CUP Request Routing

Experts,
Is it possible to route requests dependent on if there are SOD Conflicts or Not?
Currently, we are running RIsk Analysis as soon as the request is generated by the end user.
Ideally the configuration would work like this:
1. Conflicts: No; Route to B, C
2. Conflicts: Yes; Route to A, B, C
Thanks in advance.
Take care,
Kunal

Yes, Kunal. You can use the detor functionality in CUP workflow to route the request to different approvers when there is an SoD. Here is what you have to do:
1) Create a regular path with two stages B and C
2) Create a detour path with 3 stages A, B and C.
3) Associate the main initiator with regular path from Step 1.
4) Create a detour condition by going to workflow -> detour/fork so that when there is an SoD the request gets routed to detour path created in Step 2.
Regards,
Alpesh

Similar Messages

Role created in ERM is not appearing in CUP request for assignment-GRC 10.0

Hi,
We are on GRC 10.0 - SP5
We have created a role in ERM and it was succesfully created in backend system. However when we tried to assign the same role using CUP request - the role is not appearing.
1) Do we need to upload roles for CUP in GRC 10.0 (similar to 5.3) to populate. Will the role doesnot automatically appears in GRC database for CUP as it is created through ERM?
2) If the roles are imported in ERM with role owner information, does the same reflects for CUP also for role owner approver assignments?
Thanks and Best Regards,
Srihari.K

Hi Sri,
Is the role status set to "production" ??
Cheers,
Diego.

