GRC 10.0 : Maximum number of Rule Sets

Hi Experts,
What is the maximum number of rule sets we can define in GRC 10.0?
What could be the impact on performance if we defined a dozen of different rule sets?
Best Regards,
Nicolas

Hi,
In theory, you can have as many rulesets as you wish in the GRC 10 world. However, you rightly point out that there will be a substantial performance impact.
The number of rulesets is not really the key element here but the number of risks and rules defined within them will be.
If you know that you wish to manage a significant number of separate rulesets, be sure to spec them out accordingly and make use of the connector groups to rationalise the content as far as possible (e.g. group similar elements like Basis or systems together). You will also need to size the GRC system appropriately with a basis SME so that you can review the system performance appropriately.
Simon

Similar Messages

Maximum number of rules in Numbers? Scrolling for 'show rules'?

I am trying to apply multiple conditional rules to a group of cells but can only get about 13 applied before 'show rules' runs out of space (and can't scroll down to add more). Am I missing something? Any help greatly appreciated - thanks

Thank-you for the help.
I thought I must be missing something because it seems so easy and obvious for Apple to make these rules srcollable. As Jerry says, they probably did't think to try off their 27" screens!
The only trouble with inserting extra rules is of course that it then makes it a 'faff' to later edit or remove rules that have been taken off the viewable screen.
Thanks again.
Ian

Multiple GRC rule set update

we are having a custom rule set A loaded in GRC. Now we want another rule set B, with new risks and definition to be loaded in GRC. If we try to upload rule set B risks and functions via Upload function in GRC, would it overwrite the rule set A, or not.Just wanted to confirm whether existing rule set A would be affected or not, due to upload of rule set B.

Hey Alpesh,
Sorry, I haven't understand it correct. This is a question that will always be asked in the train.
You wrote:
"If you have created different files (e.g. risks, ruleset, function action, function permission etc.) and upload them via configuration -> rule upload then RAR will not overwrite your ruleset A and will only insert new rule set files."
Is this just possible, if all IDs (risk, function, function action, function permission) will be changed before and could not be equal like in the rule set A? correct?
What's about with the ALL.txt files, do I have to change/upload them as well again?
Thanks for feedback,
alwaly a pleasure!
Greets
Martin

ORA-00020: maximum number of processes (500) exceeded

Problem Details:
In our Database we are getting huge number of open connection from remote system.
Let say, our application A and remote application name is B.
Some common users of application A are USER0, USER1, USER2.
Remote Application B uses USER0 to create views on application A's table through Database Link.
Those views (nearly 100) are accessed in application B at several places from the Java code.
Since those views are getting called almost all the times from the application B's code, DB link is in use almost all the time - holding many number of connections (check the first row of the query output).
Many times the open connections remaining high and any other application, users trying to connect to application A,
getting the ORA-00020 error.
Note :
1. Application B is very old application and does not use open DB link or close DB link.
2. Application B tried with "alter session close Database link xxx", it decrease the number of open connection but its degrading the performance of application B at large scale.
3. To cope up with this problem Application A recently incraesed the parameter process=500, but not sure if this limit can also be broken through Application B
Questions/Doubts:
1) What is best approach to handle this problem??
'alter session close database link xxx' is the only option from application B's point ??
What other approach can be taken??
2) We are not sure the risk associated with increasing the process parameter value ??
Appreciate your suggestion !!
SQL>conn / as sysdba
SQL> select substr(username,1,8),
       substr(machine,1,11),
       substr(module,1,40),
       substr(osuser,1,7),
       status,
       count(1)
from v$session
group by username, machine, module, osuser, status;
USERNAME MACHINE     STATUS                        OSUSER     COUNT(1)
USER0    remotedb9      INACTIVE                              oracle        450
USER1    app_dev        INACTIVE                              beaadmin        1
USER0    svr01test      ACTIVE                                bdgp_dev        1
USER1    app_test       INACTIVE                              bbk09           2
USER0    app_dev        ACTIVE                                dj0494          1
USER1    app_test       INACTIVE                              pd0269          2
USER2    app_test       INACTIVE                              oracle         12
USER0    app_dev        ACTIVE                                oracle          2
USER2    app_test       INACTIVE                              www             8
USER2    dbr9db01       ACTIVE                                oracle          2
USER2    svr01dv        INACTIVE                              bdgp_dev        1
USER0    app_dev        INACTIVE                              scott           3
USER2    app_test       INACTIVE                              clerk           2
USER2    moose          ACTIVE                                john            2
USER2    titan.homer    INACTIVE                              voipdu          1
NEWUSER floradbdv1     INACTIVE                              oracle          8
SYS      app_test       ACTIVE                                oracle          1
20 rows selected.
SQL>conn USER0@csmip_st
Enter password:
ERROR:
ORA-00020: maximum number of processes (500) exceeded
Warning: You are no longer connected to ORACLE.

