Compliance Calibrator Start up

Hi,
We are planning to bring SOD tool Compliance calibrator soon for our r/3 system.......
before that I need to know how it works....I mean SAP provides CC software to be installed on R/3 server???
Can some tell me on which server CC installation takes place.

Hi Lisa,
Purpose of Installing RTA in R/3 Server
==============================
This is an ABAP component which continously and regularly collects data from R/3 Server. As I said, this the Backend used by all the GRC components that is:
1)Access Enforcer
2)FireFighter
3)Role Expert    and
4)Compliance Calibrator
What we install in J2EE Server and Purpose of it
====================================
These are Java Deployable files (called Software Deployable Archives, SDA). These files form the frontend to access GRC components. The purpose of this is that, this forms an Interface to access the different applications.
You have different SDAs for different applications like:
1)Access Enforce
2) Role Expert
3) FireFighter    and
4) Compliance Calibrator
For each application, you have respective Java Deployable files i.e., SDAs. Example, if you want to use Compliance Calibrator, then you need to install it FronEnd files (SDAs) on J2EE server access through Web Browser.
Data Flow
=========
I will take Compliance Calibrator example and explain it you you:
You have RTA installed in R/3 server and frontend files on J2EE server.
As you know, Compliance Calibrator is SODs violations reporting tool. Here you define all the rules and save it. You run reports called "Synchronization" for:
Users
Roles and
Profiles
When you run this, RTA (ABAP component in R/3 Server) will send the data as per your selection (User/Role/Profile) to FrontEnd on J2EE server where it maintains its own database in J2EE server for rendering purpose.
Then you run the "Risk Analysis" reports in front end of different types:
User
Roles and
Profiles
Then it gives you the reports accordingly. Any change in the R/3 Server, you need to re-run the "Synchronizaiton" reports again. Usually, these reports are run every day on "Incremental" basis.
Hope, this will answer what you have asked for.
Feel free to ask further queries.
Reward points if useful.
Thanks and Regards,
Faisal

Similar Messages

  • Need some practical Scenarios to test Compliance Calibrator, FF and AE

    Hi Experts,
    I have installed Compliance Calibrator 5.2 / Access Enforcer and Firefighter on a test System. However i am looking for some practical scenarios / Examples to test the functionlity of these installations. If any of you is currently working on these technologies i appreciate if you c an provide 2 3 scenarios to test my installation and functionality .
    Thanks in advance.
    Your help is much apprecaited..
    SK

    Hi SK,
    Testing the functionality of CC
    1. I would recommend to create some test roles where in you plug in some conflicting tcodes
        which can pose a sure SoD Risk, lets say Create Vendor Invoice(FB01) and Make an
        Automatic Payment(F110).
    2. Now run the Risk Analysis by choosing the Default SAP GRC ruleset library and do a  
        Role level Analysis.Then Assign the Test Roles to Test Users and then do a User Level Analysis.
    3. You may have create some Custom Rule sets with appropriate naming of Conflicting functions
        like Creation of Purchase Order (P001), Approve Purchase Order(P002)
        in different Application Areas like Purchase 2 Pay(P2P), Order 2 Cash (O2D) and try to do
        the same as above two steps.
    4. Test the functionality of Risk Remediation by removing the conflicting tcodes and do the
        Risk Analysis.Your previous Risk Roles must not appear
    5. Test the functionality of Risk Mitigation by placing a mitigation Control on the Conflicting tcodes
       and do the Risk Analysis.Your previous Risk Roles must not appear if you have properly
        configured your CC
    Testing the functionality of FF
    1. I would say create a few Firefighter IDs in different functional areas like FI, SD, MM, and then
       create some test users for Firefighter Owners, Controllers and Firefighters who can use
       the functionality of FF.
    2. Create some FF roles which have exceptional access in those functional areas
        encompassing transaction codes and authorization objects that are not used in normal incidents.
    3. Assign each of the FF roles to the respective FF IDs and then to the test Firefighters.
    4. Pull the log reports in FF and see if it gives exact details of the FF usage.
    5. You may have take some assistance of the Functional team members to do the testing.
    Testing the functionality of AE
    1. Create a workflow scenario of hiring a new user.
    2. Create the request under a test requestor. Assign the request to some test approver
    3. Also Assign some roles and test the functionality.
    Hope this helps for a good start
    Regards,
    Kiran Kandepalli.

