GRC 10.0 Access Request Creation- Data Source of User Details

Hi Experts,
I was doing GRC 10.0 Configuration and found a query which I am not able to resolve.
While creation of any kind of Access Request in GRC through NWBC> Acces Management Tab>Access Request>Access Request Creation.
In the user details section, I can see the HR records( like Pernr, position, manager) have been visible to some extent.
My question is where from these details came in GRC. What configuration we should maintain to achieve these HR records?
Hope to get a quick response as this is one of the requirement of the implementation which I am doing with my customer.
Thanks,
Atanu

Alessandro,
Thanks for your response. It helped me to know certain things.
But when I am navigating to SPRO > GRC > Access Control > Maintain Data Sources Configuration > [User Detail Data Source], it is configured with a ECC system in target connector and User data type is maintained as "SU01".
Now my question is where from in my case the GRC is pulling the HR records (PA20) like PERNR, POSITION,PERSONEL AREA etc? SU01 does not provide these information. My ECC box is integrated with HR module, so is it taking the data from HR directly?
Thanks in advance!
Atanu

Similar Messages

GRC 10.0: Access Request Creation - LDAP user advanced search not working

Dear Experts,
We are implementing SAP GRC Access Control and we have an issue in Access Request Creation. If we put the user name in “User” field and press intro, the user details are updated, but if we want to make an "Advanced search" the user is not found and the application give us the following message: “No records found for the search criteria entered.”
Scenario 1: If we put the user name in “User” field and press intro, the user details are updated:
Scenario 2: If we want to make an "Advanced search" the user is not found and the application give us the following message: “No records found for the search criteria entered.”
We are using the Active Directory as Data Source.
Thanks and Regards.

Hi Jose,
Try maintaning the parameter 2050 as YES and check once.
Kindly, also make refer to the below list of SAP notes:
1757906 - GRC 10.0 - LDAP user search does not work in NWBC
1745370 - LDAP search in GRC does not work anonymously
1718242- UAM: User search not working in Access Request.
Regards,
Neeraj Agarwal

Access request creation - select roles screen - field boxes were not aligned

I'm not sure if this is really the screen of SAP GRC 10.1 access request creation. The field boxes were not aligned. Is there a note to fix this issue? Thank you.
Regards,
Jenilyn

Hi Mohamed,
Even I used Google Chrome, it's the same. Still facing the same issue. Is there any other way to solve this issue?
Thank you.
Regards,
Jenilyn

GRC 10.0 Access request Management Audit

Hello All,
Can Anyone let me know what Auditors Check When they Audit GRC 10.0 Access request Management (excluding Configuration).
Thanks
Mohammed Wasim

Hi,
ARM supports key ITGC controls for user access management, so probably audit would also cover:
- review of updated processes & controls
- check (based on sample) if all requests were properly approved
- review of correctness of approvers assignment
- verification if what was requested was provisioned
- timely removal of terminated access
- review of SoD controls embedded in process
- periodic review of user access
and maybe some more controls. In most cases it will be sample based testing so auditors may ask for a sample of requests to trace them to back-end systems and opposite sample of changes in users privileges to verify if proper requests were prepared for those changes...
Sometimes they could perform more tests on configuration and process, but this is up to particular auditor.
Best regards, Andrzej

Using MS Access as a Data Source for BW

I have used MS Excel spreadsheets and 'mainframe' databases as data sources for BW in the past.
The company I ma working with has a large MS Access database containing historical sales data (from an R/3 3.1H system) that they wish to upload into BW v3.5 for comparison purposes.
My undersatnding was that MS Access was not a valid data source for BW. Could someone point out the error of my thinking and suggest how to set up MS Access as a data source.
Thanks in anticipation

Hi Austen,
Welcome onboard!
True, as far as I know, MS Access is not supported by BW. But you can use MSSQL instead. MSSQL is supported. I think the free version of MSSQL called MSDE (Microsoft SQL Desktop Edition) is also supported (Although I have not tried it yet)
Importing MSACCESS data to a similar table in MSSQL is very easy. Just use the Data Transfer Utility bundled with MSSQL. It will bulk insert data from MSACCESS to MSSQL. Then from MSSQL, you can set up BW to connect to it and you are done...
Hope I have helped. if I did, please grant points...
Regards,
Jkyle