semmsl in Linux tells what the max number of processes are. You have to make sure this is equal to the process parameter of all instances plus 10.
It is usually in /etc/sysctl.conf
kernel.sem = 250 32000 100 128
SEMMSL
The SEMMSL kernel parameter is used to control the maximum number of semaphores per semaphore set.
Oracle recommends setting SEMMSL to the largest PROCESS instance parameter setting in the init.ora file for all databases hosted on the Linux system plus 10. Also, Oracle recommends setting the SEMMSL to a value of no less than 100.
SEMMNI
The SEMMNI kernel parameter is used to control the maximum number of semaphore sets on the entire Linux system.
Oracle recommends setting the SEMMNI to a value of no less than 100.
SEMMNS
The SEMMNS kernel parameter is used to control the maximum number of semaphores (not semaphore sets) on the entire Linux system.
Oracle recommends setting the SEMMNS to the sum of the PROCESSES instance parameter setting for each database on the system, adding the largest PROCESSES twice, and then finally adding 10 for each Oracle database on the system. To summarize:
SEMMNS = sum of PROCESSES setting for each database on the system
+ ( 2 * [largest PROCESSES setting])
+ (10 * [number of databases on system]
To determine the maximum number of semaphores that can be allocated on a Linux system, use the following calculation. It will be the lesser of:
SEMMNS -or- (SEMMSL * SEMMNI)
SEMOPM
The SEMOPM kernel parameter is used to control the number of semaphore operations that can be performed per semop system call.
The semop system call (function) provides the ability to do operations for multiple semaphores with one semop system call. A semaphore set can have the maximum number of SEMMSL semaphores per semaphore set and is therefore recommended to set SEMOPM equal to SEMMSL.
Oracle recommends setting the SEMOPM to a value of no less than 100.
App B could try using connection pooling or something to reduce the number of connections to the DB.

GRC Rule Set Updates

Where can I fund updates made to the default rule set?

http://service.sap.com/support
Click on the Help & Support tab --> Search for SAP Notes.
You will need a valid S-number to log in.
Thanks!
Ankur
SAP GRC RIG

Illustrator won't run: "unable to set maximum number of files to be opened"

I have an intel macbook pro (core duo with 2GB ram) and a copy of purchased adobe creative suite 2. Other applications in the suite like photoshop, acrobat, etc can run on my mac without any problem. But when I try to run illustrator, it just shows an error message "Unable to set maximum number of files to be opened" and quits. I also installed a trial version of illustrator cs3 and got the same problem. Can anyone help? Thanks.
CC

Hi, I realize this is an old thread but it was unanswered and the issue has come up again in a newer thread:
http://forums.adobe.com/message/2534652
If the original poster sees this, can you reply tin the new thread and let us know if you were ever to solve this problem?
Thanks!

I bought a used iPod touch and when I try to set up my iCloud account, it says that the maximum number of free accounts have been activated on this device. Is there a way around this?

I bought a used iPod touch and when I try to set up my iCloud account, it says that the maximum number of free accounts have been activated on this device. Is there a way around this? I thought I could maybe set up the account on my PC and go from there, but it won't let me do that. It is forcing me to set up on the iPod. Am I doomed to have no iCloud account because I opted for a used device?

See this previous discussion.
icloud: The maximum number of free...: Apple Support Communities

Mulltiple Rule Sets in GRC 10.0 for one System

Hi All,
We do have 2 different companies working on one system and by that 2 different rule sets that are applicable.
Due to that we are facing different problems we don't know how to solve yet but lets start with the first one dealing with the rule set that should be used in the access request.
We want to determin which rule set should be used over the requested role (e.g. if role name contains 0001 use rule set 0001, if role name contains 0002 use rule set 0002).
We have alerady tried several different senarios in BRF+ without success.
Does anybody have a solution or at least an idea for this topic?
Thank you all very much in advance!
Eva

Hi Ashish ,
Thanks for your time . Let me explain you my requirement and would really appreciate if you would have some inputs here which would help me to design this .
The actual client requirement is to design a CUP Workflow and If there are SOD issues identified, the workflow will need to go to a central team for them to address each issue. If this group decides to apply mitigating controls to the issues, the workflow must then go to the compliance group for them to review for appropriateness. Requirement is do a SoD analysis for every role change/add request , so that this group takes the appropriate action based on the SoD Analysis . For all my CUP request raised , i want system to do a SoD analysis and let this group know whenever there is a SoD found or just end the workflow if there is no risk.
I am aware of the Risk analysis process for GRC 10.0 , however i want it to happen as a part of this work flow requirement.
The requirement is to configure the access request work flow so that the end goal of work flow is just facilitation of an SOD review. I hope i was able to explain my requirement . Thanks again for your help.
Your valuable guidance would be really appreciated.
Vikas

