GRC: AACG 8.6

Has anyone installed AACG 8.6 yet? Any major bugs or issues to watch out for? We had performance issues with the heatmap process in 8.5.xxx, and Oracle recommends upgrading to 8.6 because the heatmap is not ran everytime you run a conflict analysis.
Any help would be appreciated.

Several patches have been released for 8.6 now, so there is stability. I'd recommend the following to test it out, but it is quite different than 8.5. To make sure everything will upgrade you could do 1 of 2 things. 1) Backup everything (DB and filesystem), then upgrade and see if the functionality you use is acceptable. or 2) create a test instance, run your normal scenarios, and then upgrade and make sure the functionality you need is all good.
Hope that will help in your approach.

Similar Messages

GRC AACG/TCG and CCG control migration best practice.

Is there any best practice documents which illustrates the step by step migration of AACG/TCG and CCG controls from the development instance to the production? Also, how should one take the back up for the same ?
Thanks,
Arka

There are no automated out of the box tools to migrate anything from CCG. In AACG/TCG you can export and import Access Models (includes the Entitlements) and Global Conditions. You will have to manual setup roles, users, path conditions, etc.
You can't clone AACG/TCG or CCG.
Regards,
Roger Drolet
OIC

Best practice SOD Library in AACG 8.5.1.278

Hi,
We require best practice SOD Library in AACG 8.5.1.278 for EBS R12. I have searched Oracle edelivery but could only find library for AACG 8.6 . We are using Windows X-64 platform.
Can someone provide a download for the same in English language?
Thanks.
Abhishek Jain

Hi,
The best practice library files will be available in the directory you have downloaded and unzipped the GRC media pack from edelivery. Go to the specific directory in the system / server and select "Content" folder. You can copy the files on to your desktop and upload the same into AACG.
Hope this helps. Let me know if you need any further assistance.
Best Regards,
Manjunath

Ldap and Single Sign on. for AACG and CCG

If any body done ldap integration.
Here are my problems.
1) No clear documentation for AACG ldap configuration for GRCC. There little bit of documentation on GRCM but GRCC.
2) CCG - also no clear documentation. just one screen what values it is neeed.
3) does OID supported?
4) can I used corporate AD for user integration.
The Documentation doesnot talk about
a) what happens if ldapis enabled can I login with admin account locally if ldap doesnot work?
b) when ldap is enabled.. what role is assinged...
thanks,
Narender

If you have a look at My Oracle Support (support.oracle.com) Document ID 741001.1: GRC Suite Support Matrix
It looks like only EGRCM supports LDAP/OID to some degree. Also I would suggest to open an SR to make sure that the GRC products you want to use LDAP for are supported.

How to install GRC "content" sets of models

Hello all,
I have successfull install of GRC 8.6.4.5. But still i can't find how to install/setup *xml content models in it.
For example i have downloaded and unzipped following module/part of GRC :
Oracle Procure to Pay Transaction Controls 8.6.4.5 :
content/
- EBS-11510/
- EBS-R12/
Inside EBS folders, there are *xml files. ( some of them are for non-english languages ).
Also in AACG ( Oracle Application Access Controls Governor 8.6.4.5 ) which comes with grc.war/ear and again this "content" folder ( one for EBS11 and one for EBS12 ), in which there are the same type of xml files.
My question is how to setup/configure/import these "content" type xml files in GRC ?
Or where to read about it.
Edited by: konstantinsk on Apr 1, 2013 4:19 AM

Seeded content is not part of the installation process. Please follow the appropriate product user guide to identify and learn how to load the particular applications content.

New GRC Accelerators

Hello Everyone,
GRC has worked hard to provide you with [implementation accelerators|https://www.sdn.sap.com/irj/bpx/grc] intended to simplify the implementation of GRC solutions.
We will continue investing in this effort only if we know that the material is useful for you.
Please take a minute to complete these [9 questions |http://www.surveymonkey.com/s.aspx?sm=sfyZ20qVg33i4Em9XOcdZQ_3d_3d]about our accelerators. In addition to confirming the value of our documents to you, this survey will help us to improve and adapt the accelerators to your needs.
Thank you and Best Regards,
Jan Horbach
Regional Implementation Group - SAP GRC

1. AACG corresponds to ICM.
In the new GRC Suite 8.6.3 which modules and products have following functionality & inbuilt seeded data pertaining to:
i) Key controls repository for various business processes.
ii) Key controls testing and test steps for various business processes
You need to use EGRCM for documenting all these. It does not come with any seeded functionality as of now. If you looking for Automated Controls specific to an ERP then you need to use TCG, PCG or CCG. But again they need to be configured for specific controls.
iii) SOD conflicts and violations that are unacceptable: AACG. You will need to get the library from Oracle or a vendor. AACG does not come seeded with the rule set.