GRC-AC v5.3, patch8.1: cannot retrieve user information in CUP Request

Hello,
version: GRC-AC v5.3, patch8.1
I am currently having trouble bringing up user information in a CUP Request. It is only occuring in our GRC-AC DEV system. I have checked that all of my AE Config settings are the same and the backend system RTA is correct.
Thanks for your help!
Here is the AE Log:
2009-12-02 14:21:48,912 [SAPEngine_Application_Thread[impl:3]_35] ERROR com.sap.mw.jco.JCO$Exception: (104) RFC_ERROR_SYSTEM_FAILURE: No more storage space available for extending an internal table.
com.sap.mw.jco.JCO$Exception: (104) RFC_ERROR_SYSTEM_FAILURE: No more storage space available for extending an internal table.
                        at com.sap.mw.jco.MiddlewareJRfc.generateJCoException(MiddlewareJRfc.java:516)
                        at com.sap.mw.jco.MiddlewareJRfc$Client.execute(MiddlewareJRfc.java:1514)
                        at com.sap.mw.jco.JCO$Client.execute(JCO.java:3980)
                        at com.sap.mw.jco.JCO$Client.execute(JCO.java:3417)
                        at com.virsa.ae.service.sap.SAPR3UserDAO.executeFind(SAPR3UserDAO.java:441)
                        at com.virsa.ae.service.sap.SAPR3UserDAO.getUsers(SAPR3UserDAO.java:1762)
                        at com.virsa.ae.service.umi.sap.SAPR3SearchUser.getUsers(SAPR3SearchUser.java:317)
                        at com.virsa.ae.search.bo.SearchUserBO.findUsers(SearchUserBO.java:110)
                        at com.virsa.ae.search.actions.SearchUserAction.searchUsers(SearchUserAction.java:2315)
                        at com.virsa.ae.search.actions.SearchUserAction.searchRequestors(SearchUserAction.java:1999)
                        at com.virsa.ae.search.actions.SearchUserAction.execute(SearchUserAction.java:260)
                        at com.virsa.ae.commons.utils.framework.NavigationEngine.execute(NavigationEngine.java:295)
                        at com.virsa.ae.commons.utils.framework.servlet.AEFrameworkServlet.service(AEFrameworkServlet.java:431)
                        at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
                        at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:401)
                        at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:266)
                        at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:386)
                        at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:364)
                        at com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:1039)
                        at com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:265)
                        at com.sap.engine.services.httpserver.server.Client.handle(Client.java:95)
                        at com.sap.engine.services.httpserver.server.Processor.request(Processor.java:175)
                        at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:33)
                        at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)
                        at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)
                        at java.security.AccessController.doPrivileged(Native Method)
                        at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:104)
                        at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:176)
2009-12-02 14:21:48,931 [SAPEngine_Application_Thread[impl:3]_35] ERROR Search could not be completed
com.virsa.ae.service.ServiceException: No more storage space available for extending an internal table.
                        at com.virsa.ae.service.sap.SAPR3UserDAO.executeFind(SAPR3UserDAO.java:444)
                        at com.virsa.ae.service.sap.SAPR3UserDAO.getUsers(SAPR3UserDAO.java:1762)
                        at com.virsa.ae.service.umi.sap.SAPR3SearchUser.getUsers(SAPR3SearchUser.java:317)
                        at com.virsa.ae.search.bo.SearchUserBO.findUsers(SearchUserBO.java:110)
                        at com.virsa.ae.search.actions.SearchUserAction.searchUsers(SearchUserAction.java:2315)
                        at com.virsa.ae.search.actions.SearchUserAction.searchRequestors(SearchUserAction.java:1999)
                        at com.virsa.ae.search.actions.SearchUserAction.execute(SearchUserAction.java:260)
                        at com.virsa.ae.commons.utils.framework.NavigationEngine.execute(NavigationEngine.java:295)
                        at com.virsa.ae.commons.utils.framework.servlet.AEFrameworkServlet.service(AEFrameworkServlet.java:431)
                        at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
                        at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:401)
                        at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:266)
                        at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:386)
                        at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:364)
                        at com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:1039)
                        at com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:265)
                        at com.sap.engine.services.httpserver.server.Client.handle(Client.java:95)
                        at com.sap.engine.services.httpserver.server.Processor.request(Processor.java:175)
                        at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:33)
                        at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)
                        at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)
                        at java.security.AccessController.doPrivileged(Native Method)
                        at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:104)
                        at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:176)
Caused by: com.sap.mw.jco.JCO$Exception: (104) RFC_ERROR_SYSTEM_FAILURE: No more storage space available for extending an internal table.