  • Complience Calibrator Starting problem

    I have successfully updated all post installation task. Also I am able to test JCO Connection with ABAP system.
    when I try to access CC using following link
    http://<server>:<port>/webdynpro/dispatcher/sap.com/grc~ccappcomp/ComplianceCalibrator
    It is asking for user name and password. Upon supplying user name and password when clicking enter the same user name and password page appering again and agin.
    I am using J2EE_ADMIN as all role I have assigned to J2EE for GRC under UMA.
    Any idea what should be problem?
    Thanks

    It is good idea to reinstall Compliance Calibrator?
    As I have checked JOC Connection and it is running. I checked Visual Administrator services under deploy those I have to manually start but all are running. I have checked SLD Data supplier and it is running fine. I have checked action and role for CC it is also fine. I have assigned both roles one I have created with all actions and one created automatic created during installation.
    I am not sure what is problem? What am I missing?
    I have installed CC 5.2.

  • Compliance Calibrator Job Run

    Hi;
    I have submitted a job to run in Compliance Calibrator as job type = immidiate, but the job does not appear to start and sits in ready status in State column. Can anyone guess, what the problem can be?
    Regards;
    Sumanta

    Hello,
    This is known issue with GRC AC, please stop and start application "sap.com/grc~ccxsysbgear " from Visual Administrator - then you need to wait for some time and it should be started.
    Visual Administrator --> Server -->Services --> Deploy --> Choose Application --> sap.com/grc~ccxsysbgear -
    > Stop and then Start.
    Hope this helps.
    Thanks
    Davinder

  • Is Compliance Calibrator the same as GRC Access Control?

    I have been asked to look at<b> Compliance Calibrator </b>and am getting confused about what functionality is offered. I have done the basic e-learning course for Compliance Calibrator (GRC200): this was all about separation of duties etc. Fair enough. But I also have a Document called "<b>SAP GRC Access Control</b>" which talks about the same S.O.D compliance functionality but also talks of "roles triggering workflows", "users creating roles", "automated approvals for roles" eg:
    "SAP GRC Access Control streamlines access requests by filling each request automatically with user identity information from a lightweight directory access protocol (LDAP) directory or HR database, thereby eliminating the need for user intervention. Approvers receive an e-mail with a direct hyperlink to the request inside the application, where they can easily view and approve the request. The application then checks for security violations before updating accounts  automatically."
    None of this was covered on the Compliance Calibrator course, so what product offers this? I can see another product by Virsa called <b>Access Enforcer</b> but have no info on this... can anyone enlighten me?

    SAP GRC Access Control is the SAP application that comprises the former Virsa products Compliance Calibrator, Access Enforcer, Risk Terminator, Firefighter and Role Expert.

  • Custom report on Compliance Calibrator Job scheduler

    Currently in compliance calibrator it is not possible for a user to view the status, success or otherwise, of another users scheduled job or sync unless granting that user full administrator rights.
    Please advise if it's possible to expose the underlying scheduled job table for a given system via a custom built static html web page. Can you advise of the table that results would need to be displayed from and whether there would be any drawbacks of this approach, or if others have somehow solved this problem with another solution, please share?!
    What are SAP's timeframe's for finer grained security in CC?

