Error in Risk Analyzer of Access Enforcer

We are getting the below error in Risk analyzer of access enforcer in the GRC system that we have
Risk analysis failed: Exception in getting the results from the web service : Service call exception; nested exception is: com.sap.engine.services.webservices.jaxrpc.exceptions.XmlUnmarshalException: XML Deserialization Error. Invalid parser state. This exception is caused when deserializing XML type [http://www.w3.org/2001/XMLSchema] and wrong XML node is found.
The version of the system is AE 5.2 SP11 (Build-59112)
could come one help on this?
Regards
Bharathwaj V

Hi alpesh,
Thanks for your answers.
We were able to sort out the problem.The problem was with the load balancing at java level.
We had 2 server nodes and only 1 server node was taking all the requests and so it was choked up.
Bharathwaj V

Similar Messages

Risk Analysis Error - Access Enforcer

Hi Experts,
I am getting error while running risk analysis in Access Enforcer and the error is
<b>Risk analysis failed: Exception in getting the results from the web service : Service call exception; nested exception is: java.lang.Exception: Incorrect content-type found 'text/html'
</b>
We are using seperate RFC IDs for Access Enforcer connector and Comlaince Calibrator connector.
Please help me.
Thanks&Regards,
Vijay

Reddy,
The user must indeed be created in the UME as a Compliance Calibrator user.
I don't know exactly which role he should be assigned, usually I indicate there my CC admin user-id and password.
When you see it is working with that user-id, you can try to re-fine the roles.
Some more info regarding what needs to be set in the URI in case the one I inducated in my previous answer is not working:
"There are two selectable versions of Compliance Calibrator. If you select 5.0 Web Service, three additional fields appear (URI, UserName, and Password). For the URI field, you need to navigate to the SAP NetWeaver Web Application Server Home page > Web Services Navigator > CCRiskAnalysisService > WSDLs > Standard link of Document, where you will see a list of all web services in the server. Select the desired URI address. If you select Compliance Calibrator 4.0, there is no need to connect to a URI address."
Karim

Access Enforcer Risk Analysis question

Hello All.
We are receiving an error message in an AE request. We are receiving the following error in Access Enforcer 'Mitigation control ZM030 could not be saved for user XXXX - Exception from the service: ERROR: This user is already mitigated for this risk' when doing the final approval on some requests.
Request #1 approved without error but when I did Request #2 received error message. I tried it again, same error, but the tick boxes are grey instead of green.
In all cases the roles were added to the user's account, but now AE request 1 and 2 cannot be removed from the listing.

Ankur,
this can happen under different circumstances - say 1 of 3 systems to provision to is down. You will get an error message and the request is not closing, although provisioned to the other 2.
Jonathan,
for this request that is still open, can you remove the mitigation? And then re-run Risk Analysis and approve again.
From version 5.3 you cannot create multiple concurrent requests for the same user, this will prevent your exact error.
Regards
Daniela

Access Enforcer (error in creating a request)

Hi All,
when i am creating a new request in Access Enforcer . After filling alll the details and clicking the submit button it is showing a error in creating request .Path not found.

Hello,
You must have to select at least one condition attribute while creating your initiator. It seems initiator condition not meeting the details you are filling in your request. So it is not able to trigger the workflow initiator.
For simple scenario, if you are filling your company details in your request then change your initiator condition attribute to "Company".(Don't include more condition attributes for now). Once it works out then change initiator details back to your requirements.
Please let me know if this will not resolve your issue.
Thanks
Himadama

