GRC 10/10.1 User Data Source question

Hi folks, I've been unable to find any document that addresses this so I thought I'd ask.
I've configured GRC 10.1 so that the GRC system is looking at the ECC system and all the scenarios are configured and things are working well. We have a separate LDAP issue, and until that's resolved, the user data sources have been set to the ECC system.
Specifically for Firefighter, we want to create Firefighters in the GRC system and assign them IDs that are configured in the ECC system so that they can get in for Firefighter related access and get their work done. Many of these people are not in the ECC system.
I realized that I have not set up the GRC system as a connector within the GRC connectors configuration. I also did not find any reference to this in any of the documentation that's available out there.
So I wanted to know how do you get the GRC system to become available as a user data source so that in the event a user is not available in the ECC system, and as in our case, LDAP isn't working, the user will still pull up because they exist in the GRC system?
Can I use a connection type of LOCAL in the "Change View "Connection type definition": Overview" Screen?
Please advice.
Thanks,
Santosh

Hi Santosh,
If your requirement is to use GRC as a data source, configure it as a SAP connector as you do for other SAP systems (the underlying system of GRC is Netweaver so its SAP as well).
Once the connector is configured, you can use that in your "data sources configuration - user search data source". List all your connectors and the sequence in which the user ID has to be searched for.
For your case.,
1. LDAP connector
2. ECC connector
3. GRC connector
Thanks.
Regards,
Muthu

Similar Messages

User Data Source in GRC AC 10

Dear Experts,
Need clariofcation regarding User data Source for SAP GRC AC .
Till GRC AC 5.3 we can use only one sap backend system as user data source for gettting users like manager,approver etc and have to change User data source if user reside in some other system .
Is this been address with GRC AC 10 .
Thanks & Regards
Asheesh

Hi Asheesh,
Looking at the configuration, you can configure multiple target systems against all of the different data sources and authentication sources. It uses the sequence number to identify in which order these should be accessed.
SPRO - Ref IMG - GRC - Access Controls - Maintain Data Sources Configuration
However, in my experience connecting lots of different systems to take elements of user data causes performance issues and often cuases some confusion about the actual data to be displayed. You'll need to consider the field mapping and source elements casrefuly to ensure you don't get conflicting information.
Simon

Access enforcer and User Data Source for HR

We are on Access Enforcer 5.2 - service pack 2:
My problem is that when creating a new request in AE, I able to get a list of all users when I point my User Data Source to either SAP or UME. However when I attempt to create a request whilst pointing the User Data Source at the SAPHR system, I do not get any users back (and we have user set up in the SAP HR system).
Ive changed the connector to YES under the HR System box, Ive changed the Data Source Type and Details Source Type to point at the SAPHR and still it fails to fetch any users.
I've tried looking at the log, but can't get much out of it.
I would appreciate it, if anyone could provide any assistance.
Thanks you in advance.
Amarjit
Message was edited by:
amarjit singh

Hi Micheal,
Thanks for your reply.
I'm pointing both Data Source Type and Details Source Type to the same system SAPHR and to the same system name (which is our dev system)
Regards,
Amarjit

CUP 5.3 SP8 - Authentication Source/User Details Source question

Hello,
Here is another issue I'm noticing with CUP.
Currently we have it configured as such:
Authentication Source: LDAP
Search Data Sourec: SAPHR
User Details Data Source: SAPHR
When a Requestor logs in to create a request for themself, Requestor Username and Email are correctly populated under the Requestor section of the request screen. This Username and Email match identically from SAPHR; and it should, as that is what we have defined as our User Data Source
When a Requestor logs in to create a request for another user, Requestor Username and Email are populated differently under the Requestor section of the request screen; this information in this case appears to be coming from LDAP. This does not seem correct to me. LDAP is only defined as the Authentication Source, not the User Data Source.
1) Why would the Requestor section populate differently when creating a request for yourself vs. another user?
2) Is this a bug in CUP?
3) Has anyone else noticed this or found a fix?
Thanks!!
Jes

We are on the same SP level and are configured similarly but don't see this issue.
Data Source - LDAP
Search - SAP
Datasource - Multiple (SAPHR, SAP(BI), LDAP, SAP(SRM))
Also, our LDAP does not carry the email address (yet).
When I create a new request for someone else, all the information is filled in correctly from our SAPHR system, if they are in HR, or from our BI system if they are not in HR but are in BI. However, since we don't carry e-mail address in our LDAP system yet, the requestor e-mail field is left blank and I have to manually fill it in. (We do plan on changing this).
Hope this helps,
Peggy

