Access Enforcer/ CUP - Export/ Import?

Hi, I wanted to know if there is a export functionality in the access enforcer/CUP (GRC v 5.2)?? I wanted to export the workflows and other items I have created outside the current environment and import it to a different environment. Is this actually possible??
Thanks,
Ken

Hi,
You can go to configuration -> initial system data and select the checkboxes in front of the data you want to export. Click on export button and save the file. Now, you can import this data by going to same place in the other CUP system and import the file with 'clean and insert' option.
Regards,
Alpesh

Similar Messages

Access Enforcer(error in approving the request) and import roles

Dear all,
error in approving the request at security stage(last)
manager and role owner are successfully approved.
and also importing roles into access enforcer was not successful.
imortstatus : 0 roles imported of 28 records found.
please find the system log:
2008-09-05 13:01:34,625 [SAPEngine_Application_Thread[impl:3]_8] DEBUG com.virsa.ae.service.messaging.MessageFormatter : parseDesc :   : INTO the method : desc :Please specify a file to import.paramNames :paramsMap :{FIELD_NAME=#_!FIELD_NAME#_!}
2008-09-05 13:01:34,625 [SAPEngine_Application_Thread[impl:3]_8] DEBUG com.virsa.ae.service.cache.AECacheUtil : getResourceBundle :   : INTO the method : en
2008-09-05 13:01:34,625 [SAPEngine_Application_Thread[impl:3]_8] DEBUG com.virsa.ae.service.cache.AECacheUtil : getResourceBundle :   : INTO the method : en
2008-09-05 13:01:34,625 [SAPEngine_Application_Thread[impl:3]_8] DEBUG com.virsa.ae.service.cache.AECacheUtil : getResourceBundle :   : INTO the method : en
2008-09-05 13:01:34,625 [SAPEngine_Application_Thread[impl:3]_8] DEBUG com.virsa.ae.service.cache.AECacheUtil : getResourceBundle :   : INTO the method : en
2008-09-05 13:01:34,625 [SAPEngine_Application_Thread[impl:3]_8] DEBUG com.virsa.ae.service.cache.AECacheUtil : getResourceBundle :   : INTO the method : en
2008-09-05 13:02:28,234 [Thread-47] DEBUG

In Addition to my previous response:
I meant to include the following:
Some of the fields that need to be properly defined with attributes are:
       System: must have the know SAP system defined here
       Role Approver (i presently are using most of the roles without having need for approval; I created a user called NOAPPRV in AE)
       Functional Area: need to have all the areas defined that roles will be assigned to
       Company: I only have one company so that's an easy one
Some areas I presently do not use but found they must ne coded and coded properly:
       ResponsibilityID:   N/A (coded as is)
       CommentsMandatory: NO (coded as is)
       Parent Role Owner:   NO
       Business Process: NA (I believe I originally coded N/A and it did not like that)
       Sub Process: NA (again N/A I believe error on me)
       Reaffirm Period: presently I am using 0 (zero)
       LastReaffirm: presently using 12/31/9999
Hope this helps a bit
I wanted to include an attachment with a sample of my Role Import spreadsheet but I'm not sure exactly how to do that; if I figure that out or someone can provide me the process I will include it
Jerry Synoga
Ryerson Inc.
630-758-2021

Access Enforcer Import Role Automation

We would like to automatically import roles from SAP.
We do know that you can use Role Expert which in itself can be used to automate the import. However, we still have to manually import into AE - even if RE is used as the role source.
Is there a way to periodically automate the import from either SAP or RE because it does not make sense to have to manuall import roles every time a new role is created in SAP.
Thanks

Actually, it does make sense.
One of the prime features of Access Enforcer is that you don't import all the roles, but just the ones you want users to be able to request.
For each of the roles, it's useful to put them into some kind of category (functional area, business process, sub-process), which makes handling for users a lot easier, and you have to assign approvers.
One way to do that is to use an Excel spreadsheet and manage the data there. Easy to use and update, and quick to upload into AE.
Kind regards,
Frank.