Access Enforcer(error in approving the request) and import roles

Dear all,
error in approving the request at security stage(last)
manager and role owner are successfully approved.
and also importing roles into access enforcer was not successful.
imortstatus : 0 roles imported of 28 records found.
please find the system log:
2008-09-05 13:01:34,625 [SAPEngine_Application_Thread[impl:3]_8] DEBUG com.virsa.ae.service.messaging.MessageFormatter : parseDesc :   : INTO the method : desc :Please specify a file to import.paramNames :paramsMap :{FIELD_NAME=#_!FIELD_NAME#_!}
2008-09-05 13:01:34,625 [SAPEngine_Application_Thread[impl:3]_8] DEBUG com.virsa.ae.service.cache.AECacheUtil : getResourceBundle :   : INTO the method : en
2008-09-05 13:01:34,625 [SAPEngine_Application_Thread[impl:3]_8] DEBUG com.virsa.ae.service.cache.AECacheUtil : getResourceBundle :   : INTO the method : en
2008-09-05 13:01:34,625 [SAPEngine_Application_Thread[impl:3]_8] DEBUG com.virsa.ae.service.cache.AECacheUtil : getResourceBundle :   : INTO the method : en
2008-09-05 13:01:34,625 [SAPEngine_Application_Thread[impl:3]_8] DEBUG com.virsa.ae.service.cache.AECacheUtil : getResourceBundle :   : INTO the method : en
2008-09-05 13:01:34,625 [SAPEngine_Application_Thread[impl:3]_8] DEBUG com.virsa.ae.service.cache.AECacheUtil : getResourceBundle :   : INTO the method : en
2008-09-05 13:02:28,234 [Thread-47] DEBUG

In Addition to my previous response:
I meant to include the following:
Some of the fields that need to be properly defined with attributes are:
       System: must have the know SAP system defined here
       Role Approver (i presently are using most of the roles without having need for approval; I created a user called NOAPPRV in AE)
       Functional Area: need to have all the areas defined that roles will be assigned to
       Company: I only have one company so that's an easy one
Some areas I presently do not use but found they must ne coded and coded properly:
       ResponsibilityID:   N/A (coded as is)
       CommentsMandatory: NO (coded as is)
       Parent Role Owner:   NO
       Business Process: NA (I believe I originally coded N/A and it did not like that)
       Sub Process: NA (again N/A I believe error on me)
       Reaffirm Period: presently I am using 0 (zero)
       LastReaffirm: presently using 12/31/9999
Hope this helps a bit
I wanted to include an attachment with a sample of my Role Import spreadsheet but I'm not sure exactly how to do that; if I figure that out or someone can provide me the process I will include it
Jerry Synoga
Ryerson Inc.
630-758-2021

Why Access Enforcer 5.2 considers u201CCritical Transactionu201D as a SOD Risk ?

Hello,
When I submit a request with Critical Transaction and no SOD conflict, Access Enforcer forwards my request to the SOD Manager.
I have a Detour Path triggered by the condition u201CSOD Violationsu201D.
The settings are in:
- Access Enforcer 5.2: Configurations -> Risk Analysis -> Default Analysis Type: Object Level
- Compliance Calibrator 5.2:
Configuration -> Risk Analysis -> Default Values -> Default report type for risk analysis: Permission Level
I am wondering why Access Enforcer 5.2 considers u201CCritical Transactionu201D as a SOD Risk
Thank you.
Abderrahim

Hi,
As per my knowledge even though you set the risk analysis to be done at a single level, AE will do at all the levels, i.e., at SoD, critical action, and critical permission. If you want to have only SOD risks, you need to either deactivate all critical action rules in RAR, or create a new ruleset and assign all the SOD risks to it and use it with AE.
This will help you to address the issue.
Best Regards,
Raghu

Error in Auto Provisioning ( Access Enforcer )

