Can't generate role in ERM

Hi,
In Production (ERM) while changing a role, i get to the generation stage. I click on the Generate butten, enter the pw and nothing happens.
Under the same conditions (same role name and configuration parameters) the process in  QA is working properly.
Does any one have any ideas?
Thank you,
Drorit

Hi,
The problem was, apparently , the parameter "Conduct Risk Analysis before Role Generation" which was set to "yes" and we had problems with the connection to the dev system, so the RA failed followed by the generation failure
Thanks,
Drorit

Similar Messages

  • Creation of roles in ERM

    Hi,
    I need to know how to create roles in/using ERM GRC.
    Can anyone provide information/documentation on the same?
    Thanks,
    Arjun

    Hi Arjun,
    You need to configure the workflow, connectors in ERM so that you can create a role from ERM.
    Please check the section "Enterprise Role Management" in configuration guide.
    You can get the configuration guide from service market place.
    Logon to service.sap.com -> Software Download -> Release & Upgrade info
    -> Installation & Upgrade Guides -> SAP BusinessObjects ->SAP BusinessObjects Governance, Risk, Compliance (GRC) -> Access Control -> SAP GRC Access Control 5.3
    "AC53_ConfigGuide.pdf"
    Regards,
    Shweta

  • How can I generate portal report that give list of iviews-roles-users

    Hello,
    I need to generate a portal report that will list all roles and iviews that assigned to them.
    iviews can be assigned direclty or trough worksets/folders/pages.
    Is there a way I can create such a list? Is it requires development? If so, Is anybody already deveopled such a report and can share the code?
    Thanks
    Ami

    Hi Ami,
    I cannot assure that this can be achived with portal application. Coz we are trying to get iviews n role info assigned to users. i.e. Portal object info.which is not stored in d server as it appears to end users. it will be stored as PCD ID based., not name based.
    The requirement might need to develop Portal Applicaion at SAP NWDS but, i am not sure of displaying iviews. Also we can get the Role IDs of assigned role but not Role.
    http://help.sap.com/javadocs/NW04S/current/se/com/sap/security/api/UMFactory.html
    Please follow UME API to achive this.
    IUserFactory userfactory =  UMFactory.getUserFactory();
    IRoleFactory rolefactory = UMFactory.getRoleFactory();
    IRoleSearchFilter rolefltr = rolefactory.getRoleSearchFilter();
    rolefltr.setMaxSearchResultSize(2000);
    ISearchResult result = rolefactory.searchRoles(rolefltr);
    while (result.hasNext())
      String uniqueid = (String) result.next();
      IRole role = rolefactory.getRole(uniqueid);
    The same thing can be applied to get users info i.e. Portal users list.
    Hope this helps you.
    Good Luck!
    Regards,
    Shaila

  • BI authorization objects not appearing in RAR, error while generating role

    Hi
    I am facing certain problems relating to integration of BI module version 7 with GRC Access Controls version 5.3 and support package 06. I am describing the problems in details below:
    (a)  In Risk Analysis and Remediation (RAR) component, I am creating Functions and
          Risks for Business Intelligence (BI) module. For that I have downloaded the
          descriptive text and authorization object data from BI development system and
          uploaded the same in RAR. Then I have created 2 Function Ids DBI1 (having action
          RSA1) and DBI2 (having actions RSA11, RSA12, RSA13, RSA14, RSA15) and 1
          Risk Id for BI (having Function Ids DBI1 and DBI2) in RAR. But when I checked
          the permission tabs of the Function Ids DBI1 and DBI2, I could not find any
          authorization objects for the actions in them.
    (b)  In Enterprise Role Management (ERM), when I am trying to create a Role TEST-BI
           in DBI 100 and I put the  BI transaction codes in authorization data , I get the
           authorization objects . Risk analysis is also being done successfully. But at the time
           of Role generation in background mode , it is giving an error message :
           Error generating role TEST-BI for system DBI 100: Unable to interpret * as a number.
           I am thus unable to generate any role in DBI 100.
    (c)  In Compliance User Provisioning (CUP), I have imported a standard role from DBI
          100. Then I have added Functional Area, Business Process, Subprocess  and
          Criticality Level to this role in CUP. But when I try to assign this Role to an user, it
           gives an error Error creating request. But requests are getting created and roles are
           being assigned to users in ECC development  systems using the same Initiator, CAD, stage
           and path.
    Can anyone please help me ?