Access Enforcer and Import Roles

Hi All,
I am having issues importing roles that have the exact same name across different systems. This makes it almost impossible to implement Access enforcer across Dev/QA and Production environments at once. I would have thought that AE uses the (System ID, role name) as the key for that particular table used.
Has anyone managed to find a workaround for this?
Cheers,
Cuneyt

Nevermind i have solved the problem.

Access Enforcer Role Import - Reaffirm period

Hello
What does the following terms mean;
last reaffirm
reaffirmperiod
We current upload roles into AE, with last reaffirm as current date, and reaffirmperiod of 60 which means 5 years.
Can someone please explain what these terms mean, because many roles have reaffirm periods that end in 2010.
Thanks

Hi Prakas,
Reaffirm period ( in months ) is the duration after which you would like the Approver of the Role ( Role Owner /Role Approver ) to get notified on which all user in SAP has access to that Role and Does he want to continue giving that role to them or wants to remove that Role from all of them or any one of them .
He would get the details on which Role requires Reaffrim at following location :
In AE 5.2 ; login with Role approver id ( eg ABC ) into AE .
In tab Access Enforcer > Reaffirm .
A list of All the roles of which ABC is apporver and which require re-affrim would display here.
ABC can now take approriate action by selecting the role name.
*Last reaffrim * is the date when the Role was Reaffrim /revisited/reassgined last.
In your scenario you have given Reaffrim period = 60 which means your Role Owner would get the Role in his Reaffrim inbox after 5 years .
This is not best practise . For security reason , SAP advices to keep the Reaffrim period to a maximum of 2 months.
I hope this answers your query .
Thanks
Jasmine

Access Connection export/import feature

Hi all,
Is it possible to export/import WiFi profile Pre-Shared key ?
Thank you
Mat

You mean besides just exporting and importing the wireless profile that uses that key?!?
You can also create a deployment file that will contain the key.
Just remember that profile exports/deployments are operating system and version dependant. i.e don't try to import a profile in v5.31 for Vista from a v4.42 version for XP.

Upload of role in Access Enforcer 5.2.

Hi All,
I need to upload roles in Access Enforcer from SAP ECC system. Actually i have uploaded the roles in Access Enforcer, but all unwanted roles have also got uploaded.
Now i need some way, first to clean entire uploaded roles & then upload selected roles.
Please suggest.
Thanks & Regards,
Pravin

Hi Pravin,
Here are the steps:
1) Download all the roles into an excel spreadsheet:
Go to configuration -> Roles- Search roles -> Click on 'Export' button. This CUP, go to 'Search Roles'. Click on 'Search' button without providing any search criteria. This will return all the roles available in CUP. Now, click on Export button. CUP will export all the roles into Excel spreadsheet in the format which CUP understands.
2) Delete all the roles from CUP: Now, in the same screen as above, select all the roles and delete them.
3) Delete not needed roles from spreadsheet and upload it into CUP:
Now, delete all the unwanted roles from CUP and play with the spreadsheet to manipulate other parameters like role approvers, systems, business process etc and upload that spreadsheet into CUP.
Regards,
Alpesh
SAP GRC Manager (PwC)