Hi,
When I go to Access Enforcer -> configuration -> workflow -> auto provisioning , I get this error:
Application error occurred during request processing.
Details:   java.lang.NullPointerException: null
Exception id: [7ECF26E5A402006000000926000BB04A0004653E942D3D44]
This is how my trace file look like:
#1.#7ECF26E5A402006000000926000BB04A0004653E942D3D44#1237219355213#com.sap.engine.services.servlets_jsp.client.RequestInfoServer#sap.com/AEEAR#com.sap.engine.services.servlets_jsp.client.RequestInfoServer#J2EE_ADMIN#49704##n/a##d9a08ca0124311dec4817ecf26e5a402#SAPEngine_Application_Thread[impl:3]_6##0#0#Error##Plain###application [AE] Processing HTTP request to servlet [AEController] finished with error. The error is: java.lang.NullPointerException
        at java.lang.String.compareTo(String.java:449)
        at com.virsa.ae.service.cache.DropDown.compareTo(DropDown.java:71)
        at java.util.Arrays.mergeSort(Arrays.java:1166)
        at java.util.Arrays.mergeSort(Arrays.java:1178)
        at java.util.Arrays.sort(Arrays.java:1093)
        at java.util.Collections.sort(Collections.java:127)
        at com.virsa.ae.service.cache.AECacheUtil.getSystemsDropDown(AECacheUtil.java:963)
        at com.virsa.ae.service.cache.AECacheUtil.getSystemsDropDown(AECacheUtil.java:907)
        at jsp_cfg_workflow_provision_by_system1236276468461._jspService(jsp_cfg_workflow_provision_by_system1236276468461.java:28)
        at com.sap.engine.services.servlets_jsp.server.jsp.JspBase.service(JspBase.java:112)
        at com.sap.engine.services.servlets_jsp.server.servlet.JSPServlet.service(JSPServlet.java:566)
        at com.sap.engine.services.servlets_jsp.server.servlet.JSPServlet.service(JSPServlet.java:190)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
        at com.sap.engine.services.servlets_jsp.server.runtime.RequestDispatcherImpl.doWork(RequestDispatcherImpl.java:321)
        at com.sap.engine.services.servlets_jsp.server.runtime.RequestDispatcherImpl.include(RequestDispatcherImpl.java:473)
        at com.sap.engine.services.servlets_jsp.server.jsp.PageContextImpl.include(PageContextImpl.java:178)
        at jsp_cfg_work_flow_auto_provisioning1236276463205._jspService(jsp_cfg_work_flow_auto_provisioning1236276463205.java:221)
        at com.sap.engine.services.servlets_jsp.server.jsp.JspBase.service(JspBase.java:112)
        at com.sap.engine.services.servlets_jsp.server.servlet.JSPServlet.service(JSPServlet.java:566)
        at com.sap.engine.services.servlets_jsp.server.servlet.JSPServlet.service(JSPServlet.java:190)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
        at com.sap.engine.services.servlets_jsp.server.runtime.RequestDispatcherImpl.doWork(RequestDispatcherImpl.java:321)
        at com.sap.engine.services.servlets_jsp.server.runtime.RequestDispatcherImpl.forward(RequestDispatcherImpl.java:377)
        at com.virsa.ae.commons.utils.framework.servlet.AEFrameworkServlet.service(AEFrameworkServlet.java:452)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
        at com.sap.engine.services.servlets_jsp.server.runtime.RequestDispatcherImpl.doWork(RequestDispatcherImpl.java:321)
        at com.sap.engine.services.servlets_jsp.server.runtime.RequestDispatcherImpl.forward(RequestDispatcherImpl.java:377)
        at com.virsa.ae.commons.utils.framework.servlet.AEFrameworkServlet.service(AEFrameworkServlet.java:452)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
        at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:401)
        at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:266)
        at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:386)
        at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:364)
        at com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:1039)
        at com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:265)
        at com.sap.engine.services.httpserver.server.Client.handle(Client.java:95)
        at com.sap.engine.services.httpserver.server.Processor.request(Processor.java:175)
        at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:33)
        at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)
        at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)
        at java.security.AccessController.doPrivileged(AccessController.java:219)
        at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:102)
        at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:172)
#1.#7ECF26E5A402006000000928000BB04A0004653E942D3FBA#1237219355213#com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl#sap.com/AEEAR#com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl#J2EE_ADMIN#49704##n/a##d9a08ca0124311dec4817ecf26e5a402#SAPEngine_Application_Thread[impl:3]_6##0#0#Error#1#/System/Server/WebRequests#Plain###application [AE] Processing HTTP request to servlet [AEController] finished with error.
Please suggest.