User Data Source in CUP AC5.3

Hello,
What is the functionality of the User data sourcein Compliant User Provisioning?
We are using HR module and i have created the connector using the Jco destination VIRSA_HRModel.
I have configured the User data source type as SAP HR System as VIRSA_HRModel and Details source type as SAPHR with System name as VIRSA_HRModel.
Please explain the functionality.
Regards,
Kumar Rayudu

Kumar,
As you know CUP is an ticket creation, user provisioning tool with automated workflow. So CUP will need to bring user details or user information for requestor, approver, manager etc. from some kind of source. This is where data source comes into picture. Whenever you need to search for an user ID, CUP will look at the search data source and whenever CUP needs to bring in user information like name, email, phone etc., CUP will use user details data source.
DO NOT USE JCO IN CUP, ERM AND SPM. You will need to have exactly same connector names in all four modules of AC 5.3 for all of the integration functionality to work. When you use JCo, it will not allow you to change the default name (virsahr_model in your case).
ONE MORE THING, NEVER EVER TOUCH JCo OTHER THAN VIRSAXSR3 EVEN FOR RAR (CC). VIRSAHR AND VIRSAR3 ARE NOT RECOMMENDED TO USE.
I hope this helps.
Regards,
Alpesh

Portal language refresh / reload (user data source ABAP stack)

Hello,
I'm on SAP NetWeaver Portal 7.0 with user data source on ABAP stack.
I'm trying to create simple JavaScript links for changing the Portal language.
I was able to change the ABAP stack user's logon language by BAPI call.
But the newly set language shows up only after the user logs out and logs in again.
I know that in the WebDynpro for Java, which implements the UME user interface, there is a functionality, that allows that relogging of the user is not necessary. After setting the language you only refresh the browser page (F5) and the new language shows up.
Does anyone know what function I should call, for the language refresh (could be the same as in UME standard WDJ)?

Hi Andres,
language doesn't change on the Portal. The content remains in the previous language.
I know that the switching of Logon language parameter in the user profile in ABAP stack and logoff and login on the portal leads to change of the language on the Portal. But I don't know, how to do it without the relogging of the user.
I change the Logon language in ABAP by AJAX call of BAPI.
Thank you for any idea.
Jiri

User data Source

dear all
how can i know the user dat source index in Good Receipt's matrix??
I need to read the uncommited value in the matrix.

Hi Ian,
I think that is a system data source...if you want to access it (read only), explore the DBDataSource collection of the mentioned form.
Hope this helps

Help Me "Data Source - Not User Data Source"