Best practice for the Update of SAP GRC CC Rule Set

Hi GRC experts,
We have in a CC production system a SoD matrix that we would like to modified extensively. Basically by activating many permissions.
Which is a best practice for accomplish our goal?
Many thanks in advance. Best regards,
Imanol

Hi Simon and Amir
My name is Connie and I work at Accenture GRC practice (and a colleague of Imanolu2019s). I have been reading this thread and I would like to ask you a question that is related to this topic. We have a case where a Global Rule Set u201CLogic Systemu201D and we may also require to create a Specific Rule Set. Is there a document (from SAP or from best practices) that indicate the potential impact (regarding risk analysis, system performance, process execution time, etc) caused by implementing both type of rule sets in a production environment? Are there any special considerations to be aware? Have you ever implemented this type of scenario?
I would really appreciate your help and if you could point me to specific documentation could be of great assistance. Thanks in advance and best regards,
Connie

How to set maximum number of jobs in oracle

Could pls tell explain me about how to set maximum number of jobs in oracle....
Regd,
Mahi

I don't think there is any limit on number of jobs that can be submitted to Oracle. However, there is a limit on the number of processes that would execute those jobs (governed by JOB_QUEUE_PROCESSES).
Message was edited by:
Satish Kandi
Typo corrected.

Set "Maximum number of recipients" option for specific users in Exchange 2010

I have some set of users who usually send bulk emails outside. I need to increase the value for these users for"Maximum number of recipients" as 999.
Any help or suggestion is appreciated.
Thanks,
RIWAA
RIWA

Hi Riwa ,
Really sorry for providing the wrong value on MaxRecipientEnvelopeLimit in my previous post.
The default value for MaxRecipientEnvelopeLimit is 5000
Reference Link : http://technet.microsoft.com/en-us/library/bb124151%28v=exchg.150%29.aspx
MaxRecipientEnvelopeLimit
Optional
Microsoft.Exchange.Data.Unlimited
This parameter is available only in on-premises Exchange 2013.
The MaxRecipientEnvelopeLimit parameter specifies the maximum number of recipients in a message. The default value is 5000. The valid input range for this parameter is from 0 through 2147483647.
If you enter a value ofUnlimited, no limit is imposed on the number of recipients in a message. Exchange treats an unexpanded distribution group as one recipient.
ANDY thanks a lot for intimating and making me to have a clear understanding on this case.
Thanks & Regards S.Nithyanandham

Set maximum number of BPM nodes

Hy all,
can someone tell me how can i set the maximum number of bpm node in XI.(Transaktion for example)
Thank's a lot.
Mat

Hi Jürgen,
You can try changing this with TCODE: SWPA
"Maximum node number" parameter
By default the value is 10.000 (at least on my DEV XI)
maybe this will help you
Regards,
michal

Set maximum number of responses allowed for a form

Would it be possible to set a maximum number of responses allowed for each form? Say, if more than 1000 responses are received, the form will be closed automatically and no more new submission can be made.
Thanks in advance

Hi,
FormsCentral doesn't support this functionality. Currently 50, 500, 5000 limits are set for free, basic and plus accounts, you cannot set a different limit for individual forms.
Thanks,
Wenlan

Access Control Rule Set deletion in GRC 10

Greetings,
Has anyone tried deleting rulesets or have experienced any issues while deleting rule sets in GRC 10. I have tried to delete them from SPRO as well as from Setup Tab in Access Control , however its not working for me . Even in SPRO , after chooseing the physical system and logical system infromation , it stays on that screen for ever and nothing happens.
Any help or guidance here will be much appreciated.
Thanks everyone for your valueable time.
Vikas

Hey ,
There are no tricks or tips. It was something stupid on my part.
I Just had a look at the system again and found a function left in the system which was mapped to this Ruleset , so that was the only i was not able to delete the ruleset . As soon as i deleted that function , it worked .
So i was able to delete the entire rule set after deleting all the risks and functions mapped to this rule set.
Have a great day ahead ...
Vikas

Rule set migration from GRC 5.3 to GRC 10.0

Hello everyone,
I ask you this question: if I want to migrate from GRC 5.3 to GRC 10.0, can I keep my old custom rule set with no modification or I have to make some changes to it to import in GRC 10?
Thankyou in advance for the answers
Greetings
Gianluca
Edited by: Gianluca Mocini on Apr 1, 2011 5:33 PM

Hi,
The migration utility is very simple. You install it on GRC 5.3 box and then select the items you want to migrate. It will generate tab limited text files and you can use those files to import data into 10.0 box.
Regards,
Alpesh

GRC 10.0 : Maximum number of Rule Sets

Similar Messages

Maybe you are looking for