Any Customers Implement GRC-AC ERM?

Hello!
We are evaluating GRC-AC v5.3 SP13.1 ERM and are encountering issues. Have any customers implemented this module? If so, what Version and SP did you implement on? Also, are you using the full functionality or just as a repository? Are you using the the CUP Workflow Approvals?
Any help on this would be really appreciated.
Regards,
John

Dear John,
We had implemented fully functional CUP and ERM alongwith RAR and SPM. At the time of go-live it was patch 8. Later we checked that ERM role generation methods were little different from PFCG and for that reason roles were not getting generated properly like Multiple Authorization Nodes were not working fine, auth data was getting merged, manul Objects were getting deleted if the corresponding tcode was deleted and likewise. So we stopped using ERM. Now we are in process to evaluate Patch 12 and 13 in which all ERM issues are supposed to be fixed.
If everything goes well in testing, we will start using ERM again. All workflows related to CUP, ERM and RAR(Mitigation and Risk) are functional and there is no issue in that.
Regards,
Sabita

Similar Messages

GRC 10 ERM Not able to create Business/Single Role

Hello Experts,
In GRC 10, ERM, i have completed all the pre-requisites i.e. Maintaining Connectors, Configuration for Role Management, Maintained and generated the default MSMP workflow (methodology), maintaining role owners.
Now when i am trying to create a business role or let's say a single role i am unable to to do so as the edit button is disabled.
I just can't get through this.
Have i missed anything, and for the record when i tried to Import the Role(Under Role mass maintenance) from backend system i was successfully able to do so and that way only i could get my first role in GRC via import.
Now if i open this role and try to edit it, can;t do again, because edit button is disabled. But if i perform Role Update(Under Role Mass Maintenance) i can successfully change the attributes and other information and am able to see the new values.
Why is it like this, i am not able to create Roles in GRC, just i am able to import and update from backend.
This is really frustrating..what i am missing over here.
Experts pl. Kindly help!

Hi Triera,
1) After opening BRM, Create button is not greyed out. Its available, and if i click on it, then i see all the possible type of Roles that i can create i.e. Business role, composite role, Group, PD Profile, Profile, Single Role, Template etc.
2) When i try to edit a role by clicking on "Open" , and when the role opens, and then if I click on "Additional Details" (you said "More Details" , i believe you meant that only) link, then also the Edit button is not enabled. Its still greyed.
What else could this issue be possibly about.
Configuration- Check.
Authorizations- Check.
Workflow- Check.
Should i raise it with SAP.
Thanks.

Does any one implemented solution for httpservlet request/response object in IWSDLInterceptor implemented class?

I am trying to handle Producer not available situation in which I am using Interceptor IWSDLInterceptor in WLP 10.3.4. I am able to retrieve exception using onWSDLException but from here if I have to forward my pageURL object I need httpservlet request and response. I tried my own filter class to have its own customize request and also tried it out all other Interceptor to see if any one can handle IOException. I did manage to throw my own Customize exception but that also did not work out as Page does not have any backing file or any supportive Controller class.
Does any one implemented solution for httpservlet request/response object in IWSDLInterceptor implemented class? or do we have any specific documentation in regards to this? As I am not able to find much martial on IWSDLInterceptor except Java API from Oracle and article defining Two way SSL handshake Producer.
Any kind of help is appreciated.
Thanks
PT

Thanks Emmanuel for your response but render behavior is not available for IWSDLRequestContext/IWDSLResponseContext object which IWSDLInterceptor uses for implementation.
Let me put my question in little simpler manner. May be my approach to the problem is not proper.
Problem : Handle Producer Not available (no application exists on server) on consumer side.
So far tried approach : Producer is not running then I am able to handle that TransportException at IInitCookieInterceptor/IHandleEventInterceptor onFault behaviour but in the case of Producer not even exists Consumer try to get WSDL fetch operation and failed with FileNotFoundException.
To handle this exception, I used IWSDLInterceptor which is available under IWSDLInterceptor.OnWSDLException (Oracle Fusion Middleware Java API for Oracle WebLogic Portal)
I am able to catch the exception but problem arise when application needs to forward at specific page/render portlet for this situation. For that it required request/response object but IWSDLInterceptor does not give any kind of instances to redirect request as there is no direct access to HTTPServlet request/response object.
I tried my custom request object to use there. I tried out custom filter object of IWSDLrequestContext. nothing works.
One approach works is to put producer WSDL file at consumer level. But in that, you need to handle different producer files for different environment. Which I don't think its a good approach.
eAny one Let me know if my approach to the problem/scenario is wrong. Or if I am missing out any other supporting interface which also required to handle this scenario. or I am using wrong interface for this scenario.
Thanks for your help in advance.
PT.

