GRC AC 10 (RAR/CUP/ERM) configuration for EP system

Hello Gurus,
We are aware of configuring RAR/CUP/ERM in GRC AC 10 for ERP system(back-end)
Are there any documents /links to provide information on configuring the above components for EP system ??
Or rather specific which of the following configuration is possible for EP system ?? CUP /RAR/ ERM ??
Also going further , is there any way in which we can configure the same for BO system ??
I am not quite sure if there is any PLUG-In as such which is available for BO system or not .
But in my opinion there is no need to perform configuration for BOBJ system as the roles in them are imported from Backend system (ERP/BI etc) , hence if these roles are already taken care during ERP system cleanup and SOD analysis , there should be no need to configure seperately RAR/ERM/CUP.
Please provide your comments.
Regards,
Victor

Hello Prasad,
Thank You for your quick response .. the info was quite helpful.
Will you please put some light on aspects of integrating AC 10 with BO ??
Is there any connecter available for it?? Which scenarios are possible ??
Humbly Requesting your help.
Thanks in advance.
Regards,
Victor

Similar Messages

  • Can Central System administration be configured for JAVA systems?

    I know, we can configure Central system administration (DSWP -> Solution -> Operations Setup) for ABAP and ABAP+JAVA systems.
    Can some one tell me, can it be configured for JAVA systems like Portal?
    Thanks
    Aditya

    Hello Aditya
    Unfortunatelly Java only systems are not supported by CSA in EHP1. The CSA infrastructure is currently being overhauled and as a result of this, pure Java systems will also be covered starting with the next release of SAP Solution MAnager (SAP Solution Manager 7.1) The availability of this next release will be this year, but I am not yet sure when exactly. You can check further info in www.service.sap.com/solutionmanager -> in the last line of this page there is a link to get detail about this version Ramp-Up.

  • Infamous "Recovery policy configured for this system contains invalid recovery certificate" message

    Hello,
    On a Windows 2012 R2 member server of a Windows 2012 domain, I tried encrypting a folder, and I got a "Recovery policy configured for this system contains invalid recovery certificate message."  This is the first known attempt
    at enabling EFS within our organization.
    When I looked at the EFS certificate within the Default domain GPO, it had expired.
    Is it as simple as deleting and recreating the EFS certificate within the Default domain GPO?  Then running gpupdate /force on the Windows 2012 member server?
    Thanks
    Ron

    You can give a look to that: http://blogs.technet.com/b/askds/archive/2008/01/07/replacing-an-expired-dra-certificate.aspx
    More if you ask them here: https://social.technet.microsoft.com/Forums/windowsserver/en-US/home?category=migratedforums&filter=alltypes&sort=lastpostdesc
    This posting is provided AS IS with no warranties or guarantees , and confers no rights.
    Ahmed MALEK
    My Website Link
    My Linkedin Profile
    My MVP Profile

  • Best configuration for Transport System

    Hi everyone
    I like to know what is the best way to configure my transport system.
    We have 2 server QAS and PRD in two distinct machines. SERVERQAS and SERVERPRD, accessible from network.
    We need what when all transport request from QAS when released, all files must be copied to PRD server, today we need to use the button to adjust queue, but we can't use this option, we need what this process is automatic.
    Thks.

    Hello Emerson,
    You don't have Development system?
    In a standard 3 system landscape, if dev, qua and prod systems are assigned with single domain controller and sharing same /usr/sap/trans then as soon as request is released from dev system, that will be available in qua buffer/import queue. Once it's successfully imported into qua system then it will be available in prod buffer/import queue for import. This is controlled by transport route.
    Please read TMS configuration guide and take necessary actions.
    http://help.sap.com/saphelp_nw04/helpdata/en/44/b4a0137acc11d1899e0000e829fbbd/content.htm
    http://help.sap.com/printdocu/core/print46c/en/data/pdf/bcctstms/bcctstms.pdf
    Thanks,
    Siva Kumar

  • Earlywatch Alert configuration for Java system

    Hi All,
    I have configured the Solution manager diagnostics for early watch
    alerts for a java system by following the guide "EWA for non-ABAP
    components" in note 976054.
    I am able to get the EWA reports manually, i.e by downloading
    the "service download" file from http://<host-name>:<port>/smd/services
    and uploading it in T-code DSA in Solution manager system and by
    generating the "word" file over there. But i require the automatic
    configuration to work. This automatic reports generation is not working presently.
    Is there any separate configuration to be done for the automatic report
    generation for Non-ABAP systems.
    Waiting for any one of your help,
    Points will be awarded for any useful solutions.
    Regards,
    Phani.

