTIONX/ACTIONX/PROFILEX/COMPOSITEROLE2
USERIDX/ROLEX/ACTIONX/ACTIONX/PROFILEX/COMPOSITEROLEN
Should we instead do only one record with all the composite roles? What character should we use to separate the composite role names? A ",", a ";"? For example:
USERIDX/ROLEX/ACTIONX/ACTIONX/PROFILEX/COMPOSITEROLE1_,_ COMPOSITEROLE2_,_ COMPOSITEROLE3
Hope I explained myself. Thanks for your help.

Can you download RAR Risk Analysis reports to something other than Excel?

When you run a RAR Risk Analysis and go to export the resulting reports, RAR automatically exports this into an Excel spreadsheet.
Is it possible to export the reports into some other kind of format/tool? (SQL would be ideal.)
We are on GRC 5.3 SP13.
Thanks.

Our CMG group runs a company-wide risk analysis 2-3 times a year to use in their SOD Review process. We are looking into loading this report into QuickView to give them more capabilities with using the report. QV will work with Excel, but you have to load every spreadsheet and every page separately.
We are looking to see if we could download it into some other format that would contain all of the report in just one file. Would make the QV load easier. Something like SQL would probably be ideal.
Thanks.

Smartview tab and Adhoc Analysis Issue

Hi,
I am unable to see the smartview(Hyperion) tab in Excel , how ever i can see the options to connect Datasources and i can see the all other smartview options in in excel window, but when i select one of the planning type(Datasource) and then i clicked on Adhoc Analysis, but after i click on Adhoc Analysis, i can not see anything is come up.
Also i checked registering .dll file and rebooted my machine but that did not work for me
I tried to uninstall and install smartview couple of times but no luck
Please suggest how do i get this Hyperion tab in Excel.( but i can see the Hyperion tab is available in othe MS products-word and PPT)
ENV:
Excel 2003, Smartview-11.1.1.1 Version
Thx

Check in excel option Smartview is not disabled it should not be under disabled application addin.

Smartview Adhoc Analysis Read only

Hi,
we are using Hyperion Planning - basically with Smartview 11.1.2.
We have the requirement that users which are able to put in data via webforms (and they should be able to do so Role: Planner) should use Adhoc Smartview Analysis as read only.
If we assign the role Adhoc Analysis the users are able to submit data also via Adhoc - which is not what we need.
Is there any way to enable users (either Essbase or Planning Adhoc) for adhoc analyses in a read only way on the same datamodel where they have write access to data points.
I appreciate your thoughts on that.
BR

Please post to the Planning Forum.

Essbase Adhoc Analysis Connection - Smartview

Hello,
We are using Hyperion Planning Version 11.1.2. We want to use Smartview to connect to essbase for adhoc analysis. How do i connect to essbase for adhoc analysis. I am struggling to find the URL which I can use for connection to essbase.
Can you please guide.
Cheers,
XXX

In excel go to your options for smart view and enter the following information http://<foundationserver>:19000/workspace/SmartViewProviders
replace <foundationserver> for your servername.
Once done try going to shared connections.
Cheers
John
http://john-goodwin.blogspot.com/

Endabling adhoc analysis

Hi All,
We want to enable adhoc analysis in data forms only for certain users. Can it be done?
Thanks

From the docs :- http://download.oracle.com/docs/cd/E17236_01/epm.1112/hp_user/ch03s11.html
"+To save this view of the data form to be accessed again during the current session, select Save Current Form Definition.+
+You can rename the default name to any name except the name of an existing data form. *Private views of data forms are saved in the same folder that contains the main data form, and are visible only to the user who creates them. Access to a private data form depends on the user access privileges and permissions set for the data form folder*.+"
Cheers
John
http://john-goodwin.blogspot.com/