    below are the tables used for CC:
    VIRSA_CC_ACTRULE               SAPSR3DB                                        
    VIRSA_CC_ACTRULHDR             SAPSR3DB                                        
    VIRSA_CC_ACTVL                 SAPSR3DB                                        
    VIRSA_CC_ADMIN                 SAPSR3DB                                        
    VIRSA_CC_ALLASTRUN             SAPSR3DB                                        
    VIRSA_CC_ALLISTDTL             SAPSR3DB                                        
    VIRSA_CC_ALLISTHDR             SAPSR3DB                                        
    VIRSA_CC_ALTCDLOG              SAPSR3DB                                        
    VIRSA_CC_AUTHHT                SAPSR3DB                                        
    VIRSA_CC_AUTHMAP               SAPSR3DB                                        
    VIRSA_CC_BKGINP                SAPSR3DB                                        
    VIRSA_CC_BUAPPVR               SAPSR3DB                                        
    VIRSA_CC_BUMONITOR             SAPSR3DB                                        
    VIRSA_CC_BUSPRC                SAPSR3DB                                        
    VIRSA_CC_BUSPRCT               SAPSR3DB                                        
    VIRSA_CC_BUSUNIT               SAPSR3DB                                        
    VIRSA_CC_BUSUNITT              SAPSR3DB                                        
    VIRSA_CC_CDHDR                 SAPSR3DB                                        
    VIRSA_CC_CDPOS                 SAPSR3DB                                        
    VIRSA_CC_CGROUP                SAPSR3DB                                        
    VIRSA_CC_CONFIG                SAPSR3DB                                        
    VIRSA_CC_CRACT                 SAPSR3DB                                        
    VIRSA_CC_CRACTT                SAPSR3DB                                        
    VIRSA_CC_CRACTVL               SAPSR3DB                                        
    VIRSA_CC_CRPRM                 SAPSR3DB                                        
    VIRSA_CC_CRPRMVL               SAPSR3DB                                        
    VIRSA_CC_CRPROF                SAPSR3DB                                        
    VIRSA_CC_CRPROFT               SAPSR3DB                                        
    VIRSA_CC_CRROLE                SAPSR3DB                                        
    VIRSA_CC_CRROLET               SAPSR3DB                                        
    VIRSA_CC_CRROLEVL              SAPSR3DB                                        
    VIRSA_CC_DATAEXD               SAPSR3DB                                        
    VIRSA_CC_DETDESC               SAPSR3DB                                        
    VIRSA_CC_FLDMAP                SAPSR3DB                                        
    VIRSA_CC_FUNC                  SAPSR3DB                                        
    VIRSA_CC_FUNCACT               SAPSR3DB                                        
    VIRSA_CC_FUNCBP                SAPSR3DB                                        
    VIRSA_CC_FUNCPRM               SAPSR3DB                                        
    VIRSA_CC_FUNCSYS               SAPSR3DB                                        
    VIRSA_CC_FUNCT                 SAPSR3DB                                        
    VIRSA_CC_GENACT                SAPSR3DB                                        
    VIRSA_CC_GENOBJ                SAPSR3DB                                        
    VIRSA_CC_GENOBJT               SAPSR3DB                                        
    VIRSA_CC_GENPRM                SAPSR3DB                                        
    VIRSA_CC_GENUSR                SAPSR3DB                                        
    VIRSA_CC_GPRMLIST              SAPSR3DB                                        
    VIRSA_CC_GSEQ                  SAPSR3DB                                        
    VIRSA_CC_JOBHST                SAPSR3DB                                        
    VIRSA_CC_LASTRUN               SAPSR3DB                                        
    VIRSA_CC_LOCKTABLE             SAPSR3DB                                        
    VIRSA_CC_LSYSGRP               SAPSR3DB                                        
    VIRSA_CC_MGALERTS              SAPSR3DB                                        
    VIRSA_CC_MGCRTR                SAPSR3DB                                        
    VIRSA_CC_MGMTBU                SAPSR3DB                                        
    VIRSA_CC_MGMTTOT               SAPSR3DB                                        
    VIRSA_CC_MGRISKD               SAPSR3DB                                        
    VIRSA_CC_MGRISKS               SAPSR3DB                                        
    VIRSA_CC_MICCTLDTL             SAPSR3DB                                        
    VIRSA_CC_MICCTLDTT             SAPSR3DB                                        
