Disable Rules- Actions no longer needed in GRC RAR

Hello together,
Requirement: Disable Rules in RAR 5.3
There is a particular Risk ID: F029, where it has the below Conflicting Actions to be Disabled in RAR 5.3
"Post Outgoing Payments (F-31)  and   Enter G/L Account Posting (F-02)
"Enter G/L Account Posting (F-02)  and   Post with Clearing (FB05)
"Post Outgoing Payments (F-31)  and   Post Document (FB01)
"Post with Clearing (FB05)  and   Post Document (FB01)
"Post Outgoing Payments (F-31)  and   Post with Clearing (FB05)
"Post with Clearing (FB05)  and   Post with Clearing (FB05)
"Post Outgoing Payments (F-31)  and   Reverse Document (FB08)
"Reverse Document (FB08)  and   Post with Clearing (FB05)
"Post Outgoing Payments (F-31)  and   Post Document (FBR2)
"Post with Clearing (FB05)  and   Post Document (FBR2)
"Post Outgoing Payments (F-31)  and   Reverse Cross-Company Code Document (FBU8)
"Post with Clearing (FB05)  and   Reverse Cross-Company Code Document (FBU8)
"Post Outgoing Payments (F-31)  and   Post Parked Document (FBV0)
"Post Parked Document (FBV0)  and   Post with Clearing (FB05)
When checked the relevant functions underneath the listed Actions, they contain in the Function (AR01 & GL01)
I have listed out the common Actions and listed out the functions:
Risk ID    Actions    Function ID
F029              F31                      AR01
F029              F02                      GL01
F029              FB01                    GL01
F029              FB05                    GL01 & AR01
F029              FB08                    GL01
F029              FBR2                    GL01
F029              FBU8                    GL01
F029              FBV0                    GL01
Preformed the below steps to disable the Actions:
Rule Architect-> Functions-> Search-> Function ID-> E.g. AR01-> Search-> Change-> F-31-> Disabled.
*Issues*:
When Disabled the Action F-31, noticed that all other risks (apart from the given list above ) were also being disabled and got escalated. As Action F-31 was in conflict with other Actions and functions.
Inputs Required:
Therefore could anyone suggest in how to disable only the listed combination of Actions from RAR. As when checked through my analysis there is no option to Individually disable the Rule IDs.
Do I have to create and build the complete Rule Sets again, can anyone suggest me the next steps in what needs to be done, for these actions to be disabled.
Thank you
Regards
Sridhar

Hello Simon and Sri Hari,
Regret for the delay in reply and I am very thankful for your suggestions.
I have manually added the Rule Ids under the newly created Mitigating Ids. I followed the below steps:
1) Mitigation-> Created Mitigating Id (SMFI0004) and under Associated Risks I have manually inserted the Rule Ids (e.g. F0290KA01)
2) - Clicked on Mitigate Users and Provided the associated Users ID : SP209
    - In the Risk ID: I directly inserted the Rule ID: F0290KA01 and assigned the monitor IDs accordingly and saved the data to show up a false positive Mitigating report.
Issue:
Once I have assigned all the users by mapping the Rule Ids towards the mitigating Ids, I extracted the report: Informer Tab-> Risk Analysis-> User Level and choosed to Exclude the Mitigated Risks.
The issue is, In the extracted report I can still VIEW the mitigated users list and the clients are questioning as to why these users are still showing when its been assigned to a false positive mitigating Ids.
Request you to kindly provide your inputs and thoughts on how to exclude these mitigated users from the reports.
Thank you
Regards
Sridhar

Similar Messages

  • Unable to evaluate workflow rule - Value too long for field

    Need help with a workflow error for a record update before the record is saved. There are 3 calculations that would be done in a particular order - all on number fields. Each time, I am overwriting existing values. The individual numbers could have up to 6 decimal spaces. When I try to update one or more fields that contain the calculation, I get an error message saying that the system is unable to evaluate the workflow rule - value too long for field (zNum6).
    This same calculation is fine when a new record is entered and the calculation is done as a default field value.
    Any ideas?

    I actually had to use a ToChar function at the beginning of the calculation and #### to indicate the number of digits to make this work. Oracle Help Desk provided the answer - quickly.