    Hi,
    Normally you have nothig to do, the report should be generated each week automatically. But you have some checks in  document attached to <b>SAP Note 976054</b> to see if everything is activated (SDCCN, NONE Destination, etc...).
    Regards,
    Stephan

  • HD configuration for new system

    Hey guys,
    I'm planning to build a new workstation and just wanted to have some ideas regarding the HD configuration.
    Working  with cs6 PR AE PS LR + few 3d party plugins mostly on canon 5D mk 3 footage
    editing, grading, keying + some 3d stuff
    what i have as a setup no assembled at the moment :
    i7 4930k
    Mb: Asrock x79 extreme 11   http://www.asrock.com/mb/Intel/X79%20Extreme11/
    Ram : Corsair vengeance pro series 32 gb 4x8  2133mhz
    VGA gigabyte nvidia 780ti
    Power supp:  AeroCool Strike-X Power 1100W 80 PLUS GOLD
    Cooling system; Corsair Hydro Series H100i
    case  NZXT Phantom 530
    and 1 kingston HyperX  3K 240 gb SSD
    other hd configurations!!! still waiting your ansewer
    in my area i have Seagate Desktop SSHD and barracuda  HD and few ssd
    after few weeks reading everything about hd in adobe forum, i am still confused what to use as a raid or individual hds and what can change hd speed  for ex the "Hibernate"...
    also my mb is equiped with a raid controller and i dnt have any idea about it.
    please i need some help form pro guys
    Thx alot

    Huge thanks to everyone who has spent his time answering my questions. your answers are very helpful.
    first time i know that raid 5 needs enterprise drives and even in the following 2 links and few other forums i didn't see this information "or maybe i didnt pay attention"
    http://ppbm7.com/index.php/tweakers-page/84-disk-setup/95-disk-setup
    http://ppbm7.com/index.php/tweakers-page/85-raid-or-not-to-raid/96-rai d-or-not-to-raid
    as I said before, my work is based on canon 5d mk III footage for music video and few youtube promo for musicians and singers (i am a bass guitar player as a second job)
    my main workflow is based on editing, coloring, keying + 3d object inserted in after effect
    and because i cant use raid until i get the Areca controller and dedicated HDD i will go to this following disc setup
    I will use my ssd hyperX for os and page files
    1 more ssd Kingston v 300 for windows temp ( i need to make a search for how to move this folder to new drive, during of after OS and application installation)
    1 HHd for pics, small video sources and  3d objects maybe
    2 tb hdd for project, media footage,
    2 tb hdd renders preview, media cash.
    2x 2tb raid 0 as export + external e-sata or usb3 hdd for backup  every time
    is this fine for my needs?
    i am still confused with page files and windows temp
    Thank you again
    Wajdi

  • Best Configuration for running adobe Premiere Pro CS3

    I have a 4 HDD system and the ability to run RAID.  What is the best configuration to run Adobe premier pro CS3.  I want to be able to get the best perfomance out of my system.

    Is it possible to run different RAID combination using the same controller card?
    For example:
    1) 2 HDDs, RAID 0 configuration for Operating System/Programs
    2) 2 HDDs, RAID 0 configuration for Project/Scratch Disk/Paging
    3) 2 HDDs, RAID 0 configuration for Media/data.
    I have a Asus Striker Extreme Motherboard.

  • Sip configuration for Vyke

    Hi
    Can someone tell me where to find the Sip configuration for VYKE system?