Transport request creation date

Hi Experts,
How can I find creation date of a transport request. I am able to find the last changed date only. Is there any function module or table to find out the transport request creation date.
Thanks in advance,
Venkat

HI
Check in the table E071, search entries with TR number, and in the results the column OBJ_NAME will have creation date and time.
Here you get all the details related to the TR.
Or you can also go to se16 and and give the wild card E* and those are almost related to Transports table.
Hope this may be help ful to you
Many thanks
kiran

Access As Database data source + licensing

Hello,
If I was to develop an application with Microsoft Access as the data source, I can connect to the Access database like so
     update the database
   private boolean updateDatabase(String value)
             try
                   Class.forName("sun.jdbc.odbc.JdbcOdbcDriver");
             catch (Exception e)
                   System.out.println("Failed to load JDBC/ODBC driver.");
                   return false;
             try
             { createDatabaseConnection();
                 query="UPDATE Sonething SET value='"+value+"' WHERE Name='Chris'";
                    stmt = con.createStatement();
                    stmt.executeUpdate(query);
                    con.close();
          catch (Exception e)
              e.printStackTrace(System.err);
              return false;
     return true;
     Create a connection to the access database
     using a dsn-less connection
   private void createDatabaseConnection()
        try
             url ="jdbc:odbc:DRIVER={Microsoft Access Driver(*.mdb)};DBQ=.//dbase//testdb.mdb";
            con=DriverManager.getConnection(url,"test","password");
      catch(Exception e)
           e.printStackTrace(System.err);
However the questions are as follows, If I use Access as the database source does the client computer need a copy of access and are there any licensing restrictions in distributing the .mdb ?
THanks
Chris

No licence required for this type of access. You can distrubute and use programmaticaly MS Access database.

Trip request creation date

Which table should be reffered to get the trip request creation date???

Hi,
I think it's PTRV_PERIO
Regards

Help Me "Data Source - Not User Data Source"