  • OAM : Multi-valued attribute in Authorization Rule Actions

    Our application is protected by an Oracle Access Manager deployment, where the identity user base is based in an Oracle Internet Directory.
    In the OID, for every user entry, we have a multi valued attribute (say, 'roleattr') which contains the roles recognized in our application. Once the user is authenticated by the Access Server, we need the roles associated to him to be fetched and returned in the page header (similar to uid).
    Hence, our question is, in PolicyManager, by setting the Authorization Rule > Actions, is it possible to retrieve this attribute (which is 'multivalued') and populated into the pageHeader, so that our application can retrieve the same.

    Sure, you'll get a colon-delimited list of the multiple values in your header!
    -Vinod

  • ASA 5520 - ASDM logging: disable rules logging

    Hello all,
    I'm encountering what I think is an issue on logging system on FW ASA 5520 - Asa Version 8.4(2), ASDM version 6.4(5). When I disabled the logging inside a rule from ASDM, or from console with the "log disable" option inside ACL, If I check in ASDM logging real time window I continue to see all the entry related to disabled rules. This is a correct behaviour about ASA logging ? How I can "hide" the entry related to disabled rules (this is what I need for troubleshooting purposes) ?
    Thanks in advance for every reply.
    Regards.

    Hi Paolo,
    Well, if it is just for an specific rule, the log keyword at the end of the ACL should not be there, but if you dont want to see the log at all you can use the command no logging message command.
    Mike

  • How to get rid of disabled rules?

    Hi everyone,
    I just have a short question.
    I do not have any disabled functions, risks, processes or anything in my rule architect. However, there are a lot of disabled rules in my system.
    I never disabled any rules (or functions/risks/etc). Where do the disabled rules come from and how can I get rid of them?
    My understanding is, that if I start the "Generate Rules" Job, the rules are created according to my risks, functions, processes, etc....
    Thanks for any hints

    Go to Rule Architect -> Functions -> Search; change the value of the 'Field Status' field to 'Disabled' and click on Search button. Do you see list of functions?
    If YES then these functions contain disabled actions/permissions.
    If NO then there is a bug in your version/SP level of RAR.
    Regards,
    Alpesh

  • Disabled rule still triggering alerts?

    Anyone experienced this?
    I've unattached a rule from an active module/policy for the group that all hosts belong to, and it's still generating alerts with the 'Rule XXX - No longer enforced on ClientX'. It's been happening for over a week...
    Also disabled the rule entirely and it's still generating alerts...
    I've reset the agents, etc.

    I've disabled the original rule, and am still getting alerts on the original, but with the 'rule xxx no longer enforced on clientxxx'.
    I've detached all of the hosts from the original group, added them to the custom group, and All Windows. That's it.
    I'm working on the issue again this afternoon, and will post updates...

  • How can I delete the photos or files in my iCloud storage that is no longer needed?

    How can I delete the photos or files in my icloud storage that is no longer needed?

    Explain how it didn't work and what you are trying to delete.  Since icloud doesn't store photos except for those in a backup (then delete the backup); photos in photo stream do not count towards your storage limit.

  • How can i disable an Action listener temporary?

    hi folks,
    I have a GUI with many Jcomboxes. Each one of them has an actionlistener.
    The idea was: when one of those comboboxes is selected, then the selected value will appear on ALL the comboboxes (by using setSelectedIndex(int index)).
    The problem is when i select a value on ONE of those comboboxes and set it on the others, the actionListener thinks that i selcted a value on the other comboboxes and starts setting the values again... I other words if i select one combobox i obtain an endless loop...
    Is it possible to disable the action listener temporary when setting the selectd values on the other comboboxes?