Is there going to be any CSS implementation

I was wondering if there is going to be any css
implementation to the TLF project, so that I can create a regulat
html using css and then 'give' that html to a flash so that it will
deploy it in my flash application

We will be making an HTML import feature available in new TLF
builds very soon, and we have recently introduced a styling
mechanism that could be extended to support CSS syntax (but doesn't
out of the box). That said, TLF is not an HTML/CSS rendering engine
and you should not expect to get the same result that you would out
of a web browser. If this is what you are looking for, check out
HTML
in AIR via Webkit.

Is it possible to Implement UAR Without ERM

Hi Experts,
We are using GRC Access Control 5.3 SP 11 & We are implementing three Components RAR,SPM,CUP.
I need to know whether we can implement UAR (User Access review) without ERM. If Yes, Please let me know how to get the role usage information to use in UAR Process.
Thanks in Advance!!!
Warm Regards
Venkata

Sorry but a big NO. I tried to figure this out and also spoke to SAP @ it. Currently, there is no way to implement UAR w/o ERM.
Alpesh

Implementing Stand Alone ERM?

We are investigating the feasibility of implementing Enterprise Role Management (ERM) as a stand alone application for managing roles, documentation and workflow approvals.
Other tools are being used for provisioning and SOD analysis. Unfortunately, implementing RAR and CUP are not options.
Has anyone had experience with running ERM without RAR and CUP?
Thanks!!!
Warm Regards,
Joe Klein

Hi Imanol,
Thank you for your response and valuable information. That is what I suspected. We are going to install the whole suite to make sure that any desired component is there... While we definately won't use RAR, we will configure the minimum in CUP to take advantage of the workflow engine (but not the core provisioning functionality). Some of my other contacts tell me this will work fine.
Other than not using RAR functionality with ERM, are there any other potential issues? Thanks again!
Warm Regards,
Joe Klein

List of Customers Implemented SAP B1 in India

Dear All,
Can anybody provide me the list of the Customers who have implemented SAP B1 in India.
Regards
Hitesh Parsawala

hi,
the information you are trying to ask is a quite classified. its better you contact SAP India [SAP India|http://www.sap.com/india/about/careers/index.epx] and they will be happy to assist you.
regards,
Fidel

Is there any successful implementation of Miller Heiman SAM in Siebel?

One of my customer is asking whether there is any experience with implementing the Miller Heiman SAM (http://www.millerheiman.com/our_products/sales_access_manager/index.
html) into SIEBEL 7.8? Is there a reference/partner with experience?
Can this be implemented at all??
Thanks

Hi Ishan,
From your question, it seems like you want to evaluate SolMan's success for the following Scenario/Sub-Scenarios:
(1) Solution Monitoring
- System Monitoring
- Business Process Monitoring (BPM)
If this is the case, one of the places I can suggest you to consult is Best Practice document for BPM, based on whatever satellite systems are involved.
A few documents can be found at:
https://websmp203.sap-ag.de/~form/sapnet?_HIER_KEY=701100035871000517057&_FRAME=CONTAINER
Best regards,
Srini

Is any body implemented N-step..

Hi,
<b> Friends , i am facing very big problem, even i posted lot of times , but no reply from you all.
please friends give me soluction for my problem.
is any body successfully implemented N-Step SC Item level approval workflow ( WS14500015 ) and BAdi BBP_WFL_APPROV_BADI.
please help me to fix my problem which i posted my last thread and i am posting once again in my next thread.</b>
thanks,
Durai.

Dear Poster,
As no response has been provided to the thread in some time I must assume the issue is resolved, if the question is still valid please create a new thread rephrasing the query and providing as much data as possible to promote response from the community.
Best Regards,
SDN SRM Moderation Team

Has anyone had any luck implementing their own Content Mgt SPI ?

Hello,
We have the content in a Vignette V7 using Oracle. We are weighing the pros and cons of pushing the content to the BEA Tables or implementing the SPI against the Oracle Tables in our Vignette Production Stage.
Any thoughts would be appreciated.

Its probably easier to write code to dump content+metadata into a file system area and have the BulkLoader push the content and metadata into Portal.