Best choice for exporting / importing EUL

Hi all
I have been tasked with migrating an EUL from a R11 to a R12 environment. The Discoverer version on both environments is 10.1.2 and the OS is Solaris on oracle db's.
I am unfortunately not experienced with Discoverer and there seems to be no one available to assist for various reasons. So I have been reading the manual and forum posts and viewing metalink articles.
I tried exporting the entire eul via the wizard and then importing it to the new environment but i was not successfull and experienced the system hanging for many hours with a white screen and the log file just ended.
I assumed this was a memory problem or slow network issues causing this delay. Someone suggested I export import the EUL in pieces and this seemed to be effective but I got missing item warnings when trying to open reports. This piece meal approach also worried me regarding consistency.
So I decided to try do the full import on the server to try negate the first problem I experienced. Due to the clients security policies I am not able to open the source eul and send it to our dev. I was able to get it from their dev 11 system but I dismissed this as the dev reports were not working and the only reliable eul is the Prod one. I managed to get a prod eex file from a client resource but the upload to my server was extremely slow.
I asked the dba to assit with the third option of exporting a db dump of the eul_us and importing this into my r12 dev environment. I managed this but had to export the db file using sys which alleviated a priviledge problem when logging in, I have reports that run and my user can see the reports but there are reports that were not shared to sysadmin in the source enviroment are now prefixed with the version 11 user_id in my desktop and the user cannot see her reports only the sysadmin ones.
I refreshed the BA's using a shell script I made up which uses the java cmd with parameters.
After some re reading I tried selecting all the options in the validate menu and refreshing in the discover admin tool.
If I validate and refresh the BA using the admin tool I get the hanging screen and a lot of warnings that items are missing( so much for my java cmd refresh!) and now the report will not open and I see the substitute missing item dialogue boxes.
My question to the forum is which would be the best approach to migrate the entire eul from a R11 instance to a R12 instance in these circumstances?
Many thanks
Regards
Nick

Hi Srini
The os and db details are as follows:
Source:
eBus 11.5.2
Oracle Database 10g Enterprise Edition Release 10.2.0.4.0 - 64bi
SunOS 5.10 Generic_142900-11 sun4u sparc SUNW,Sun-Fire-V890
Target:
ebus 12.1.2
Oracle Database 11g Enterprise Edition Release 11.1.0.7.0 - 64bit Production DEV12
SunOS 5.10 Generic_142900-11 sun4u sparc SUNW,Sun-Fire-V890
Yes the DBA initially did an exp for me using EUL_US as the owner but a strange thing happened with privileges and also, some of the imported tables appeared in the target environment under the apps schema(21 tables) even though the eul_us exp had been 48 tables.
I also had a problem on the db with "eul_us has insufficient privileges on table space discoverer" type errors.
I checked the eul_us db privileges and was unable to resolve this initial privilege error even though the privileges were granted to eul_us.
The dba managed to exp as system and then import it with the full=y flag in the import command which seems to bring in the privileges.
Then I ran the eul5_id.sql and then made up a list of the business areas and made a sh script to refresh the business areas as follows:
java -jar eulbuilder.jar -connect sysadmin/oracle1@dev -apps_user -apps_responsibility "System Administrator" -refresh_business_area "ABM Activities" -log refresh.log
This runs successfully and I can log in select business area and grant access to the users. The reports return data.
Then one of the users said she can't see all her reports. I noticed some if I opened desktop that were sitting there prefixed with a hash and her version 11 user id.
So back to the manuals and in the disco admin help the instructions are to first go to view > validate > select all options then go to the business area and click file refresh. This gives me a lot of warnings about items that are missing. I assume this is because the item identifiers brought across in the db dump are the version 11 ones and thus not found in the new system.
Any suggestions?
Many thanks
Nick

Auto Email generation in multiple language in Access Enforcer 5.2

Hi All,
We have configured workflow in Access Enforcer 5.2 for autoprovisioning of users in the system. Requestor gets an email in english with the userid and password once the user is provisioned in the system. Now the requirment is to send these emails in different language, which is specific to the user. Like a spanish user should receive the email in spanish language.
Whether this has anything to do with language setting while user creation.
Please suggest.
Thanks & Regards,
Pravin

Hi Pravin,
It has nothing to do with the language settings for the user. This configuration has to be done in closing section of Email reminders under workflow. As per my experience with AE 5.2/CUP 5.3, I don't think this is possible as of now. This could be a good functionality, so you can open an enhancement request with SAP.
Regards,
Alpesh

Export/Import memory

Hi,
what is the difference between Export/Import buffer
and Exp./Imp.SHM buffer
regards,
dev