    Just use removeActionListener and then addActionListener
    Noah

  • Best Practice to clean up WSUS content no longer needed

    I have been researching this for days and probably have about 10 hours invested in trying to come to a conclusion and now want some feedback from this group. Below you will find everything I think you might need about my current configuration. I originally
    installed my first WSUS server in 2006.Over the years I added new products as needed, changed to express files (seems to have been a bad decision), unselected products no longer needed, and when version 3 came out began running the cleanup wizard monthly.
    I have never declined any updates myself and only approved those showing as needed. I watched my content grow to about 65 GB then decided to migrate to a new server. I followed this procedure which worked very well:
    http://exchangeserverpro.com/how-to-move-wsus-30-to-a-new-server
    After the migration I tested a round of updates and everything was working fine. Then I added Windows Server 2008 (only have one server with this OS) and SQL Server 2008 R2 (only have one server with this OS) products and was amazed when my content went
    up to over 100 GB. I decided to remove those two products since only one server needs them and I could update it direct from MS instead thinking it would be easy to recover the space. Was I in for a surprise. No real easy way to do that. From my research these
    seem to be the options to do a good clean up on all unneeded content. What do you suggest as the best way for me to proceed?
    Option 1: uninstall and re-install fresh
    Option 2: reset the content following this procedure:
    http://blogs.technet.com/b/gborger/archive/2009/02/27/what-to-do-when-your-wsuscontent-folder-grows-too-large.aspx
    Option 3: reset the content following this procedure: (I tested this on my old server and steps 1-4 took about 90 minutes)
    1. Decline all previously approved updates. (Yes, all of them. Even the ones you want.)
    2. Run the cleanup wizard -- this will remove files in the WsusContent folder.
    3. Change the approval of all DECLINED updates from declined to "Not Approved" (and apply inheritance).
    4. Run the cleanup wizard again -- this will decline all expired updates.
    5. Re-approve needed updates. Content will be re-downloaded.
    I do plan to remove the express files option first to reduce the amount of space needed for storage. If you see anything else in my config that should be tweaked please let me know. Thanks for any and all feedback. I appreciate you taking the time to read
    this and respond.
    My configuration follows:
    1 Gbps switched network infrastructure with 10/10 fiber internet access
    WSUS – current environment – 1 physical server also used as a file share server for user files
    Windows Server 2008 Enterprise (x86)
    Dual Intel Xeon 2.8 Ghz
    2 GB Ram
    1 Gbps Nic
    136 GB hard drive for DB and WSUS Content files (currently DB=1.5 GB, Content = 108 GB)
    WSUS Server version: 3.2.7600.226
    Using the Windows Internal Database (I do have a SQL Server 2008 R2 server available now)
    128 Computers in 13 groups manually assigned but computers are directed to this server via GP
    (all Servers and 90% of workstations are current on updates through last month)
    3189 Updates installed/NA
    139 Updates needed
    919 Updates with no status
    Configuration options:
    Update source – Microsoft
    Products – Office 2003, Office 2010, Windows 7, Windows Defender, Windows Server 2003, Windows Server 2008 R2, Windows XP (previously selected but no longer needed: Office 2002/XP, SQL Server 2008 R2, Windows 2000, Windows Server 2008)
    Classifications – critical, definition, security, service packs, update rollups, updates
    Update files and languages – store locally, download only when approved, download express installation files, English
    Automatic approvals – above classifications for test group which includes one computer with each of the following OS’s: Windows 7, Windows Server 2003, Windows Server 2008 R2, Windows XP
    After those machines are tested then I approve and install needed updates for the server group (8 machines total) which include Windows Server 2003, Windows Server 2003 R2, Windows Server 2008 R2, Windows XP
    After those machines are tested then I approve needed updates for all computers and let the users install them