    -

  • Delete request / role in ERM GRC 5.3

    Hi All
    I have a Role in ERM that I need to delete. Buuut, Role deletion is not possible; it has sent for approval.
    In CUP we have already deleted all request (following instructions by SAP note) and there is not any request in the system.
    The problem is that I can't delete this role from ERM because has been sent for approval, but I cant find the request in CUP or ERM, what can I do? Please, help me !!
    Thanks in Advance.
    David. ..

    Hi David,
    I was the same problem when i wanted to create a new role.
    Confirm in the Approval stage what user you assign as approver. The system doesn´t check if this user exists.
    If this user doesn´t exists, the only possibility to delete the role is create a new UME user with this user, giving the necessary roles and log in to CUP to delete the role.
    I hope this help you,
    Sergio

  • How can we generate a report in master data?

    hi,
    can we generate a report in master data,if yes pl give me the procedure, i am un able to get it.
    thanks & regards
    venkat

    Hi,
    Once we make the MAster infoobject as the data target, then we can create the report on the master data. to make the IO as Data target , you just need to mention the tick mark for<i> Infoprovide</i> check box  in the <i>MAster data /Texts</i> tab page of the IO.
    help says that:
    <i>InfoProvider:
    This indicator specifies whether the characteristic is an InfoProvider.
    If you want to use a characteristic as an InfoProvider, you have to assign an InfoArea to the characteristic. The system displays the characteristic in the InfoProvider tree in the Data Warehousing Workbench. You can use the characteristic as an InfoProvider in reporting and analysis.
    You can only use a characteristic as an InfoProvider if the characteristic contains texts or attributes.
    You can define queries for the characteristic (more precisely, for the master data of the characteristic) if you are using a characteristic as an InfoProvider. In this case, on the Attributes tabstrip, you are able to switch-on dual-level navigation attributes (navigation attributes for navigation attributes) for this characteristic in its role as InfoProvider.</i>
    With rgds,
    Anil kumar Sharma .P
    IBM-India.

  • Error: Creation new role in ERM

    Dear all,
    When I create a role in ERM, specifically when I try to add Object, is generated the following error message:
    Unhandled error; Message Code is 077 Message Details You are not authorized to use transaction PFCG Message Type is E.
    My version is SAP GRC AC 5.3 and Support Package: 16.
    Thanks all for any suggestions!
    Liliana!

    Hi ,
    User id which is used for connector doesnu2019t have sufficient privileges .
    Kindly ask your admin to assign sufficient access to connector user and then try .
    Thanks & Regards
    Asheesh

  • Import Roles methodology @ ERM

    Hello all,
    We are facing some concerns regarding import roles methodology and would like to consult we you.
    The import roles methodology raised a concern since it is done partially by uploading data from an excel file (template by SAP).
    Our customer wants reassurance that this is a safe process and to know about other customers experience and results (how many problems they encounter? How fast is the process? What issues occur while uploading the roles to ERM? Related information etc.
    Could you advice?
    Thanks in advance
    Rothem

    Hello Rothem,
    1. Our customer wants reassurance that this is a safe process and to know about other customers experience and results (how many problems they encounter?
    The process is completely safe and even if you miss out on some of the role updates, you can still do specifically the ones you missed.
    2. How fast is the process?
    This is not generally a very time consuming tasks and provided your machine configuration is as per standards, this would not really be an area for concern at all. I mean, to my knowledge and experience I have not cme accross a situation where it took a lot of time and became a thing to worry about.
    3. What issues occur while uploading the roles to ERM? Related information etc.
    These I guess have already been mentioned by people in the above posts and are mostly of the similar nature, just as they are mentioning. Better to try first with a few of the Roles and then if it happens smoothly, you can upload the rest all in one go.
    Regards,
    Hersh.
    http://www.linkedin.com/in/hersh13
    Edited by: HERSH GUPTA on Jun 4, 2009 1:42 PM

  • How to create SCATT to Create and generate Role with Authorisation Data.

    Helo Guru's
    Please advice ..How to generate Roles using SCAT sript.
    I created scat script to create Role and add tcodes ..But not able to generate Profles using SUPC...
    Is it possible to create Authorisation Data using scat scripts ....or we need to do it Manually
    Thanks

    Hi,
    You can't use CATT scripts to create roles and populate authorization data, since the organization values/authorization objects/ and field values differs from one to the other role.
    However, you may use CATT scripts till creating the role, and adding the transaction codes, but every role should be maintained individually.
    Hope this clarifies!
    Regards,
    Raghu

  • Can we generate proforma invoice in case of POD for GI

    Hi
    Can you please clarify me the following....
    Can we generate proforma billing after goods issue if the transaction is POD relevant.
    while sending the goods to the ship-to a proforma invoice  should accompany the goods.
    Is it possible ?