Hi Dev,
This will be useful.
Whenever a user session is created during any transactions, objects are created
in memory. If another user is accessing the same object another copy is
created in the memory - which means accessing objects is one copy per
user per session (Session Memory).
Until before SAP Application Server 6.40 these objects cannot accessed
by other sessions or other programs. The concept of Shared Memory
enables to access this memory if the object is not locked by that
session. SAP Provides a class for accessing shared memories -
CL_ABAP_MEMORY_AREA. Static methods are available in this class for
binding a session to the memory area.
What are the Advantages of Shared Memory?
~Data is kept only once in Memory.
~The Data will be in the memory as Memory Tables that reflect the
structure of Database table.
~Fast access at Main Memory Speed.
~Saves Memory (Saves Approximately 3MB Per user per Session.
More on Next Posting...
http://groups.google.com/group/DEVS_SAP
--Thanks and Regards,
Ragu
ERP,
Suzlon Energy Limted, Pune
+919370675797
I have no limits for others sky is only a reason

Studio export/import button not working.

To import existing lar file into studio do I need to configure anything ?
I'm not able to use the export/import even when logged in as admin?

There are two ways to get to the Manage Pages interface for any community, which is where LAR import/export functionality lives. You can access it by going to the Welcome Menu on the page, and clicking "Manage Pages." If you use this path, you will be unable to import a LAR file, as the application considers you to be "in" that community, and can't overwrite the pages with the LAR you're trying to import. Instead, you'll want to access this page by going to Control Panel -> Communities. For the desired community, click Actions -> Manage Pages. Now you should be able to go to the export/import section and import your LAR.

Metadata export/import to other BI tools?

Metadata export/import to other BI tools?
Hi ,
I am using SQL DM 3.0.0.665. I need your thoughs on following.
As we build our logical/physical models in SQL data Modeler, we create our metadata for our attributes/columns.
After creating our physical model, other BI and reporting tools acquire access to the physical tables. Each tool has a process of creating their reporting layer and able to bring the tables/columns into reporting layer. It shows the column names as it is. It is not business friendly.
Do we have a mechanism to export attribute business names as meta data of DB tables?
If we define the meta data as part of physical model using modeling tools such as Oracle SQL Developer or ERWIN, will we able to import those into BI tools as report elements meta data?
Where can I find details?
How do we do that?
Thanks in helping us out.

Hi,
there is no problem if you are building reports on top of our reporting repository - table DMRS_MAPPINGS holds information for pairs - (entity- table), (attribute-column)...., and you can take implementation and business name.
Exchange to BI tools - you need to know how particular BI tool can recognize and link implementation and business names and then you can use transformation script in order to provide required information. There are examples on this forum how to deal with files and database connection using transformation script.
Philip

Export/Import with apps user or EUL schema owner ?

Hi,
I am working with a migration plan to move Discoverer 9 to Discoverer 10.
It is an apps mode EUL, where business areas and workbooks have been granted to Apps Users & Responsibilities.
Customer has only maintained the EUL with the database user of the EUL owner.
What is recommended for exporting/importing the EUL from 9 to 10.
To connect to Administrator as the EUL owner, or to connect as an apps user ( SYSADMIN ? )
Will all the grants to apps users/responsibilities work when importing as schema owner ?
I tried to create a entire EUL export file connected as EUL owner, and for the workbooks the export log contained :
1234#.Workbook name1
2345#.Workbook name 2
1234 is the user_id for the workbook owner ( All workbooks have been created by an apps user )
Will the import process manage to convert this user_id, and set the correct owner for the imported workbooks ?
( I will use the option Only take ownership if original owner not found )
I am not sure, but I think I have seen the following syntax in other projects when exporting an apps mode EUL
SYSADMIN.Workbook name 1
SYSADMIN.Workbook name 2

>
What is recommended for exporting/importing the EUL from 9 to 10.
To connect to Administrator as the EUL owner, or to connect as an apps user ( SYSADMIN ? )
Will all the grants to apps users/responsibilities work when importing as schema owner ?
Hi,
The best that i know is that you should export using the DB user so that you will not have problem with workbooks or BA that you are not granted for (or any other grants or privileges).
The import should be done using the APPS user (the super user you use).
That way if you import a workbook that the owner will not be found then you will get the ownership and you can after migration deal with it.
If you'll do that with the DB (EUL owner) user after migration you will not have access to those workbooks.
Any way about the workbooks i suggest you'll save them as DIS files for cases that the import of the workbooks or the owner association for them fail.