    Hi Lawrence,
    How did you go with creating the FAQ?
    Shortly after this thread was last active, I was acquired by SolarWinds, and shortly after that we created PatchZone.org. I've published a lot of this "FAQ" information as blog posts to that site. If you know of anything that's missing, please let me know.
    It seems that finding definitive information on doing "proper" maintenance on WSUS is still hard to find and conflicting.
    I don't know about "conflicting"; the process is pretty straight forward. But it has been hard to find. Truth is, until a couple of years ago it wasn't even required, but the voluminous number of updates now published in the catalog make it necessary. I posted
    a series of blog articles at patchzone.org addressing this very issue.
    Here in Australia the majority of businesses are on download limits with ISPs, so we have to be very careful about what we do with cleaning up WSUS, as it can lead to expensive excess data charges!
    Cleaning up WSUS will **NEVER** lead to excessive data charges; failing to properly administer and manage the server absolutely will do that!
    If you decline the updates that are no longer needed in your environment, isn't there a risk that, should somebody join or re-join an old computer to the network, the computer will never be identified as needing potentially critical updates? Would it be
    a better option to change approved updates, that are no longer needed, to unapproved?
    Absolutely! A critical observation, in fact. This is why only updates that are
    superseded should ever be declined. Updates that are NOT superseded should not be declined, but merely left in a NotApproved state so that if a computer is introduced to the network that requires one of those updates, you would be able to readily determine
    that fact.
    Surely this would mean the update will still be cleared out after running the clean-up wizard, but, should somebody attach or reattach an old computer to the network it will still be identified and targeted for the correct updates?
    Actually, no. Only if you explicitly decline an update, or if the Server Cleanup Wizard declines an update, will the files associated with that update be physically removed from the filesystem. If you merely remove the approvals, the files previously downloaded
    will remain. This, then, brings attention to the conditions under which the Server Cleanup Wizard will DECLINE an update. In order for the Server Cleanup Wizard to decline an update it must either be expired or superseded. Furthermore, superseded updates must
    be NotApproved, the replacement update must be Approved, and the superseded update must have been 100% Installed/NotApplicable for at least 30 days.
    Lawrence Garvin, M.S., MCSA, MCITP:EA, MCDBA
    SolarWinds Head Geek
    Microsoft MVP - Software Packaging, Deployment & Servicing (2005-2014)
    My MVP Profile: http://mvp.microsoft.com/en-us/mvp/Lawrence%20R%20Garvin-32101
    http://www.solarwinds.com/gotmicrosoft
    The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.

  • My iPod touch is disabled but I no longer have a laptop to sync to - how do I fix it

    My iPod touch is disabled but I no longer own a computer to sync it with - is there another way it can be fixed

    Disabled
    Place the iOS device in Recovery Mode and then connect to your computer and restore via iTunes. The iPod will be erased.
    iOS: Wrong passcode results in red disabled screen                         
    If recovery mode does not work try DFU mode.                        
    How to put iPod touch / iPhone into DFU mode « Karthik's scribblings        
    For how to restore:
    iTunes: Restoring iOS software
    To restore from backup see:
    iOS: Back up and restore your iOS device with iCloud or iTunes
    If you restore from iCloud backup the apps will be automatically downloaded. If you restore from iTunes backup the apps and music have to be in the iTunes library since synced media like apps and music are not included in the backup of the iOS device that iTunes makes.
    You can redownload most iTunes purchases by:
    Downloading past purchases from the App Store, iBookstore, and iTunes Store        
    If problem what happens or does not happen and when in the instructions? When you successfully get the iPod in recovery mode and connect to computer iTunes should say it found an iPod in recovery mode.
    Also:
    If you previously turned on FIndMyiPod on the iPod in Settings>iCloud and wifi is on and connected go to iCloud: Find My iPhone, sign in and go to FIndMyiPhone and use Remote Wipe to erase the contents of your device. If you have been using iCloud to back up, you may be able to restore the most recent backup to reset the passcode after the device has been erased.
    You can also wipe the iOS device by installing the FindMyiPhone app on another iOS device and using that app to wipe the device.

  • DOES ANYONE KNOW HOW I CANT DELETE MY APPLE ID I JUST GOT A NEW AND NO LONGER NEED THE OLD 1 HELP PLEASE

    DOES ANYONE KNOW HOW I CANT DELETE MY APPLE ID I JUST GOT A NEW AND NO LONGER NEED THE OLD 1 HELP PLEASE

    As far as I know they can't be deleted, just remove any personal info from it (credit card details etc) and stop using it.
    If you downloaded any content via it then you will need to remember it and it's password, as content is tied to the account that bought/downloaded it, so if you move to a new computer you'll need to authorise the account on it if you want to use any of its content there (or if you bought apps with it you'll only be able to download updates to them via that account)

  • Today I deleted an email services I no longer need. Now when I go to the notes app I no longer have any notes.  Is there any way to get my notes back. I have the first iPad running iOS 5.1.1

    Today I deleted an email services I no longer need. Now when I go to the notes app I no longer have any notes.  Is there any way to get my notes back. I have the first iPad running iOS 5.1.1

    Ah, well, then the notes are probably gone. Did you save any of the email from that account on your computer? The notes might be there if you did.