                        at com.sap.mw.jco.MiddlewareJRfc.generateJCoException(MiddlewareJRfc.java:516)
                        at com.sap.mw.jco.MiddlewareJRfc$Client.execute(MiddlewareJRfc.java:1514)
                        at com.sap.mw.jco.JCO$Client.execute(JCO.java:3980)
                        at com.sap.mw.jco.JCO$Client.execute(JCO.java:3417)
                        at com.virsa.ae.service.sap.SAPR3UserDAO.executeFind(SAPR3UserDAO.java:441)
                        ... 23 more
2009-12-02 14:21:48,937 [SAPEngine_Application_Thread[impl:3]_35] ERROR Search could not be completed
com.virsa.ae.service.umi.UMIException: Search could not be completed
                        at com.virsa.ae.service.umi.sap.SAPR3SearchUser.getUsers(SAPR3SearchUser.java:326)
                        at com.virsa.ae.search.bo.SearchUserBO.findUsers(SearchUserBO.java:110)
                        at com.virsa.ae.search.actions.SearchUserAction.searchUsers(SearchUserAction.java:2315)
                        at com.virsa.ae.search.actions.SearchUserAction.searchRequestors(SearchUserAction.java:1999)
                        at com.virsa.ae.search.actions.SearchUserAction.execute(SearchUserAction.java:260)
                        at com.virsa.ae.commons.utils.framework.NavigationEngine.execute(NavigationEngine.java:295)
                        at com.virsa.ae.commons.utils.framework.servlet.AEFrameworkServlet.service(AEFrameworkServlet.java:431)
                        at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
                        at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:401)
                        at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:266)
                        at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:386)
                        at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:364)
                        at com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:1039)
                        at com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:265)
                        at com.sap.engine.services.httpserver.server.Client.handle(Client.java:95)
                        at com.sap.engine.services.httpserver.server.Processor.request(Processor.java:175)
                        at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:33)
                        at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)
                        at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)
                        at java.security.AccessController.doPrivileged(Native Method)
                        at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:104)
                        at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:176)
Caused by: com.virsa.ae.service.ServiceException: No more storage space available for extending an internal table.
                        at com.virsa.ae.service.sap.SAPR3UserDAO.executeFind(SAPR3UserDAO.java:444)
                        at com.virsa.ae.service.sap.SAPR3UserDAO.getUsers(SAPR3UserDAO.java:1762)
                        at com.virsa.ae.service.umi.sap.SAPR3SearchUser.getUsers(SAPR3SearchUser.java:317)
                        ... 21 more
Caused by: com.sap.mw.jco.JCO$Exception: (104) RFC_ERROR_SYSTEM_FAILURE: No more storage space available for extending an internal table.
                        at com.sap.mw.jco.MiddlewareJRfc.generateJCoException(MiddlewareJRfc.java:516)
                        at com.sap.mw.jco.MiddlewareJRfc$Client.execute(MiddlewareJRfc.java:1514)
                        at com.sap.mw.jco.JCO$Client.execute(JCO.java:3980)
                        at com.sap.mw.jco.JCO$Client.execute(JCO.java:3417)
                        at com.virsa.ae.service.sap.SAPR3UserDAO.executeFind(SAPR3UserDAO.java:441)
                        ... 23 more
2009-12-02 14:21:48,943 [SAPEngine_Application_Thread[impl:3]_35] ERROR Error in Searching Users...
com.virsa.ae.core.BOException: Error in Searching Users...
                        at com.virsa.ae.search.bo.SearchUserBO.findUsers(SearchUserBO.java:125)
                        at com.virsa.ae.search.actions.SearchUserAction.searchUsers(SearchUserAction.java:2315)
                        at com.virsa.ae.search.actions.SearchUserAction.searchRequestors(SearchUserAction.java:1999)
                        at com.virsa.ae.search.actions.SearchUserAction.execute(SearchUserAction.java:260)
                        at com.virsa.ae.commons.utils.framework.NavigationEngine.execute(NavigationEngine.java:295)
                        at com.virsa.ae.commons.utils.framework.servlet.AEFrameworkServlet.service(AEFrameworkServlet.java:431)
                        at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
                        at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:401)
                        at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:266)
                        at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:386)
                        at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:364)
                        at com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:1039)
                        at com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:265)
                        at com.sap.engine.services.httpserver.server.Client.handle(Client.java:95)
                        at com.sap.engine.services.httpserver.server.Processor.request(Processor.java:175)
                        at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:33)
                        at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)
                        at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)
                        at java.security.AccessController.doPrivileged(Native Method)
                        at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:104)
                        at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:176)