"Refresh" of development Access Enforcer system

Greetings!
Our Access Enforcer system is now in production. Our development system is quite a mess, with old requests and configuration. We would like to make the dev system look more like the production and test systems and get rid of all of the old requests, initiators, stages, etc. Does anyone know how to clean up AE so we can start over with a clean slate? We are on 5.2 with SP3, running on an AIX box with Netweaver only.
Thanks!

Hi,
I am not sure on the reasons for system refresh. Look at the below points:
1. The RAR data c(Rules, Functions, Risks etc) an be downloaded and uploaded in the Development environment. Why you need the production user data in Development?
2. The SPM users are intended for production. Why you are planning to copy/simulate them in development?
3. The ERM and CUPs are workflows, where the systems and other settings have to be created manually. What is your intention in getting them to development?
As per my knowledge, no system refresh is performed for GRC systems? May be you need to educate the client on these things. Please look for the ideas from the other experts too before you go back to your client.
Hope this helps!!
Warm Regards,
Raghu

System copy with Export/Import Distribyted system UNIX database, Windows CI

HI
we have a distributed system witch I want to make a copy of
Oracle Database on HP-UX
CI + SCS on Windows
Dual stack system ABAP/Java
1) I have made an system copy with data base copy tools, and that works fine.
2) I have made a system copy export/import of a "central system"
If I try to make an export/import system copy on a distributed system it wont work.
( this work fine in a central system) I dont get anny error messages all gren checks marks !
It seems like the problem are in not finding the profiles from CI ?
It find the profiles for the sapgateway.
I someone are more interested I have more documentation with screen shots in a word document.
I Have used Installation Master SR3 and tryed with some older versions as well.
I have read SAP Note 970518 - Hom./Het.System Copy SAP NetWeaver 7.0 (2004s) SR2
SAPINST
Using virtual hosts for central and/or DB instances
SYMPTOM:
You are using virtual host names for your central instance and/or the database instance (e.g. in a HA environment). Although SAPinst finishes successfully, some export steps are not being performed.
SOLUTION:
Start the export with the property SAPINST_USE_HOSTNAME=<virtual host>.
If the central instance and the database instance run on different hosts, run the database export with SAPINST_USE_HOSTNAME=<virtual host name of the DB server> and - if you run a Java or ABAP+Java system - run the central instance export with SAPINST_USE_HOSTNAME=<virtual host nameof the central instance host>.
If you run a central system with different host names in the profiles, handle the export as a distributed export, calling SAPinst with parameter SAPINST_USE_HOSTNAME. Perform the export of the database instance on the DB server, calling SAPinst with SAPINST_USE_HOSTNAME=<virtual host of the DB server>.

Hi I have received folloving answer from SAP:
You're doing everything correct - besides one thing.
When you specify the profiles during the database export it cannot be
correct to specify the profiles of the gateway instance located on
the same host.
As a consequence - it picks up the wrong instance G01 and sets the
property 'hasABAP' and 'hasJava' to 'false'... - thus the export
is empty. You can see this within the corresponding 'sapinst.log' file.
The correct procedure would be to specify the profiles of the central
instance on the Windows Machine. If you cannot access them, you should
make them available by Samba or by any type of software which makes
it's possible to export filesystems or directories from windows to
unix.
Best regards
Bent

Access Enforcer/ CUP - Export/ Import?

Similar Messages

Maybe you are looking for