Hemant,
    Try re-uploading the initial data file you received with the installation. Once you re-import the file, reboot your J2EE engine and test again.
Regards,
Alpesh

Credit Risk Analyzer- Limit utilization error

Hi All,
For the money market, we defined different Limit types in Credit Risk Analyzer. And for each business partner and currency used, we defined seperate limits. When we enter a credit, if the end date of the credit isnu2019t equal to the Valid to (external) date of the related limit, in Limit utilization details it gives the error :
Error while determining attributable amounts
    Message no. K-152
Diagnosis
    A serious error occurred during calculation of the attributable amounts that caused the system to terminate calculations.
Procedure
    Pay attention to further error messages.
As a warning:
Transaction 2000000000068, company code 1000, object category T5 could not be valued
    Message no. K-249
What are your suggestions?
Thanks in advance,
Regards,

Hi Danisman,
I am facing the same problem, did you find a solution for this issue?
Thank you,
Luis Marquez

Connector problem with access enforcer

Hi Guys,
I am facing a really strange problem with my connectors.
We have a test installation of GRC which was down for about 3 months.
During this time we migrated our central SLD to another system so I needed to change the connection after getting the system up again.
Anyhow I still can't modify, test or even create a new connector for access enforcer.
The only error I get is "Action failed".
I tried to analyze the logs but found no help there too.
2007-06-18 20:41:56,833 [SAPEngine_Application_Thread[impl:3]_4] ERROR java.lang.NullPointerException
java.lang.NullPointerException
     at com.virsa.ae.dao.sqlj.SAPConnectorDAO.iterToDTO(SAPConnectorDAO.sqlj:75)
     at com.virsa.ae.dao.sqlj.SAPConnectorDAO.findByConnectorName(SAPConnectorDAO.sqlj:15)
     at com.virsa.ae.configuration.bo.ConnectorsBO.findSAPConnectorDetails(ConnectorsBO.java:76)
     at com.virsa.ae.configuration.actions.ManageConnectorsAction.testConnection(ManageConnectorsAction.java:163)
     at com.virsa.ae.configuration.actions.ManageConnectorsAction.execute(ManageConnectorsAction.java:66)
     at com.virsa.ae.commons.utils.framework.NavigationEngine.execute(NavigationEngine.java:229)
     at com.virsa.ae.commons.utils.framework.servlet.AEFrameworkServlet.service(AEFrameworkServlet.java:412)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java(Compiled Code))
     at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:390)
     at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:264)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:347)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:325)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:887)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:241)
     at com.sap.engine.services.httpserver.server.Client.handle(Client.java:92)
     at com.sap.engine.services.httpserver.server.Processor.request(Processor.java:148)
     at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java(Compiled Code))
     at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java(Compiled Code))
     at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java(Compiled Code))
     at java.security.AccessController.doPrivileged1(Native Method)
     at java.security.AccessController.doPrivileged(AccessController.java(Compiled Code))
     at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java(Compiled Code))
     at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java(Compiled Code))
Did anybody here face a problem like that?
Kind regards,
Bastian
Message was edited by:
        Bastian Schneider
Message was edited by:
        Bastian Schneider

I had a simular problem with CC and I had to contact SAP. They gave me a script to run against the database that remove the connector. The problem seemed somewhat common for CC 5.1. Not sure if this applies to AE.

Multi User request in Access Enforcer

Is anyone aware of a user limit in an access enforcer multi user request?
We get errors when we submit a multi user access enforcer request with more than 25 users.
Thanks

Hi
There is no standard limit even though we advice to keep the user to max of 20 .
The limit depends upon the email content you have configured .
In case in your email notifications you have taken the argument USERID then mulitple user creation request causes issue and the limit gets set to anything between 20-25 , again depending on content of the email .
Thanks

CUA still necessary/recommended with Access Enforcer?