Hi,
As per error log, sounds space issue.
"ERROR com.sap.mw.jco.JCO$Exception: (104) RFC_ERROR_SYSTEM_FAILURE: No more storage space available for extending an internal table. com.sap.mw.jco.JCO$Exception: (104) RFC_ERROR_SYSTEM_FAILURE: No more storage space available for extending an internal table."
Check the tablespace with your Basis guy and increase it if neccessary.
Regards,
Sabita

Approve CUP request in 10.0

Dear Experts,
I have created a CUP request (ARM) in GRC 10.0 successfully. Now stage approver has to approve the request. I am really not sure where to approve the request. Please help me.
I appreciate your help.
Thanks,
Swathi.

Hello,
Well, the corresponding approver has to approve it. Have you performed all configuration steps according to this document:
http://www.sdn.sap.com/irj/scn/index?rid=/library/uuid/5067e447-5c64-2e10-7d9c-8f7e5953aadb
If yes, then check the GRC Help documentation in order to approve the request:
http://help.sap.com/saphelp_grcac10/helpdata/en/83/0445b2399e48108383a42efd1cf2cb/frameset.htm
Cheers,
Diego.

CUP 5.3 (SP9) Role search in a CUP request

Dear Experts,
I have a problem. I cannot select roles by company selection in a CUP request. I believe I am not associating companies to roles correctly...I don't know what went wrong and what additional procedures that I have to follow to fix this problem.
I need this selection feature since we are going to give a set of roles to users (or let them select) according to the company that they belong to.
Here is what I did basically:
1. Under Configuration>Role Attributes>Custom Filed in ERM, I set up a custom filed "COMPANY" and put some values (COMP1, COMP2, etc).
2. Under Configuration>Roles>Attributes in CUP, I also set up companies that are exactly the same as those in ERM.
2. Then, I created a role (ROLE1) in ERM and gave a company attribute (COMP1) to that role. Now, ROLE1 should be associated to COMP1, theoretically, right?
3. However, when I crate a new user in a CUP request and then search for a role (ROLE1) by selecting company attribute (COMP1), the role (ROLE1) does not show up. This is my problem.
PS: I have no problem getting a role by functional area, business process, or other predefined attributes in CUP.
Please save me if you can.
HM

Hi Frank,
1. The company ID is identical in ERM and CUP, and properly assigned to roles?
=Yes (double checked).
2. You have imported the roles from ERM to CUP?
=Yes (CUP>Roles>Import Roles/Groups, and the role source is ERM).
3. Do the roles show up with the correct company assigned in CUP Role Search?
=No (please see below commnets).
When I search roles in ERM (Role Management>Role>Search), I can see the company ID under the tab "Custom Attributes".
When I search roles in CUP (Config>Roles>Search Roles), I don't see the company ID anywhere including the tab "Company" and "Custom Attributes".
Does this give you any clue?
Thanks,
HM

One CUP request for assigning role to multiple users

Hi,
We assign roles to users in production only through CUP requests.. We use GRC 5.3
Here we have a case where we need to assign one role to 60 users in production(each user may have different roles assigned in the back end) . I can raise one CUP request for all users using " multi-user" option in Copy request . But when we want to make a risk analysis , it will not show risks at user level as each user had different roles and may get different risks by adding new role.
Instead it will give risks if any for only that new role which want to assign. Our manager is not accepting as this is not giving complete picture of risks for each user when we add new role.
Please suggest me if there is any other way where I can make a risk analysis for each user when I created a CUP request for multiple users.
Or the only solution is to create 60 CUP requests ?? this would be too manual
Regards ,
jaags

Raghu,
thanks for the reply, you are right as per the audit .But suppose if it is for 200 users ,creating 200 CUP requests will be impractical right.
there should be some solution for this , because there will be many situations practically where we have to assign roles to N number of users.
Is this possible in GRC 10 ? any idea ?
Regards,
Jaags

Add Fields in CUP Request - SAP GRC Access Control 5.3

Dear Friends,
I am wondering on how to add fields value in CUP (Compliant User Provisioning) SAP GRC AC 5.3.
Currently i'm leading 9 SAP Security Coordinators in Indonesia and i want to create Performance Metrics on how long the CUP Requests is processed. It needs to enhance the CUP by adding value Delegation of Authority and the record no. of the DOA requests.
Really appreciate your inputs on how to add fields value in CUP.
Thank you so much
-Mesti-
Edited by: AnnisaPramesti on Jan 2, 2012 5:37 PM

Hi.
Check under http://service.sap.com/instguides
SAP BusinessObjects -> SAP BusinessObjects Governance, Risk, Compliance (GRC) -> Access Control -> SAP GRC Access Control 5.3
Cheers,
Diego.

GRC AC5.3 CUP Requests Transaction Data Migration to 10.1

Hi,
We are starting a new upgrade from AC5.3 to AC 10.1 project. In migration document it mentioned that we can migrate CUP requests transactional data to 10.1.
our management is asking to maintain the CUP transaction data in AC10.1 application for future reference for auditing requirements. After closing of all old CUP requests we need to migrate CUP Requests Data into 10.1.
Is it possible? If possible, Please let me know if there are any challenges from your experience from your upgrade projects of same requirement.
Thanks,
Sathish.

Hi Ram,
Good Day,
Is that possible to download old CUP request as PDF format in AC 10.1 as part of data migration
Regards
Narayanan

WLS 8.1 SP2 : node-to-node request routing in cluster???

Hello everybody;
          a bit confused about request management in WLS clusters,
          hope you can help clarify, please.
          Do WLS 8.1 SP2 clusters use node-to-node request
          routing "behind the scenes"?
          If so, can this feature be explicitly configured/controlled?
          TIA
          Paola R.