    VIRSA_CC_MICEXLOG              SAPSR3DB                                        
    VIRSA_CC_MICORGDTL             SAPSR3DB                                        
    VIRSA_CC_MICORGDTT             SAPSR3DB                                        
    VIRSA_CC_MICPRCDTL             SAPSR3DB                                        
    VIRSA_CC_MICPRCDTT             SAPSR3DB                                        
    VIRSA_CC_MICRMAP               SAPSR3DB                                        
    VIRSA_CC_MICUMAP               SAPSR3DB                                        
    VIRSA_CC_MITHROBJ              SAPSR3DB                                        
    VIRSA_CC_MITMON                SAPSR3DB                                        
    VIRSA_CC_MITPROF               SAPSR3DB                                        
    VIRSA_CC_MITREF                SAPSR3DB                                        
    VIRSA_CC_MITREFT               SAPSR3DB                                        
    VIRSA_CC_MITRISK               SAPSR3DB                                        
    VIRSA_CC_MITROLE               SAPSR3DB                                        
    VIRSA_CC_MITRPT                SAPSR3DB                                        
    VIRSA_CC_MITUSER               SAPSR3DB                                        
    VIRSA_CC_MITUSRORG             SAPSR3DB                                        
    VIRSA_CC_MONAPV                SAPSR3DB                                        
    VIRSA_CC_MSG                   SAPSR3DB                                        
    VIRSA_CC_MSGPRMS               SAPSR3DB                                        
    VIRSA_CC_MSGTYP                SAPSR3DB                                        
    VIRSA_CC_OBJTEXT               SAPSR3DB                                        
    VIRSA_CC_ORGRULE               SAPSR3DB                                        
    VIRSA_CC_ORGRULEM              SAPSR3DB                                        
    VIRSA_CC_ORGRULET              SAPSR3DB                                        
    VIRSA_CC_ORGUSERS              SAPSR3DB                                        
    VIRSA_CC_PRMRULE               SAPSR3DB                                        
    VIRSA_CC_PRMVL                 SAPSR3DB                                        
    VIRSA_CC_RISK                  SAPSR3DB                                        
    VIRSA_CC_RISKFUNC              SAPSR3DB                                        
    VIRSA_CC_RISKOWN               SAPSR3DB                                        
    VIRSA_CC_RISKRS                SAPSR3DB                                        
    VIRSA_CC_RISKT                 SAPSR3DB                                        
    VIRSA_CC_ROLEVL                SAPSR3DB                                        
    VIRSA_CC_RTMAP                 SAPSR3DB                                        
    VIRSA_CC_RULESET               SAPSR3DB                                        
    VIRSA_CC_RULESETT              SAPSR3DB                                        
    VIRSA_CC_SAPOBJ                SAPSR3DB                                        
    VIRSA_CC_SCHEDULER             SAPSR3DB                                        
    VIRSA_CC_SUPP_DET              SAPSR3DB                                        
    VIRSA_CC_SUPP_HDR              SAPSR3DB                                        
    VIRSA_CC_SUPP_TEXT             SAPSR3DB                                        
    VIRSA_CC_SYSCRACT              SAPSR3DB                                        
    VIRSA_CC_SYSHMAP               SAPSR3DB                                        
    VIRSA_CC_SYSRULE               SAPSR3DB                                        
    VIRSA_CC_SYSSAPOBJ             SAPSR3DB                                        
    VIRSA_CC_SYSTEM                SAPSR3DB                                        
    VIRSA_CC_SYSTEMC               SAPSR3DB                                        
    VIRSA_CC_SYSTEMT               SAPSR3DB                                        
    VIRSA_CC_SYSUSR                SAPSR3DB                                        
    VIRSA_CC_TEXTKEY               SAPSR3DB                                        
    VIRSA_CC_THREAD                SAPSR3DB                                        
    VIRSA_CC_USRMAP                SAPSR3DB                                        
    VIRSA_CC_VARIANT               SAPSR3DB                                        
    VIRSA_CC_VARVAL                SAPSR3DB                                        
    VIRSA_CC_WFOBJ                 SAPSR3DB                                        
    VIRSA_CC_XSRULEMAP             SAPSR3DB                                        
    VIRSA_CC_XSYSGRP               SAPSR3DB                                        
    You can go and check which one contains the scheduling info (VIRSA_CC_SCHEDULER ??)
    Hope this helps