Would you implement GRC for just 2500 users

Hi
I've tried searching but my brain hurts so I'll probably get a roasting for asking a stupid and basic question
If you have a 4.6C system with around 2.5k users in it how would you establish the cost effectiveness of buying and implementing RAR 5.3 (AC10) initially?
Okay, I've hidden under the desk ready for abuse!
Cheers
David

David Berry wrote:
You would start with 10 singles to sort out and, by the time you had analysed who had what in which user group there would be 30 shiny new singles bobbing up and down and eager to go to PRD.
Exactly that is why I don't like them and why they also popup all over the place when you remediate a single role used by several composites and you don't know what the dependencies are.
You should only split roles because of Org-Levels.
The music (as far as authority-checks are concerned) are in the singles (with generated profiles).
Luckily (or not when remote enabled and the user can influence input parameters) newer concepts allow you substitute the org-level with programatic validations (for example "Business Partner" assignment of the "Person" mapped to the sy-uname).
I have 3 million users in a system with only 3 roles. How is that for a ratio?
GRC has a great value for backend config, support, development, etc such as other ABAP based authorization object concepts and you can map services and other applications to "actions" as if they were transactions, and you can do this logical system independently.
It is still tempting, but not really a hard requirement to be able to control the access and combinations in a limnited number of systems. It is certainly independent of the number of users!
A good build is always better - which is what GRC RAR will ultimately tell you anyway...
Cheers,
Julius
ps: The "blue boxes" are like this:
{quote} David said that composite roles are a dog's breakfast {quote}
Result =
David said that composite roles are a dog's breakfast

Any luck implementing note 454565?

Hi there,
We want to allow our customer to maintain partner data in CRM and have this data replicated to R/3. This scenario has already been setup and it works fine. There is however a requirement to maintain a customer specific field in CRM. This field already exists in R/3 (KNVV-PERFK), but it does not exist in CRM.
SAP has suggested to enhance partner data in CRM and implement note 454565 in R/3. This note should allow manipulation of the incoming data from CRM and modifications of the R/3 data.
There is however one problem. The note doesn't seem to work. The table CR_BAPIMTCS which I suppose should contain the modified bDoc from CRM is blank, when the code is executed in R/3. Are there any other notes to be considered?
Best regards,
Anders

Hello Anders,
Give me your email address and I will send you the middleware enhancement guide.
Regards,
Frédéric

Any luck implementing CTS_REQUEST_CHECK?

I am trying to implement the BAdI CTS_REQUEST_CHECK in a sandbox system. I have initally implemented all methods just with a BREAK-POINT to see when the methods are called. The implementation is active, but it doesn't seem like the methods are called? Have any of you had any luck trying to implement this BAdI? My goal is to check whenever someone modifies attributes of a shared constant class that this modification ends up in a separate transport request.
Best regards,
Anders

Did you read the documentation of badi in SE18 ?
You can use the business add-in CTS_REQUEST_CHECK to make checks when you are
editing requests.
You can use the following methods:
CHECK_BEFORE_CREATION
This method is called before a request is created and after the creation dialog box. It gives
you the option to:
make your own checkschange the short text and attributes.
CHECK_BEFORE_RELEASE
This method is called before a request is released. It gives you the option to:
make your own checks (for example, on the objects in the request)
change the short text and attributes.
CHECK_BEFORE_CHANGING_OWNER
This method is called before the owner of the request is changed, and after the confirmation
dialog box. It gives you the option to make checks.
Further notes
1. SAP may change request types and task types in future releases. The current request types and
task types are listed in the fixed values of the domain TRFUNCTION.
2. The method CHECK_BEFORE_CREATION is called for all request types, but not for task types.
The two other methods are called for all request and task types.
3. Only Customizing requests and Workbench requests can have attributes. This means that you
do not need to fill the attribute table for other request types, it is simply ignored.
4. If you want to stop one of the methods, you can trigger the exception CANCEL.

Can any one implement Discrete wavelet transform in PDA module

the attached vi does denoising based on dwt of waveform it works perfectly on computer but it shows some error when I try to run it as a pda module as I have used a dwt block from signal processing toolkit,could anyone suggest a solution or any other alternative it uses a text file..as input.
Attachments:
Mobile Portrait11 (1).vi ‏72 KB

I could add a low pass filter IIR to my data but the pourpose of this excersice is to use of the DWT to exactract useful information about a signal, e.g. feature extraction. What I also want to do is take one of the peaks observed at the coefficients and map it back to the original signal's time domain.

Any one implemented BADI :BADI_LE_SHIPMENT

Hi all,
Is anyone has implemented BADI: BADI_LE_SHIPMENT.
I am trying to implement the method: AT_SAVE and i want to update: VTRLK.
please let me know how should i implement AT_SAVE Method.
Thanks.

goto ->se19->givee name to implementation(classical)--->there it will ask for BADI definition -> and give all required ffild values->after that double click on the method which u want to active ---> u will get method screen
like
method
code here
endmethod
and save and activate.
Regards
Peram

Any Customers Implement GRC-AC ERM?

Similar Messages

Maybe you are looking for