Paola R. <[email protected]> writes:
          > Hello everybody;
          >
          >
          > a bit confused about request management in WLS clusters,
          > hope you can help clarify, please.
          >
          >
          > Do WLS 8.1 SP2 clusters use node-to-node request
          > routing "behind the scenes"?
          Only in certain circumstances (usually becuase you are using an applet
          or the servers are behind a firewall). Usually routing is client
          driven.
          >
          >
          > If so, can this feature be explicitly configured/controlled?
          No
          andy
          >
          >
          > TIA
          >
          >
          > --
          > Paola R.

We are not able to create CUP Requests

HI all
I am also gettting same error like this..We created CUP Requests one hour before ..But we are not able to create CUP Requests now.. I got below error message in system log.
Risk analysis failed: Exception in getting the results from the web service : Service call exception; nested exception is: com.sap.engine.services.webservices.jaxrpc.exceptions.InvalidResponseCodeException: Invalid Response Code: (401) Unauthorized. The requested URL was:"http://c700u121.com:50000/SAPGRC_CCRiskAnalysis_V01/Config1?wsdl&style=document"
2012-03-08 13:05:25,558 [SAPEngine_Application_Threadimpl:3]_23 ERROR com.virsa.ae.core.BOException: Exception in getting the results from the web service : Service call exception; nested exception is:
com.sap.engine.services.webservices.jaxrpc.exceptions.InvalidResponseCodeException: Invalid Response Code: (401) Unauthorized. The requested URL was:"http://c700u121.com:50000/SAPGRC_CCRiskAnalysis_V01/Config1?wsdl&style=document"
com.virsa.ae.core.BOException: Exception in getting the results from the web service : Service call exception; nested exception is:
com.sap.engine.services.webservices.jaxrpc.exceptions.InvalidResponseCodeException: Invalid Response Code: (401) Unauthorized. The requested URL was:"http://c700u121.com:50000/SAPGRC_CCRiskAnalysis_V01/Config1?wsdl&style=document"
at com.virsa.ae.accessrequests.bo.RiskAnalysisBO.findViolations(RiskAnalysisBO.java:199)
at com.virsa.ae.accessrequests.bo.RiskAnalysisBO.findViolations(RiskAnalysisBO.java:80)
at com.virsa.ae.accessrequests.bo.RequestBO.saveRiskAnalysis(RequestBO.java:4087)
at com.virsa.ae.accessrequests.bo.RequestBO.saveNewRequest(RequestBO.java:408)
at com.virsa.ae.accessrequests.actions.CreateRequestAction.createRequest(CreateRequestAction.java:381)

Hello Naga!!
Has your problem been solved??? Error Creating Request - Risk Analysis in CUP
If yes, I'd be nice if you close this thread and document your solution
If not, please let us know.
Be aware that the user should set the Security Policy to "technical user" to avoid problems with password expiration as per note 1296696.
Cheers!!
Diego.

Making comments mandatory for only some roles when approving CUP requests.

Does anyone know if there is a way to make Comments required in CUP requests when approving a request for just certain roles? We don't want comments to always be required, just if you are approving a request for Role XXX for example.
I tried using the Comments Mandatory setting that is available on the Role Details screen (along with the associated flags on the Roles/Role Selection screen), but this only seems to require a 'request reason' for the role when the request is being built. It doesn't require comments when the request is being approved. (There also appears to be a bug with this because this request reason doesn't show up anywhere in the request after it is built.)
I know you can set the Comments Mandatory on for the workflow stage, but then you have to enter a comment for every request, regardless of the roles. We are wanting them to required only for a few specific roles.
We are on GRC 5.3 11.2.
Thanks.

Hi Bob,
It is not possible to enable the comment option only for few roles. Either it can be on for all, or off.
Rgds,
Raghu

What tables contain data for the CUP requests in 5.3?

What are all of the tables that contain the data that appears in the CUP requests? We are on version 5.3 SP13.
We are selling off one of the divisions of our company and one of the terms is that we have to provide all relevant data, including CUP requests. Since there are several hundreds of requests for this division (last count was over 600), it is not practical to just download the individual requests out of CUP. So plan B is to just give them the data.
I know there are several tables that contain this data, and I know some of them (such as VIRSA_AE_REQD_HDR and VIRSA_AE_RQD_WPHS), but I don't know all of them. (and I would rather not have go thru and to check every table)
Thanks.