Hi All!
I have written an addon in Service Call Form To add new Matrix in this form with code as follows:
Dim oLink As SAPbouiCOM.LinkedButton
oFormServiceCall = SBO_Application.Forms.GetFormByTypeAndCount(60110, 1)
        oItem = oFormServiceCall.Items.Item("159")
        oNewItem = oFormServiceCall.Items.Add("Matrix1", SAPbouiCOM.BoFormItemTypes.it_MATRIX)
        oNewItem.Left = oItem.Left
        oNewItem.Width = oItem.Width
        oNewItem.Top = oItem.Top
        oNewItem.Height = oItem.Height
        oNewItem.FromPane = 8
        oNewItem.ToPane = 8
        oMatrix = oNewItem.Specific
        oColumns = oMatrix.Columns
        oColumn = oColumns.Add("#", SAPbouiCOM.BoFormItemTypes.it_EDIT)
        oColumn.TitleObject.Caption = "#"
        oColumn.Width = 20
        oColumn.Editable = False
        '// Add a column for BP Card Code
        oColumn = oColumns.Add("callID", SAPbouiCOM.BoFormItemTypes.it_LINKED_BUTTON)
        oColumn.TitleObject.Caption = "Call ID"
        oColumn.Width = 20
        oColumn.Editable = True
        oColumn = oColumns.Add("subject", SAPbouiCOM.BoFormItemTypes.it_EDIT)
        oColumn.TitleObject.Caption = "Subject"
        oColumn.Width = 120
        oColumn.Editable = True
        oColumn = oColumns.Add("customer", SAPbouiCOM.BoFormItemTypes.it_LINKED_BUTTON)
        oColumn.TitleObject.Caption = "Cust.Code"
        oColumn.Width = 30
        oColumn.Editable = True
        '// Link the column to the BP master data system form
        oLink = oColumn.ExtendedObject
        oLink.LinkedObject = SAPbouiCOM.BoLinkedObject.lf_BusinessPartner
        oColumn = oColumns.Add("custmrName", SAPbouiCOM.BoFormItemTypes.it_EDIT)
        oColumn.TitleObject.Caption = "Cust.Name"
        oColumn.Width = 120
        oColumn.Editable = True
        oColumn = oColumns.Add("itemCode", SAPbouiCOM.BoFormItemTypes.it_LINKED_BUTTON)
        oColumn.TitleObject.Caption = "Item Code"
        oColumn.Width = 30
        oColumn.Editable = True
        oLink = oColumn.ExtendedObject
        oLink.LinkedObject = SAPbouiCOM.BoLinkedObject.lf_Items
        oColumn = oColumns.Add("itemName", SAPbouiCOM.BoFormItemTypes.it_EDIT)
        oColumn.TitleObject.Caption = "Item Name"
        oColumn.Width = 100
        oColumn.Editable = True
And code to bind data to matrix
oDBDataSource = oFormServiceCall.DataSources.DBDataSources.Add("OSCL")
        'oUserDataSource = oFormServiceCall.DataSources.UserDataSources.Add("OSCL", SAPbouiCOM.BoDataType.dt_LONG_TEXT)
        oColumn = oColumns.Item("callID")
        oColumn.DataBind.SetBound(True, "OSCL", "callID")
        oColumn = oColumns.Item("subject")
        oColumn.DataBind.SetBound(True, "OSCL", "subject")
        oColumn = oColumns.Item("customer")
        oColumn.DataBind.SetBound(True, "OSCL", "customer")
        oColumn = oColumns.Item("custmrName")
        oColumn.DataBind.SetBound(True, "OSCL", "custmrName")
        oColumn = oColumns.Item("itemCode")
        oColumn.DataBind.SetBound(True, "OSCL", "itemCode")
        oColumn = oColumns.Item("itemName")
        oColumn.DataBind.SetBound(True, "OSCL", "itemName")
But It's error when Run at the row is bold. This error:
oColumn.DataBind.SetBound(True, "OSCL", "callID")     Run-time exception thrown : System.Runtime.InteropServices.COMException - Data Source - Not User Data Source
Please help me fix problem.
Thanks
Edited by: Tao lao on Mar 5, 2008 3:10 AM

I think, u can't bind the system table system columns to the column of the matrix in the form which is bound to the same table.(though, m not sure on this.) service call is by default bound to OSCL. If u try creating a user defined column in OSCL and then bind it, it works. but, if CallId is already bound on form, and u r bnding it one more time, it will give you error.

GRC 10 Not able to search roles in Access Request Creation

Hello Experts,
I am unable to search for roles while creating access request by giving system name.
I am able to search with any other search criteria except system.
When I look for valid entries for System I get the following connector group values:
ECC - (Custom Connector Group)
SAP_BAS_LG
SAP_ECC_LG
SAP_HR_LG
SAP_R3_LG
All the above connector groups are pointing to the same system XXXCLNT100. I want to get only ECC as the result when I search for the system (Probably then it might work right).
Others that start with SAP are linked to the XXXCLNT100 for generating rules after activating BC Sets.
Any ideas how to get this work !!
Thanks and Regards,
Ajesh Raju.

Found Note:
Note 1654033 - Role search by System is giving same result
Regards,
Ajesh.

Access Request Creation - Role or System Required at Creation

Hi - We are installing GRC 10.1 SP6. When I create a request it is forcing me to include at least one system or role. Is there a system setting that I'm missing to not enforce the requirmenet to add either a system or a role at the time you create a request?
This is not a huge deal to me as I created templates that include the systems we provision to by default. However, if I don't need to include a system or role at time of request creation I would prefer that this requirement be turned off.
Thanks,
Rich