  • Compliance Calibrator: Background jobs didn't bring in the correct data.

    Hi Gurus;
    In Compliance Calibrator; background jobs were last run on 5/27/09 but the management report shows that the summary is as of 5/20/09. That should have been updated uptill 5/27/09 and the new number of conflicts should have come up, which it didn't. What can be the problem?
    Thanking you;
    Raja

    Hi Harleen;
    This job was actually set by the client. So when I went to check the parameters of the jobs, I found that the field MGR_ANALYSIS consists of Field value "N". Does this mean that the Management Analysis box was not ticked when this job was scheduled?
    Regards;
    Raja

  • Custom Risks in Compliance Calibrator?

    Hello,
    Can someone please verify this process for me?
    My understanding is that once you create and configure a custom risk in Compliance Calibrator 5.2, you simply click generate and can then immediately run a risk analysis using the new custom risk.
    Is there any kind of a background job required to synchronise the new custom rule prior to running a risks analysis or any steps that I'm missing?
    Thanks your help is much appreciated,

    Hi Adamo,
       This is the exact process you need to follow. Once you create main risk and generate rules, you should be able to see the risk in CC. Have you enabled the particular risk? You can go to informer and try to run a simulation or ad-hoc analysis on that particular risk.
    Regards,
    Alpesh

  • How to add my own iview in Compliance Calibrator

    Hi Experts,
    can plaese tell me how to add my own iview in Compliance Calibrator 5.1.

    Anubha,
    If you are trying to add an iview or URL to Compliance Calibrator you have to login as an administrator go into the configuration tab, and go to Custom tabs toward the bottom of the left screen.  Here you can add custom URL links that will appear as tabs in Compliance Calibrator.
    Hope this helps
    Gabe

  • Compliance Calibrator SOD Conflict (FI01 and FB05)

    I was hoping that someone could provide some insight as to why the "FI01 - Create Bank" and "FI02 - Change Bank" transactions would create a risk (in Compliance Calibrator) when coupled in the same security role with the "FB05 - Post with Clearing" transaction.  The risk description given by Compliance Calibrator is "Maintain bank account and post a payment from it".
      The FI01 and FI02 t-codes appear to only create/change routing numbers or addresses for banks.  There is no ability to create or change an actual bank account.  This alone doesn't seem to create a conflict when coupled with a posting transaction.  Is there possibly some functionality that I am missing?

    Hi Joshua,
    I strongly agree with you that there is no SOD conflict technically with FI01, FI02 with FB05 although the wording of the SOD conflict in a business sense meaning Maintain Bank Accounts vs Posting Payments sounds more like a Conflict.
    I dont see by anyway how you can maintain actual bank account in either FI01, FI02.
    FI01 and FI02 - Maintain Bank Info like Bank Address, Bank Key and soforth.
    FB05 - Make Payments to various accounts.
    Regards,
    Kiran Kandepalli.

  • Compliance Calibrator v.4.0 Installation Guide?

    Does anyone have a Compliance Calibrator v.4.0 Installation Guide?  I cannot find one on SAP Service Marketplace.
    I have found a Security Guide, User Guide Supplement, User Guide, but no installation guide.
    Thank you!

    Hi there,
    I have the guide, and I can give it to you.
    Reach out to me at [email protected] and I'll get it to you.
    Thanks,
    Santosh

  • SAP GRC 5.2 Compliance Calibrator rule sets for HR module

    HI All,
    The company i am working for has done installation of GRC 5.2. I would like to download the SAP out of box Compliance Calibrator rule sets for HR function module in a spreadsheet format.
    I would like to download the rule set for risks at Function level, Tcode level and also at authorization object level in ABAP and Roles, actions and permissions in JAVA.
    I will discuss with the BPAs, internal auditors and come up with a new rule set exclusively for my company needs with the help of the above spreadhseet.
    Please tell me what steps i need to do to get this thing done.