  • How do I make a Mail Rule action bounce a message

    Is there a way to have a Mail Rule action bounce a message?
    Thank you in advance.
    Jeff

    paste the following into Applescript Editor and save it as a script
    <pre style="
    font-family: Monaco, 'Courier New', Courier, monospace;
    font-size: 10px;
    margin: 0px;
    padding: 5px;
    border: 1px solid #000000;
    width: 720px;
    color: #000000;
    background-color: #ADD8E6;
    overflow: auto;"
    title="this text can be pasted into the Script Editor">
    using terms from application "Mail"
    on perform mail action with messages selectedMsgs
    repeat with msg in selectedMsgs
    tell application "Mail"
    bounce msg
    end tell
    end repeat
    end perform mail action with messages
    end using terms from</pre>
    then have your Mail rule execute this script.

  • Error occurred in derivation rule. See long text ; Message no. K/110

    I am facing the below error when posting document in FI
    Error occurred in derivation rule. See long text
        Message no. K/110
        CO-PA Characteristic Derivation
    Diagnosis
        Step 0166 5400: Profit Center in Inventory Posting
        No derivation rule entry was found for the specified source values valid
        on 02.04.2014.
        The derivation rule was defined so that an error message is displayed
        when this occurs.
        The system could not find a rule entry valid on 02.04.2014 for the
        following source fields:
         Product Group
    Procedure
         Create a rule entry for these source values and make sure that rule
         entries exist for all the source values.
         If you do not want the derivation to be performed in every instance, you
         can also change the derivation rule so that no error message is
         displayed if a rule entry is missing.
         Maintain entries
         Maintain derivation strategy
    In KEDE:
    In KEDR:
    Please help me what might be the reason.

    Hi Thanga,
    I don't think this is the right group to ask questions relevant to Controlling-Profitability Analysis.
    otherwise, it seems in your 'Characteristic Derivation/ Display Rule values' you are missing an argument 'to Product Group', therefore the system gives you this error 'The system could not find a rule entry valid..'.
    hope this will help you.
    Kind regards,
    Renatas

  • How do I delete files  that  are no longer neede . I have tried everything that i know but no luck, when ever I write something in word and i,m finished with it  i click don't save , but when i open word ,guies what the file is still there , I have tried

    hello  I have tried everything to get rid of files  that I no longer need in word,  when I am finished with them  it asks do i want to save them i say no ,but when i open word again  the files are still in word ,I have tried to grag them to the trash can no luck, also went to finder to try there but no luck so what am I doing wrong it is very frustrating , as I no longer want these files kept in word  ????

    Which OS? Lion? If so, you're getting bit by the resume feature. Welcome to the iOS world of nonthinking, wherein the OS decides everything for you, whether or not that's what you want. Salient details described in http://www.apple.com/macosx/whats-new/features.html#resume   See these for steps to resolve: http://hints.macworld.com/article.php?story=20110918051930924 http://osxdaily.com/2011/08/01/turn-off-resume-per-app-in-mac-os-x-lion/ http://restoremenot.info/

Maybe you are looking for

  • What is the impact of field status in Field Status Group

    Hi, In MIR7, we want to make Cost Center Mandatory. For this we found the option of "Field Status Varient".  We are using "Z004" Field status group in G/L account. In this FSG, we want to change the status of field "Cost Center" as mandatory from Opt

  • Variation calculation without time series?

    Hi all. I've got a pivot table like the one below. Time series is not implemented in the rpd, due to performance reasons. Is there a way to calculate the variation between two measures on two different dates in a pivot table (Difference column below)

  • Hot to run old developer/2000 .fmx files

    Hi all! I have to run a legacy application written with Oracle developer/2000. Is there a free of charge runtime enviroment that I can use to run it? I have a 5 NUP Oracle Database Standard Edition One license. What I need to buy to run the legacy ap

  • Which programs will be included in Creative Cloud?

    There seems to be a lot of confusion over which programs will be included in the Creative Cloud subscription.  Can anyone clarify?

  • Can't update CC 2014

    I'm trying to install the latest update to Photoshop CC 2014 on my laptop. All I can get is a message: "Update Failed - Learn More." When I try to "learn more" I get a "Unable to extract the downloaded file. Press Retry to download again (U44M11210).