Hello forum members,
we are planning to implement SAP GRC Access Control for one of our clients. There are 5 R/3 Systems in the landscape, one of them a HR System. Currently there is no CUA in place an all users and roles are maintained separately in each system. Now with the introduction of GRC Access Control there is the question, if we should at the same time also have a CUA introduced or if it is better to directly provision the Users and Roles from Access Enforcer to the target systems.
What are the pros/cons to have a CUA in between? Does Access Enforcer also provide overview on all users in all system and the assigned roles?
Thanks for your replies.

This is a question that I'm asked all the time. For some environments, using CUA with AE is really nice. For other environments, it's just not feasible to have CUA as the security authorisation strategies are too inconsistent across systems.
For example:
a. There are three systems (ECC, BI, and SRM) implemented with a consistent top-down (job) approach to defining roles. So, a AP clerk will receive the 'AP Clerk' role in ECC, 'AP Clerk' role in BI, and 'AP Clerk' role in SRM (for simplicity). Obviously, the roles are different as they are for different systems, but the point is, it is easy to categorise the authorisations for a particular job across each of the systems. If security is consistent like this, then CUA can be implemented and the three single roles for the three systems can be grouped together in a cross-system composite role called 'AP Clerk'. When AE is implemented over the top of this, a user only has to request the 'AP Clerk' role (composite). AE performs the workflows, risk analysis etc and then finally passes the request to CUA, which then provisions out to the other two systems. Very easy from a user point of view as they only have to request one role, which is their job.
b. If however due to inconsistency between the systems, it is not feasible to group access into cross-system composites, it may just be better to go with AE without CUA. In this scenario, a user must request the applicable roles from each of the three systems. It is more flexible, but a little more difficult for the end user.
I normally spend quite a bit of time developing the Access Controls strategy during the blueprint phase of the implementation just to make sure that I'm coming up with the optimal design. A bit of prototyping helps also!

"Refresh" of development Access Enforcer system

Greetings!
Our Access Enforcer system is now in production. Our development system is quite a mess, with old requests and configuration. We would like to make the dev system look more like the production and test systems and get rid of all of the old requests, initiators, stages, etc. Does anyone know how to clean up AE so we can start over with a clean slate? We are on 5.2 with SP3, running on an AIX box with Netweaver only.
Thanks!

Hi,
I am not sure on the reasons for system refresh. Look at the below points:
1. The RAR data c(Rules, Functions, Risks etc) an be downloaded and uploaded in the Development environment. Why you need the production user data in Development?
2. The SPM users are intended for production. Why you are planning to copy/simulate them in development?
3. The ERM and CUPs are workflows, where the systems and other settings have to be created manually. What is your intention in getting them to development?
As per my knowledge, no system refresh is performed for GRC systems? May be you need to educate the client on these things. Please look for the ideas from the other experts too before you go back to your client.
Hope this helps!!
Warm Regards,
Raghu

Access Enforcer 5.2 - LDAP connexion fail

Hello everybody,
We realised an upgrade Access Enforcer 5.1 VP1 to Access Enforcer 5.2 with SP03 but we can't connect LDAP to AE. Before, the connexion to LDAP was ok.
However, when we test the connexion in AE 5.2, the message " Connexion successfull" appears but the connexion fails when we try to authentificate to AE for a request or when we try to search user data fo example (the AE message is "action failed").
Do you have the same error with AE5.2 ?
Thank you very much for your assistance,
Best regards,
David Heang