RAR - Risk Analysis - Permission Level - V_VBAK_AAT||AUART - Error

I have a trouble related with risk analysis at permission level, when the V_VBAK_AAT||AUART is activated in two functions of my customized GRC rule-set (VIRSA_CC_FUNCPRM) for controlling some "document types" for tcodes VA01 and VA02. When I execute this customization in RAR, the system says "No match / No conflicts" for the risks where these functions appear, however performing some queries in the back-end systems, I have realized there are more than 80 users in conflict for some of them, given the fact that they have value '*' in object/field V_VBAK_AAT||AUART.
At a first time I thought that most probably would be related with the fact that these functions are part of risks that combine 3 and 4 functions at the same time, with OR logical activated in document types, but when I searched for the rules generated for these risks I noticed that only 34.000 rules were generated and this no overpass the limit of 45566 rules defined at RAR. Anyway, I performed some tests reducing the number of possible combinations and, basically, whenever the following line is activated, the outcome is u201Cno conflictsu201D:
D VIRSA_CC_FUNCPRM FN15 VA01 GRC-C21 V_VBAK_AAT||AUART ZSO ZSO OR 0 null
If this line is disabled, then, several users with conflicts are reported. As mentioned above, these users have value '*' for object/field V_VBAK_AAT||AUART, so I do not understand why those users are not reported when the line above is activated.
I have done the following checks, all of them correct:
- The user/role/profile synchro has been done and all the users has been stored in table VIRSA_CC_
- All the lines in VIRSA_CC_FUNCPRM part of my customized rule-set have been correctly inserted in the same Oracle table
- All the combinations of rules has been created (including VA01 and VA02 with V_VBAK_AAT||AUART)
Any suggestions?
Thanks in advance

I've detected the same problem for the following authorization objects:
- F_BKPF_BLA||BRGRU
- V_VBRK_FKA||FKART
- M_MSEG_BWE||WERKS
RAR reports no conflicts (at authoriztion level) when these objects are activated (of course having users with these conflicts in back-end systems)
This problem has been proved in the installation of different customer with SAP GRC Access Control 5.3 SP12.
Anybody else has experienced this issue????

GRC 5.3: CUP risk analysis VS. RAR risk analysis

I've installed and configured RAR and CUP. When I do a risk analysis simulation in RAR on a user for adding a role, it comes back with no conflicts. When I go into CUP and make a new request for adding the same role to the same user, it comes back with risk violations, but it looks like they are critical actions that are being flagged. Why is there a discrepancy, and how do I go about getting the same risks in CUP as I do in RAR?

>
Frank Koehntopp wrote:
> I guess the behaviour is on purpose.
>
> In RAR, you can do a selective analysis on only one kind of risk. You usually only need to do that in the remediation process, where this kind of selection is helpful to track down the root cause (although I'd like to have an ALL option in RAR as well...)
>
> In CUP, you do want to see any kind of risk that might arise from a role assignement to a user.
>
> I have to say, I can not really understand why you'd want to switch off critical action or permission risks here. The user analysis in RAR and CUP serve two different purposes, hence I cannot see a bug here. If you have defined critical risks, why would you not want to see them???
Hi Frank,
I understand your point, but we are in the same situation as the others. We do not want to see Critical Action Risks in CUP because this is a separate process (for us) than Permission Level Risks Analysis piece. With our current structure, our Security Admins use RAR to run Permission Level Risk Analysis and mitigates appropriately. A separate compliance group uses the Critical Action reports to see who has what Critical tcodes, etc. We do not mitigate these "risks," we more or less use it as a report.
I do not understand what you mean when you say "The user analysis in RAR and CUP serve two different purposes" - I feel it should be the same purpose, to ultimatley simulate if adding security to a user will cause SOD violations. If I have CUP configured to do Permission Level Analysis, that's all I want to be seeing in CUP.
Let me know if I need to clarify further.