    Hi Anil,
    Yes you can create Proforma invoice for the delivery after PGI even that delivery is relevant for POD.
    You can accompany a proforma invoice while sending the goods to the ship-to party.
    I hope it will help you,
    Regards,
    Murali.

  • From which table we can get the Role of the User in SRM

    Hi  All,
        I need to prepare a report which displays the user and his role in srm. So from which table i can get  the role of the user if i have the Userid.
    Thanks
    Channappa Sajjanar

    Hi
    t- code
    SUIM->rOLES->BY USER ASSIGNMENT
    SELECT WITHASSIGNMENT OF USER = username
    AS A OUTPUT YOU MAY GET ROLE ASSIGNED TO THAT USER.
    if you want which FM - you debug while executing this report.
    regards
    Muthu

  • How can I Generate two different reports from single execution of Test cases in NI teststand

    Hi,
    My requirement is to generate two different reports from NI teststand. One for the Logging of error descriptions and the other report is by default generated by the Teststand. How can i generate a txt file that contains error descriptions other than that mentioned in the default report?
    Solved!
    Go to Solution.

    Do you need to do that just for these two sequences but not for other sequences? I don't see a problem to use SequenceFilePostStepRuntimeError. Create this callback in both sequence files and configure them to log into the same file. SequenceFilePostStepRuntimeError callback is called after each step of the sequence file if it has runtime error. You can access the calling step error information via RunState.Caller.Step.Result.Error property. Take a look to attached example.
    The "other way" is useful if you need to log errors not for every step of the sequence file, but for some of them. This is more complex, because you need to create a custom step types for these steps. For the custom step you can create substeps (post-step in your case) which will be executed every time after step of this type executed. Then, this is you job to determine if error happened in the step, acces to step's error information is via Step.Result.Error property. 
    Also, be aware that step's post-expression is not executed in case of error in the step.
    Sergey Kolbunov
    CLA, CTD
    Attachments:
    SequenceFilePostStepRuntimeError_Demo.seq ‏7 KB

  • Can we generate one report tab for each of the prompt values selected in the bobj 4.0 webi report.

    can we generate one report tab which filters
    with each prompt value selected in bobj 4.0 webi report.

    Hi Shrinidhi ,
    It can be achievable with static tabs created for each LOV .But this is not recommended because , object values can change dynamically .
    It is good idea to use section on prompt object in the report .With sections great feature available is in larger report it’s easy to navigate using map. It displays the section tree.You can select the particular LOV to navigate.

  • Can Designer generate ADF Entity Objects, View Objects and Apps Module ?

    Hi all,
    On what way can Designer integrate with JDeveloper (+ ADF) ?
    Can Designer generate ADF Entity Objects, View Objects and Apps Module ?
    Thank you for your help,
    xtanto

    Designer itself has no direct integration with JDeveloper. However, there are three options. First of all, you can get a JDeveloper extension (download this separately) that lets you create a Connection to a Designer repository. From that Connection you can find modules that you defined in Designer and generate Entity and View objects for the tables and columns that you used in those modules, and an Application Module. It does not create JSPs or other user interface objects.
    Another option is to buy JHeadstart from Oracle. This contains a set of code generators and ADF extensions that include an ability to get information from a Designer repository. JHeadstart works fine for non-Designer users too, but was built by the same people who wrote Designer Headstart - they know the repository API intimately.
    The third option is to download Oracle Designer Extension Builder (ODEB) which was just recently made available. This is a product of a collaboration between Designer users from the Oracle Development Tools Users Group (ODTUG) and Oracle to extend the capabilities of Designer with user written tools and utilities. You could use ODEB to write your own generators for ADF Business Components. Or you could wait and see if someone else in the user community does this. I hope that you or whoever does such a generator will be willing to share it with us all.

  • Can i generate more than 1 library for 2 ipods?

    I have a mini ipod and just bought a nano ipod for someone else. We are using the same computer. how can i generate another library for his use?

    Candice,
    Welcome to Apple Discussions.
    How to use multiple iPods with one computer.
    JJ
    Don't steal music !! Just a statement, not an accusation

Maybe you are looking for