There is a query below that you need to list in the SQL box, but this address varies based upon your support pack. If you're up to date (or close to) on SPs, enter the following address into your web browser AFTER logging into AE: http://<server>:<port>/AE/opensql_test.jsp.
Paste the following query into the SQL box:
SELECT DISTINCT
WPHST.REQNO,
WPHST.REQPATHID,
WPHST.PATHNAME,
WPHST.STATUS AS REQUEST_STATUS,
TBLPATHSTAGE.STAGENAME
FROM
(VIRSA_AE_RQD_WPHST AS WPHST INNER JOIN VIRSA_AE_WF_PTSTG AS TBLPATHSTAGE ON (WPHST.PATHNAME = TBLPATHSTAGE.PATHNAME) AND (WPHST.CURRENTAPPRVRSEQ = TBLPATHSTAGE.STAGESEQ)) INNER JOIN VIRSA_AE_RQD_WPTRN AS WPTRN ON (TBLPATHSTAGE.STAGENAME = WPTRN.STAGE_NAME) AND (WPHST.REQNO = WPTRN.REQNO)WHERE
(WPHST.ISCURRENTFLAG = 1) AND ((WPHST.STATUS='OPEN') OR (WPHST.STATUS='HOLD'))

CUA vs. Access Enforcer

Can anyone explain the need for implemented both CUA and Access Enforcer?
We are currently upgrading to ECC6.0 and implementing the GRC tools(5.2) and CUA With the distributed access provisioning available in Access Enforcer, I am trying to determine the benefit of implementing CUA .

Hi Patrick
1) In this scenario the only benefit with CUA i can see is
     a) Password reset
     b) locking and unlocking the user.
2) If you use GRC AC in landscape, it is not at all recommended to assign roles, profiles using CUA. This can lead to high level compliance /regulatory issues.
3) If you are implementing new CUA, then i would recommend to go for NW Identity Management Solution. Advantages are
    1) User provisioning for SAP and non-SAP system
    2) can be integrated with GRC for Risk analysis and remediation.
    3) Password Management also possible.
        https://www.sdn.sap.com/irj/sdn/nw-identitymanagement
regards
Anand.M

Error in DB analyzer logs

HI,
My SCM 5.0system is running on oracle 10g . I have checked LC & found below error in DB analyzer logs.
W3 11523 primary key range accesses, selectivity 0.01%: 140299528 rows read, 12593 rows qualified
      CON: PKeyRgSel < 0.3
      VAL: 0.01      < 0.3
W3 Selects and fetches selectivity 0.21%: 197822 selects and fetches, 71523587 rows read, 152554 rows qualified
      CON: SelFetSel < 0.3
      VAL: 0.21      < 0.3
* W3 76125 primary key range accesses, selectivity 0.11%: 71444927 rows read, 76461 rows qualified
      CON: PKeyRgSel < 0.3
      VAL: 0.11      < 0.3
W2 Number of symbol resolutions to create call stacks: 234
      CON: SymbolResolutions > 0
      VAL: 234               > 0
LC Version - X64/HPUX 7.6.03   Build 012-123-169-237
As i am new in MAX DB so i need experts advice on the above issues.

Hello,
You got the WARNING messages in the DB analyzer protocol. Those are NOT errors.
You used the DB analyzer to find the bottleneck in liveCache.
Itu2019s the performance analysis tool for database.
1. In general, the MAXDB library has the explanations about the DB analyzer warning messages.
http://maxdb.sap.com/doc/7_7/default.htm -> Database Analyzer
           In the database analyzer messages section at Optimizer Strategies and Selects and Fetches documents you will see the u201CUser Responseu201D, when you will get the warnings like:
W3 11523 primary key range accesses, selectivity 0.01%...
W3 Selects and fetches selectivity 0.21% u2026
W3 76125 primary key range accesses, selectivity 0.11%...
=>Find what liveCache application scenario was running at that time.
Repeat this application scenario & create the SQL trace. Find the statement that causes this warning.
2. If you are not able to find the reason for those warnings on your system => create the SAP message to help you on this issue.
Thank you and best regards, Natalia Khlopina

Error in Risk Analyzer of Access Enforcer

Similar Messages

Maybe you are looking for