RAR Risk Analysis Issue in Background Mode - "Failed to Display Result"

Hi,
I have strange problem in RAR.
When I run risk analysis for 20 users in background mode, the job got successful but the spool file is empty. But at the bottom of page there is a message: "Failed to Display Result".
The Job log is showing the following message couple of times:
WARNING: ./virsa/bgJobSpool/19.i (No such file or directory)
java.io.FileNotFoundException: ./virsa/bgJobSpool/19.i (No such file or directory)
     at java.io.FileInputStream.open(Native Method)
     at java.io.FileInputStream.<init>(FileInputStream.java:129)
     at java.io.FileInputStream.<init>(FileInputStream.java:89)
     at java.io.FileReader.<init>(FileReader.java:62)
But When I try to run for few users (like 6 memebrs where selection criteria is AUDIT*) in same way, the spool details got displayed this time. But the log is showing strange error messages this time:
Nov 15, 2010 3:53:53 PM com.virsa.cc.common.util.ExceptionUtil logError
SEVERE: null
java.lang.NullPointerException
     at com.virsa.cc.comp.wdp.IPublicBackendAccessInterface$IAuthForUserInputElement.wdGetObject(IPublicBackendAccessInterface.java)
     at com.sap.tc.webdynpro.progmodel.context.NodeElement.getAttributeAsText(NodeElement.java:888)
Nov 15, 2010 3:53:55 PM com.virsa.cc.dataextractor.bo.DataExtractorSAP getObjPermissions
FINEST: getObjPermissions: elapsed time=1436ms
Nov 15, 2010 3:53:55 PM com.virsa.cc.common.message.util.MessagingHelper getMessage
INFO:
********msg: 'com.virsa.cc.common.message.dao.dto.MessageDTO@34d834d8'
Any ideas please?

Hi Alpesh,
You are correct. The issue is due to multi node environment.
But when I tried to define a custom spool folder path: usr/sap/<SID>/<Instance No>/log/virsa/bgJobSpool (in RAR - Miscellaneous - spool files location for background jobs) & run the risk analysis report in background mode, still RAR is saving the spool files in default location only.
Can you suggest me if I am wrongly defining the location of folder?
Should we define the complete location of the folder i.e starting with drive letter or path starting with user/* is sufficient?
Regards,
Dasarad

HSP_Rate dimension not showing in Smartview 11.1.2.1 Adhoc Analysis Conn.

I have an out of box currency conversion planning application.
The issue is that if I create Essbase connection via Smartview I can see the HSP_Rate dimension,however if I create Planning connection and use Ad hoc Analysis option I do not see the HSP_Rate dimension.
Is this a normal behavior ?
Thanks in advance

Hi,
We just upgraded from 11.1.2.0 to 11.1.2.1 and are facing the same issue. I haven't found any reference to ER 8246706: CANNOT SUBMIT DATA FROM ADHOC VIEW FOR A MULTICURRENCY DATA FORM in support.oracle.com or a patch for 11.1.2.1.
Are you aware of any patch available for release 11.1.2.1?
Simon

RAR offline analysis issue

In our GRC AC 5.3 SP10, we have RAR config tab -risk analysis -additional option - enable offline risk anlysis is set to YES.
But when I run a risk anlysis from informer tab - reports shows offline anlysis:NO.
My queries are:
1. what are difference between yes and no for affline analysis. How does they affect risk analysis report.
2. Is the above scenario a problem? does it provide incorrect result of risk analysis? If yes, how this can be rectified?

If you set offline risk analysis to yes in configuration then when the batch risk analysis background job runs it populates the RAR table virsa_cc_prmvl. So the advantage of offline analysis is you can do risk analysis based on the last batch risk analysis job making the response time better.
In case of online analysis from informer tab the backend system should be available. The advantage here is you are dealing with real time data whereas incase of offline analysis your data is as fresh as the last run batch risk analysis job.
Thank you,
Partha
Edited by: PARTHASARATHY NUNNA on Jun 25, 2010 2:36 PM
Edited by: PARTHASARATHY NUNNA on Jun 25, 2010 2:47 PM

AC 5.3 RAR: Adhoc analysis

Similar Messages

Maybe you are looking for