GRC Training Resources

Does anyone know of any resources that are able to provide GRC training for a team within a company? We have looked into training for Oracle but it would be way outside of our price range. We would prefer instructor led courses, be them online or on site.
Any and all recommendations would be appreciated.
Thank You

I offer training using UPK Training Documentation with Access to our GRC Sandbox for AACG, ETCG, CCG and PCG.
Regards,
Roger Drolet
[email protected]

User Manager in GRC

How to find..User Manager relationship in GRC
Edited by: user1642876 on Mar 21, 2011 5:52 AM

Which product are you referring to? GRCI, GRCM, AACG, PCG, TCG, CCG? and what are you trying to accomplish

Archive and Purge provisions in GRC suite

Hi,
I'm trying to understand the Archive and Purge options provided / offered by GRC suite but have very skeletal information. Can somebody help me on that front?
Balaji K

In a nutshell,purging is removal of data from a system or storage device with the intent that the data can not be reconstructed by any known technique. In GRC Suite purging has similar concept to purge incident stored after a long period of tie and storage (AACG). You can also purge snapshop or change tracking definitions in CCG. General rule of thumb, ensure you follow your company policies with regards to data archive and purging and access to these functionalities within the GRC Control Suite should be restricted.

Integrating OBIP with GRC for Reporting

Hello Experts
I am very new to the GRC suite. I wanted to know if it is possible to use OBIP for developing custom reports for AACG to meet specific audit requirements. Are there any OOTB report templates that can be loaded in OBIP for eGRC?
Regards
Deepali B

1.Technically you should be able to use OBIP to develop custom reports for AACG although the effort required might be significant, although some integration is provided between EGRC 8.6.4+ and OBIP OOTB.
2.No there are no OOTB report templates that can be loaded in OBIP for eGRC.
Regards

DEVOLUÇÃO DE EXPORTAÇÃO - CFOP 3201 - GRC VALIDA DADOS DI.

Boa tarde a todos!
Estamos em um projeto de NFE XML 2.00 e nos deparamos com o seguinte erro:
Ao emitirmos um NF-e de devolução da mercadoria que se encontrava no Porto (devolução de exportação - CFOP 3201), a validação do monitor GRC informa que é necessário constar os dados de importação, apesar deste processo não se tratar de importação. Os seguintes logs de validação são gerados:
Erro de validação: campo Código do fabricante estrangeiro no sistema. Campo é obrigatório e não pode ficar em branco. (campo IT_NFE_ADI-CFABRICANTE, ID campo I028)
Erro de validação: campo Nº da adição. Campo é obrigatório e não pode ficar em branco. (campo IT_NFE_ADI-NADICAO, ID campo I026)
Erro de validação: campo Nº sequencial do artigo na adição. Campo é obrigatório e não pode ficar em branco. (campo IT_NFE_ADI-NSEQADIC, ID campo I027)
Erro de validação: campo . Campo é obrigatório e não pode ficar em branco. (campo IT_NFE_IMP-CEXPORTADOR, ID campo I024)
Erro de validação: campo . Campo é obrigatório e não pode ficar em branco. (campo IT_NFE_IMP-DDESEMB, ID campo I023)
Erro de validação: campo . Campo é obrigatório e não pode ficar em branco. (campo IT_NFE_IMP-DDI, ID campo I020)
Erro de validação: campo . Campo é obrigatório e não pode ficar em branco. (campo IT_NFE_IMP-NDI, ID campo I019)
Erro de validação: campo . Campo é obrigatório e não pode ficar em branco. (campo IT_NFE_IMP-UFDESEMB, ID campo I022)
Erro de validação: campo . Campo é obrigatório e não pode ficar em branco. (campo IT_NFE_IMP-XLOCDESEMB, ID campo I021)
Estamos no SAPK-10015INSLLNFE e as seguintes notas relacionadas a validação estão aplicadas:
1493980     Validation for field xJust in cancel and skipping messages
1499921     Problem with validation after implementing SP15
1500046     Upgrade validation rule for field ID for version 2.00
1500742     Adjust validation for field NADICAO and NSEQADIC layout 2.00
1502217     Extend validation rules for , layout 2
1504379     Adjust validation for field X_CLISTSERV
1511291     Update allowed values for field E1_CPAIS for validation
1511577     Update validation rules for field VUNCOM_V20
1520861     Update validation rules for OIL_CPRODANP and OIL_UFCONS
Não encontrei nenhuma nota SAP recente para o componente SLL-NFE que seja relacionada a este problema.
Desde já agradeço pela ajuda.
Sds / Renato Penido.