Hi All!
I have written an addon in Service Call Form To add new Matrix in this form with code as follows:
Dim oLink As SAPbouiCOM.LinkedButton
oFormServiceCall = SBO_Application.Forms.GetFormByTypeAndCount(60110, 1)
        oItem = oFormServiceCall.Items.Item("159")
        oNewItem = oFormServiceCall.Items.Add("Matrix1", SAPbouiCOM.BoFormItemTypes.it_MATRIX)
        oNewItem.Left = oItem.Left
        oNewItem.Width = oItem.Width
        oNewItem.Top = oItem.Top
        oNewItem.Height = oItem.Height
        oNewItem.FromPane = 8
        oNewItem.ToPane = 8
        oMatrix = oNewItem.Specific
        oColumns = oMatrix.Columns
        oColumn = oColumns.Add("#", SAPbouiCOM.BoFormItemTypes.it_EDIT)
        oColumn.TitleObject.Caption = "#"
        oColumn.Width = 20
        oColumn.Editable = False
        '// Add a column for BP Card Code
        oColumn = oColumns.Add("callID", SAPbouiCOM.BoFormItemTypes.it_LINKED_BUTTON)
        oColumn.TitleObject.Caption = "Call ID"
        oColumn.Width = 20
        oColumn.Editable = True
        oColumn = oColumns.Add("subject", SAPbouiCOM.BoFormItemTypes.it_EDIT)
        oColumn.TitleObject.Caption = "Subject"
        oColumn.Width = 120
        oColumn.Editable = True
        oColumn = oColumns.Add("customer", SAPbouiCOM.BoFormItemTypes.it_LINKED_BUTTON)
        oColumn.TitleObject.Caption = "Cust.Code"
        oColumn.Width = 30
        oColumn.Editable = True
        '// Link the column to the BP master data system form
        oLink = oColumn.ExtendedObject
        oLink.LinkedObject = SAPbouiCOM.BoLinkedObject.lf_BusinessPartner
        oColumn = oColumns.Add("custmrName", SAPbouiCOM.BoFormItemTypes.it_EDIT)
        oColumn.TitleObject.Caption = "Cust.Name"
        oColumn.Width = 120
        oColumn.Editable = True
        oColumn = oColumns.Add("itemCode", SAPbouiCOM.BoFormItemTypes.it_LINKED_BUTTON)
        oColumn.TitleObject.Caption = "Item Code"
        oColumn.Width = 30
        oColumn.Editable = True
        oLink = oColumn.ExtendedObject
        oLink.LinkedObject = SAPbouiCOM.BoLinkedObject.lf_Items
        oColumn = oColumns.Add("itemName", SAPbouiCOM.BoFormItemTypes.it_EDIT)
        oColumn.TitleObject.Caption = "Item Name"
        oColumn.Width = 100
        oColumn.Editable = True
And code to bind data to matrix
oDBDataSource = oFormServiceCall.DataSources.DBDataSources.Add("OSCL")
        'oUserDataSource = oFormServiceCall.DataSources.UserDataSources.Add("OSCL", SAPbouiCOM.BoDataType.dt_LONG_TEXT)
        oColumn = oColumns.Item("callID")
        oColumn.DataBind.SetBound(True, "OSCL", "callID")
        oColumn = oColumns.Item("subject")
        oColumn.DataBind.SetBound(True, "OSCL", "subject")
        oColumn = oColumns.Item("customer")
        oColumn.DataBind.SetBound(True, "OSCL", "customer")
        oColumn = oColumns.Item("custmrName")
        oColumn.DataBind.SetBound(True, "OSCL", "custmrName")
        oColumn = oColumns.Item("itemCode")
        oColumn.DataBind.SetBound(True, "OSCL", "itemCode")
        oColumn = oColumns.Item("itemName")
        oColumn.DataBind.SetBound(True, "OSCL", "itemName")
But It's error when Run at the row is bold. This error:
oColumn.DataBind.SetBound(True, "OSCL", "callID")     Run-time exception thrown : System.Runtime.InteropServices.COMException - Data Source - Not User Data Source
Please help me fix problem.
Thanks
Edited by: Tao lao on Mar 5, 2008 3:10 AM

I think, u can't bind the system table system columns to the column of the matrix in the form which is bound to the same table.(though, m not sure on this.) service call is by default bound to OSCL. If u try creating a user defined column in OSCL and then bind it, it works. but, if CallId is already bound on form, and u r bnding it one more time, it will give you error.

AE 5.2: Using Database as User Data Source

Hi all,
we have a problem connecting our User Data Source, which is basically just a DB accessible via SQL, to Access Enforcer 5.2 SP08.
To my knowledge AE only supports LDAP, SAP, SAP UME and SAP HR, none of which will be able to extract the data from our data source.
Is there a way of directly mapping the DB fields with our user data to the AE request fields (like the LDAP mapping, but without using the LDAP protocol)?
Would there be a workaround like attaching the UME to an external database? SAP Help only refers to the following sources:
"UME can use the following types of data sources: Database of the AS Java, Directory service, User management of the AS ABAP"
If so, would this also work with a dual stack system (ABAP&JAVA)?
Thanks,
Daniela

Hi,
I'm not sure of all the complexities around this but we had a similar problem where the user respository we used could not be connected using LDAP.
The solution that was implemented was to create an ADAM (Active Directory Application Mode) directory, which is connected to the user repository - ADAM is then connected the UME for AE as the LDAP server.
Probably not the most elegant solution, but we have been using this in PRD environment for a couple of months now without any performance issues.
Unfortunately I don't have all the details to guide you through all the config that was required, but perhaps you could investigate this as an alternative solution.
Regards

Oracle Data Source Question

Can anyone tell me if the communication between a ColdFusion oracle data source and the Oracle database itself is encrypted or clear text by default? I'm assuming it is clear text unless other features, such as Oracle Advanced Security, have been implemented.
If it is data transmission is clear text, are the data source user name and password passed in clear text as well?