Hi Richard,
additionally to what Colleen has already mentioned you can set up the provisioning configuration in the way that you don't have to select a system in the access request. So basically a requests requires either a system or a role. Most of the time (best practice) users select a role without a system. Personally I also recommend that way as the system comes with the role automatically.
In the global provisioning configuration (SPRO > AC > User Provisioning > Maintain Provisioning Settings) you have to define that the user gets created when the role gets assigned.
Alternatively, as you would like to remove both, you can check if it is workable via the request type settings. I don't have a system to test, but you might be lucky. Remove the "Assign object" action from the request type and check if it is still mandatory to add at least one assignment.
SPRO > GRC > AC > User Provisionign > Define Request Type
Please let me know if this helps.
Regards,
Alessandro

GRC AC 10 CUA Configuration for Data Sources

When using CUA as the search data source in GRC AC 10.0 the search is not working. If I change the data source to my ECC system it works fine. Also trying to use CUA as the first sequence in the Details sources, but it does not work either. Also noticed that the details sources only seems to recognize one sequence when multiple sequences are setup. Has anyone come across this as a problem?

Hi all,
I agree with Patrick, I received the answer from SAP, that once a user is found in a detail data source, GRC will take all data from this data source and not continue looking in the following details systems.
Eg. USER1 is existing in CUA and HR, it will find the user in the CUA system, take email, phone no etc from CUA but will not continue looking for e.g. the missing personnel no data in HR.
USER2 is existing in HR only but not in CUA - GRC will take the detail data from HR only.
Did you try these scenarios?
Regards
Daniela

GRC 10.1 Access Request - Provisioning Logs Not Available

Hello guys,
I am currently running into an issue with the user provisioning logs, the Request Approval notification which is sent to the user are at the end of an approved access request are as below and the Provisioning Logs tab is throwing a timeout error when opened.
"Hi Varsha Upadhyay (B001193),
The Request number : 26 , has been processed and the Request is Closed. The details are as follows:
Provisioning failed; check provisioning log for details.
Kind regards,
Access Control Administrator "
I have checked the table 'GRACREQPROVLOG' and I see the logs available in the table, When I open the logs for a particular request no I see the below error message under the 'Prov Message' field
"Type conflict when calling a function module (field length)"
Similarly in SLG1, I find the following message at the end of each provisioning task that has taken place at the end of a request being approved.
"Error in RFC; 'Type conflict when calling a function module (field length)'.
I made sure I gave SAP_ALL to all the RFC ID's and also the WF-BATCH ID's, and the integration scenarios are also defined correctly for all the target system.
It seems that this error is just preventing the provisioning details from being displayed in the email or in the Provisioning logs, but the user provisioning has actually taken place as expected (viewed in SU01).
So i'm wondering even after provisioning has actually taken place successfully, why would this error occur. Does anyone know the source for this error message, please let me know what am I missing?

Hi Narsimha,
The error seems to be associated with wrong type being passed as a parameter to a function module.
Can you check the field mapping for your connectors in SPRO? There might be a mismatch happenning there.
Thanks
Sammukh

Why is the Microsoft Office Access Database Engine data source looking for a workgroup information file?

While trying to import to MSSQL2012 from SSDT using the wizard from an Access 2013 DB (.accdb) which is password protected, I get the following error with the username blank and the password field correctly populated:
Cannot start your application. The workgroup information file is missing or opened exclusively by another user. (MicrosoftOffice Access Database Engine)
But according to this link:
http://office.microsoft.com/en-us/access-help/what-happened-to-user-level-security-HA010342116.aspx
MSA10 and beyond shouldn't need workgroup information files, although it's not clear to me if they are
created/used or not.
I can point the wizard to some local version of system.mdw at Advanced -> All -> Jet OLEDB:System Database, and then the error becomes:
Not a valid account name or password. (Microsoft Office Access Database Engine)
for any username I can think of.
Questions:
1. Why does this data source insist on looking for a workgroup information file even though user-level security should be disabled?
2. Why does the Open dialog box for the Microsoft Access Database Engine have *.mdb as the only selectable filetype?
3. How can I get around these errors for an .accdb that is password protected?
Thanks!