Boa tarde, Fernando,
Obrigado pela pronta resposta.
Debugamos a BADI e descobrimos que os dados de importação estão sendo gravado "em branco", gerando o erro de validação no GRC, tal qual dito por você.
Aprimoramos a lógica da BADI para que a tag de importação não seja preenchida indevidamente para as notas de devolução do porto e as notas foram aprovadas.
Muito obrigado,
Renato Penido.

Perfis de Usuários do SAP R/3, GRC e PI

Pessoal,
Estou iniciando um projeto de NF-e (com B2B) em um novo cliente e estão solicitando todos os perfis de usuários para criação dos mesmos, alguém já passou por isso e poderia ajudar? basicamento serão para os usuários:
- De Comunicação entre R/3 e o GRC
- De Comunicação entre o GRC e o R/3
- De Comunicação entre o GRC e o PI
- De Comunicação entre o PI e o GRC
- Usuários que utilizarão o Monitor Web do GRC.
No aguardo, obrigado.
Danilo

Para os usuarios de comunicacao, verifique o item 3.3.5. Communication User Details desse link: SAP GRC NFE 1.0 - New Solution Introduction & Implemention Best Practices
Com relacao aos usuarios dos monitores, vc pode filtrar o acesso (que notas eles conseguem ver) pelo CNPJ.
Para isso, crie uma role Z como copia da /XNFE/TAXNUMBER e nessa role Z, coloque o numero do CNPJ do emissor (filial ou matriz) das notas que esse usuario pode ver no activity respecitvo.
Att,
Henrique.

Problem with Edit option for a role created in GRC 10.0

Hello Experts,
I created a role in GRC 10.0 , I see my newly created role in the list of roles . If I want to Edit the role I select the row and click " OPEN" and edit the role.
But when I click the role directly and enter the role , the "EDIT" button is disabled and even maintain authorization button is disabled.
Did SAP defined in such a way that we should selct the role and click OPEN then only we can Edit or is this a Bug??
Please let me know if any one of you faced the same problem.
Regards,
Jagadish Bhandaru

Hi,
Sabita is correct.
Here is the link to the documentation
SAP Access Control 10.0
Simon

Logical Groups in GRC-AC

Dear Experts,
We are using business role concept.Only business roles are assigned and not technical roles.
Requirement is To assign business role from GRC Prod system to ECC DEV and ECC QA also apart from ECC Prod.
To do so we have a logical group SAP_R3_LG mapped to ECC Prod for all action 1,2,3 and 4. Do I need to create other 2 logical groups mapped to ECC DEV and QA respectively.
Also I believe we need to create different business role name for QA and DEV system .
Appreciate your thoughts on this...
Thanks,
Mamoon

Hi Mamoon,
First of all, you need to create unique connector groups per each connectors in order to create/maintain the roles in the backend systems. Then you need to map the connector in the corresponding connector groups.
In BRM, you can have only one system as default connector and this would not let you to maintain the roles in case you have to use multiple connectors for role maintenance.
Make sure to define the integration scenarios for each connectors individually.
Hope this would help.
Regards,
Ameet

Can we view the changes of a role, happened in pfcg,through grc?

hi Pls give me reply to this question

Hi Jeevan,
I think you are asking about the PFCG change history. Of course we can. From GRC 10.0 navigate to Reports & Analytics-> Role Management reports->click on the link PFCG change history. In the popup page select your System (ERP backend) & Enter your role name(for which you want to see the change history. Click on PFCG History. In the next pop up ( SP GUI login) enter the credential of the user, that has pfcg authorization in the ERP backend. Finally click on the execute button in the SAP screen. Now you'll be able to see the change history of the role. In fact from GRC it calls the respective ERP system and executes the report "RSSCD100_PFCG". Directly you can also go to the ERP backend" and execute the report in "SA38".
Thanks,
Guru

GRC: AACG 8.6

Similar Messages

Maybe you are looking for