I dunno about the authentication info, but I'd say the rest of it would be clear text.
It might pay to have a look at the JDBC spec, or the docs for the driver you're using. That'll have the relevant info.
Adam

General Data source question

Hi,
I am a beginner. I want to know a information about standard Data source.
Say for example: DS - 0FI_AR_3, how may time can this data source be used. or they can be used only once for one target?
Question may be silly, but i am trying to know.
Thanks.

http://help.sap.com/saphelp_nw04/helpdata/en/70/10e73a86e99c77e10000000a114084/frameset.htm
http://help.sap.com/saphelp_nw04/helpdata/en/70/10e73a86e99c77e10000000a114084/frameset.htm
It loads - > 0FIAR_O03 - ODS FIAR: Line Item - > DSO Loads - >0FIAR_C05 - Cube FIAR: Line Item
A datasource can be used to update any num of datatargets...
Message was edited by:
Jr Roberto

Newbie Table Data Source Question

Hi,
I have a question about table data sources. I can set them up OK but I can't find the answers I'm looking for in the documentation or online.
With a table data source, the content column is the one that's indexed right? Are the attribute column sindexed as well? If the content column is null, will the attribute columns still be indexed?
Thanks in advance
Mark.

The attribute column is indexed along with the content column. However, the attribute column will not be indexed if the content column is null. That is, empty document is not indexed.
The workaround is to at least fill in a few space characters to the content column.
Steve

BI 7.0 Data Source Question

I have requirement in Funct spec from Tables EKKO , EKPO . The data sources 2lis_02_itm ,2lis_02_scl etc will have these tabels data . But in BI 7.0 there is a data source called 2LIS_06_Inv which provides data from all these data sources.i.e,
The new DataStore object of Invoice Verification (0LIV_DS01) is supplied with data by the new DataSource 2LIS_06_INV, whereas previously the relevant invoice verification data was only supplied by the three DataSources of Purchasing 2LIS_02_HDR (purchasing data (header level)), 2LIS_02_ITM (purchasing data (item level)), and 2LIS_02_SCL (purchasing data (delivery schedule line level)).
Iam already using this elis_06_inv in my other data model for another req. So my question here is instead of wasting time with creating this with 2lis_02_itm /hdr /scl Can I just use the new one that Iam already using for other req.
Thanks

Hi Harish,
You can use the same datasource to load data into different infoproviders. Just create new transformation rules and DTP assigning source as your datasource, for the new infoprovider. In the infopackage, schedule the data transfer to PSA and then execute the DTP to load the data, for the required infoprovider.
Hope this will help resolve your query.
Regards
Vaibhav

User Data Source - Access Enforcer

Hi,
I currently have my User Details Data Source and Search Data Source in AE pointed to the UME. In the UME I have my requestors and approvers set up. However when I go to raise a request to change a user account and want to search for an SAP user, the search only returns the requestors and approvers set up in the UME and does not show user data from SAP. How can set up AE so that it shows me user data from SAP and requestor/approver data from the UME?
Thanks,
Gary

What you can do is... to point your UME to your SAP system, where you can find all users.....
And keep your configuration of AE the way you have it....
Another way is, to change your configuration of User Details Data Source pointing to SAP.
Youy User Details Data Source have to point to the system that have all the new users....
For example, in my company before giving the SAP access we give LDAP access, so my User Details Data Source are pointing to my LDAP system.... this way i can find easily the user that need to request access..
Hope this help.
Regards,

Newbie XML data source questions

Post Author: tel
CA Forum: Data Connectivity and SQL
I'm trying to use the XML data source via http and i'm running into a couple of issues.
First, we have separate environments for development, QA, and production. Each environment will have a seperate URL to retrieve the XML for the report. I would like to use the same report design to access each environment. Is there a way to update the URL in the data source (or replace the data source with one that has the correct URL) without having to re-add the fields to the report design?
The second issue is similar. I can't seem to get Crystal to recognize changes in the XML format (new fields for example) without having to delete and recreate the data source (which automatically removes all the associated fields from the report). Is there a way around this, or again, a way of re-creating the data source without it removing the existing fields in the report?
Thanks,

Post Author: rosariosanto
CA Forum: Data Connectivity and SQL
I have the same problem. Where can I find help about setting the data source when connecting to a web service. Since the hostname is hardcoded in the report, it is necessary to update it in the code.

GRC 10/10.1 User Data Source question

Similar Messages

Maybe you are looking for