    Please go through the process but save these as txt files for UNIX. I am not sure about 5.2 but CC4 was not uploading rule files correctly if file was not saved for TXT for UNIX.
    Regards,
    Harry Sidhu

  • Convert from Compliance Calibrator 4.0 to Risk Analysis and Remediation 5.2

    Hello Forum,
    I'm looking for other opinions on converting Compliance Calibrator (CC) 4.0 to Risk Analysis and Remediation (RAR) 5.2 (formerly CC)
    I have inherited responsibility for RAR and need to upgrade it to the 5.2 level; our current ECC level prevents us from going to 5.3
    I found a process that will unload the data from CC 4.0 and be imported into RAR 5.2
    I want to understand the definitions that comprise the RAR and was thinking about recreating the definitions in 5.2 based on what is already defined in the CC 4.0 system; I have time to do this since there is no definitive deadline that would make it impossible to meet
    Currently, I have the following definitions:
    Business Process 6 entries
    Functions 47 entries
    Risks 147 entries
    Mitigating Controls 40 entries
    Would others find this approach acceptable and reasonable even though I would be entering all the information? Basically, it would be like defining the data for the very first time if this was NEW software
    I would expect to come away with a good understanding of how everything ties together; at this point, I am only looking to create the necessary data that would allow for producing SOD reports that show all users with "risks" have been mitigated with acceptable controls
    Thanks for your responses in advance
    Jerry
    Ryerson, Inc
    630-758-2021

    Thanks for the reply
    I have the migration guide and have reviewed it; I have actually played around a bit with obtaining the file from CC 4.0; I found that the data records may need some adjustments to be compatible with RAR 5.2; one of the reasons that may be leading me to do everything from scratch
    The definitions currently defined were completed by an outside source and the mitigated controls were defined by the Internal Audit area
    I'm not sure if they were mixed with the defaults
    I'm not sure at this point what impact or changes I would experience if I use the "default" supplied rules set but I expect to find out
    Thanks again for your reply
    Jerry

  • SAP GRC Access Control - Compliance Calibrator - License Cost

    Dear all,
    I have some questions on Compliance Calibrator implementation.
    1. Do  we have to pay additional cost for the license to implement Compliance Calibrator?
    2. Since SAP GRC 5.3 is just released, which one do you recommend? SAP GRC 5.2 or 5.3?
    3. What would be the major difference between Compliance Calibrator in GRC 5.2 and 5.3?
    Best regards,
    Rolando

    Hi Rolando-
    1. Yes, there lies some license cost and the amount should not as much as taking SAP R/3 license. I am not sure of exact amount but its nominal as compared to other SAP products.
    2. SAP always recommend for the latest version available and why not one would go for latest version if you are paying something for that.
    Also, it depends on your existing R/3 version and its compatibility. In short run, you can choose per your existing versions but in long run everyone has to move to latest version. Say for example whoever is using SAP R/3 technology with whatever version, they all need to upgrade to ECC6.0 by 2011 with extension upto 2013. I am not sure of any such information about GRC AC though.
    3. Some enhancement have been done with CC 5.3. Those features include-
    1. Risk analysis for SAP Enterprise Portal and UME
    2. BI integration for custom reporting
    3. Reporting enhancement features include additional auditor, business manager and IT reports
    4. SOD management by exception. Can be integrated with workflow.
    5. Import/Export of configuration data
    6. Migration scripts
    7. Download and print capability on every report.
    Some performance improvements-
    1. Concurrent risk analysis.
    2. batch mode risk analysis
    3. Improved memory mgmnt etc.
    Hope it gives you now some more visibility.
    Cheers!
    Ashok

  • How to Modify the WD4J components of Compliance Calibrator

    Hi,
    I would like to modify the Mitigated Users WEBDYNPRO-JAVA Compliance Calibrator components(GRC). Please let me know the procedure for the same.
    If we have NWDI can we modify it?
    Is there a separate .sca file for Mitigated Users?
    Are there any dependencies for the components related to  Mitigated Users, if so what are they?
    Please provide me the step by step information to modify the GRC components.
    Thanks,
    Jhansi Miryala

    You cannot change any GRC AC applications, as the source code is not made public.
    Any changes you make will not be supported by SAP.
    Ankur
    SAP GRC RIG

Maybe you are looking for