Hi JordanPG,
To connect to Access 2007 or later database, we need the Microsoft ACE 12.0 OLE DB driver. SQL Server only installs the Microsoft Jet 4.0 OLE DB driver which can be used to connect to Access 2003 or earlier database. Besides, the Microsoft Jet 4.0 OLE DB
driver only has 32-bit version, but the Microsoft ACE 12.0 OLE DB driver has both 32-bit and 64-bit version. However, the 32-bit and 64-bit Microsoft ACE 12.0 OLE DB drivers cannot be installed on a single server.
According to your description, you can use the 64-bit SQL Server Import and Export Wizard to load data from the Access database, so the 64-bit Microsoft ACE 12.0 OLE DB driver is installed on your computer. Since the BIDS/SSDT is a 32-bit application, the
64-bit Microsoft ACE 12.0 OLE DB Provider is not visible in BIDS/SSDT. So, when you said that you select “Microsoft Access (Microsoft Access Database Engine)" in the SQL Server Import and Export Wizard (it is actually the 32-bit version) started by the SSDT,
I think it should be “Microsoft Access (Microsoft Jet Database Engine)”. Because the Microsoft Jet 4.0 OLE DB driver only supports Access 2003 or earlier format, it threw the error “Test connection failed because of an error in initializing provider. Unrecognized
database format 'C:\myDB.accdb'”.
In this situation, you have two approaches to avoid this issue:
Launch the SQL Server Import and Export Wizard (64-bit), and select “Save SSIS Package” to “File System” on the “Save and Run Package” page. Then, the package will be saved to a specified directory. After that, you can add this existing package to a SSIS
project. The status of the corresponding OLE DB Connection Manager should be Work Offline, or the OLE DB Source will throw an error about 32-bit driver if the Connection Manager is not in Work Offline status, you can ignore that and the package can run successfully
in SSDT as long as the project is set to run in 64-bit runtime mode.
However, for the SSDT 2012 integrated with Visual Studio 2012, the 64-bit runtime mode is disabled. In this situation, to run the package in SSDT, you have to uninstall the 64-bit Microsoft ACE 12.0 OLE DB drivers and install the 32-bit one. Here is the
download link:
http://www.microsoft.com/en-in/download/details.aspx?id=13255
Regards,
Mike Yin
TechNet Community Support

Connect to MS Access using NetBeans, data source name not found!

Hi
NetBeans IDE 7.3 and OS was Windows 7 (64-bit )
When I run my program by NetBeans, it complain about the following errors.
java.sql.SQLException: [Microsoft][ODBC Driver Manager] Data source name not found and no default driver specified
In fact, the MS Access file had exist the specify path, I can run the jar file (not in IDE environment) and connect to MS Access DB successfully.
And I had search from network, and found it said "the ODBC source was run by different server", one was C:\Windows\SysWOW64\odbcad32.exe for 32-bit and c:\windows\system32\odbcad32.exe for 64-bit.
So the question is, why IDE cannot connect to MS Access DB, How to set NetBeans IDE to make it connectable to 32 bits or 64 bits ODBC, like the program run without IDE?
Thanks!

user13005878 wrote:
java.sql.SQLException: [Microsoft][ODBC Driver Manager] Data source name not found and no default driver specifiedThat reads like "your datasource configuration is not good, fix it"
And I had search from network, and found it said "the ODBC source was run by different server", one was C:\Windows\SysWOW64\odbcad32.exe for 32-bit and c:\windows\system32\odbcad32.exe for 64-bit. It would make a whole lot of sense if that was the other way around, don't you think? SysWOW64 for 64 bits and system32 for 32 bits.
So the question is, why IDE cannot connect to MS Access DBBecause something is wrong
How to set NetBeans IDE to make it connectable to 32 bits or 64 bits ODBC, like the program run without IDE?By setting the correct connection configuration properties.
I'm not 100% positive, but I believe that doing ODBC connections from a 64 bits environment is not actually supported in Java. You may be outraged by that - in Java 8 the ODBC-JDBC bridge is going to be completely dropped, no more connecting to Access from Java without third party libraries (which tend to be commercial). In any case for now try to use a 32 bits Java runtime if you're using a 64 bits one.

GRC 10.0 Access Request Creation- Data Source of User Details

Similar Messages

Maybe you are looking for