Hi Bob,
I have never looked at the VT_AE tables to extract any information. Since your requirement is unique, I have a positive note that SAP would help you with it. Giving a try would worth it sometimes
Else, paste the list of tables here, so that some one can help you.
Have a great weekend!!
Cheers,
Raghu

CUP v5.3 SP11.1 - CUP Request button "Existing Roles/Groups"

Hi!
Re: CUP v5.3 SP11.1 - CUP Request button "Existing Roles/Groups"
Can anyone explain why some of our CUP users will see this CUP button in the CUP Request and others will not? Are they missing a UME "ACTION"?
The button works fine, but it only shows up for some users and not others.
Thanks for your help!
-john

Hello ,
For Approvers , the button "Existing Roles /Groups" will be visible only when the following "stage" level setting is set
Change Request Content = Yes
Add Role =Yes .
Regards
-Ranjiv

Risk Analysis in a CUP request

Is there any way to run a Risk Analysis in a CUP request on different Rule Sets?
Letu2019s say you have 3 different Rule Sets like US - EU u2013 Global defined in RAR. Each one includes its own risks. In a CUP
request, it shows risks based on the u201CVirsaCCRiskAnalysisServiceu201D defined in your CUP config.
In our case we use the global Rule Set but the problem is for an EU request you can have US risks appearing that must be mitigated even if those risks are not relevant for EU.
It would be great if we could link the attributes Company or Functional Area directly to a specific rule set.
Please help/comment on this issue.
Regards

Hi,
When we perform risk analysis on the request, ruleset for the risk analysis for CUP request is picked from RAR default values.
RAR-> Configuration-> Default Values-> Default rule set for risk analysis.
This rule set is picked by CUP to perform the risk analysis.
With the current design it is not possible to link the attributes Company or Functional Area directly to a specific rule set.
Kind Regards,
Srinivasan

How to verify Risk Analysis done for CUP request?

We are on GRC 5.3 SP 13.
Is there a way to verify whether a Risk Analysis was performed during a stage for a CUP request?
We have a CUP request that should have generated a SOD Risk when it was processed. However the closed request shows no risk or mitigations on it. The approvers say they ran a Risk Analysis, and the workflow stage does have that set as mandatory. Also, you do get SODs if you run a User Analysis for this userid in RAR directly, so it looks like the request should have had them also.
Is there any way to verify whether a Risk Analysis was actually performed in the CUP request workflow stage?
At this point I don't know if this is a problem with the CUP Risk Analysis, or if the user just didn't run one and the system let that slip thru somehow.
Thanks.

I bellieve you can log into RAR>RAR Debugger>View Server Log>You can search on Analysis. If your are getting any errors they will also show up here.
Example:
INFO: Foreground : Analysis starts:
Mar 9, 2012 3:44:23 PM com.virsa.cc.xsys.meng.ObjAuthMatcher <init>
FINEST: ObjAuthMatcher constructed: 0ms, #singles=11, #ranges=0, #super=0
Mar 9, 2012 3:44:23 PM com.virsa.cc.xsys.riskanalysis.AnalysisEngine performActPermAnalysis
INFO: Foreground : Analysis done: 55550000 elapsed time: 49 ms
Mar 9, 2012 3:44:23 PM com.virsa.cc.xsys.riskanalysis.AnalysisEngine performActPermAnalysis
INFO: Foreground : 1 out of 1 (100%) done
Mar 9, 2012 3:44:23 PM com.virsa.cc.xsys.riskanalysis.AnalysisEngine performActPermAnalysis
INFO: Foreground : All Analysis done, elapsed time: 64 ms , memory usage: free=782M, total=2048M
Mar 9, 2012 3:44:23 PM com.virsa.cc.xsys.riskanalysis.AnalysisEngine performActPermAnalysis

CUP Request Routing

Similar Messages

Maybe you are looking for