    Profile name: Arbitrary
    Service profile: IETF
    ACCESS POINT : [your wifi access point]
    PUBLIC USER NAME: sip:[username]@sip.vyke.com
    use compression: no
    registration : “always on” or “when need”
    SECURITY: NO
    PROXY SERVER
    PROXY SERVER: sip:sip.vyke.com
    REALM: sip.vyke.com
    USER NAME: :[sip_user]
    password: [sip_pass]
    allow loose routing: yes
    transport type: UDP
    PORT: 5060
    REGISTRATION SERVER
    REGISTRATION SERVER: sip:sip.vyke.com
    realm: sip.vyke.com
    user name: [sip_user]
    password: [sip_pass]
    transport type: UDP
    PORT: 5060
    N86 8mp: RM-485,0590552; Version 20.115 - 6/29/2009. - -- E71-2; RM-357; 0569371; Version 100.07.76 - 6/08/2008.
    N8; N900

  • Transport target group and routes setting for 2 system landscape

    Hi!
    I have 2 system landscape (DEV with 2 Clients, 100 CUST and 200 TEST and PRD with productvie client 100).
    Currently I have the standard TMS configuration for 2 systems (with tranport layers/routes ZDEV and SAP) .
    Now I  have to set up my TMS settings client specific
    (Development in DEV 100 and transport to the DE 200 TEST and PRD 100).
    I have created tranport target group /B-DEV/ with both target goals:
    DEV 200 and PRD 100.
    <b>What are the further settings for transport routes?
    I assume, I have to delete the existing routes ZDEV and SAP?
    what are the next steps? </b>
    Thank you very much
    regards

    Ok, I have in DEV system:
    Client 100 (Customizing)
    Client 200 (Test) (it can be considered as replacement of QAS-system, because we only have 2 systems)
    PRD system
    Client 100 (Productive client)
    So we would like to set up the transport management system client specific, in order to develop in DEV 100 to test in DEV 200 and to use the transports in PRD 100.
    Thank you very for your help
    regards

  • Create user in SAP GRC AC 5.3 for each module (RAR, CUP, SPM, ERM).

    Hello,
    I have a doubt.
    The users of the modules of the SAP GRC AC 5.3 have to created in the UME of the EP Core, is that right?? And thet add the roles of each user for each module (RAR, CUP, SPM, ERM), is that right?
    Best Regards.
    Pablo Mortera.

    Hi Pablo,
    To access GRC AC 5.3 you can create one UME user and assign different roles related to four GRC component.
    Or you can create different GRC user and assign respective components roles.
    The example of GRC Admin role are.
    AEADMIN
    READMIN
    VIRSA_CC_ADMINISTRATOR
    regards,
    Sudip,

  • GRC AC 10 ERM Configuration

    Dear All
    We are on GRC AC 10 SP 6 ... and configuring Business Role Management (ERM). I have activated all the relevant BC Sets in inst guide (Page 33) and GRAC_ROLE_MGMT_LANDSCAPE.
    However, I am not able to find any default configuration for Role Management in SPRO->IMG-> Access Control->Maintain Configuration Settings ... ?
    Also, after applying SP6 for GRC AC 10, we get two invalid parameter groups updated in Configuration Settings with group name '0' param ID 2021 and Value 009
    Any clue across these problems ?

    Daniela Bork wrote:
    Hi Jay,
    >
    > activating the BC set does not fill any default parameters for any of the tools.
    > You will need to add them into the list manually.
    >
    OK. I'll put them manually or see if I should go with the default ones.
    Daniela Bork wrote:
    > For your second issue, we have the same effect: Two new invalid parameters 2021 and 2022 are listed with value 009 which have not been there within SP05 and definitely not added manually. Also a complete empty line.
    > I think this will be a bug/issue with SP06.
    > Did you report this to SAP?
    >
    I'm glad that I'm not alone. Yes, I have reported to SAP and expect them to reply by tom.
    @Anyone, I am working in the implementation and configuration of GRC AC and would like to share some configuration related issues. Would be glad if someone who has worked on GRC (esp ERM), drop me a mail frm my business card (click my name).
    Thanks,
    Jay

  • Option with GRC 5.3 CUP to consolidate the Login Notif. for Xple Systems

    Hi,
    We are setting up a GRC environment for provisioning accounts for users in Dev and Test  SAP systems. We are planning to use a single request to provision accounts to 15-20 systems simultaneously and we are checking ways to consolidate the login notification to the user.
    With our current setting to auto provision the account, the user will get separate mails for each systems. Is there any tweak that will help in consolidating the different mails for different systems to a single one with the same UID and password.
    I know there may not be any standard way of doing this, but then there can be fresh ideas from experts.
    Thanks, Anil

    Sorry, Anil. There is no way to configure those provisioning emails. You can change the wordings or remove them but you won't be able to consolidate them.
    Regards,
    Alpesh

  • GRC AC v5.3 CUP "User Access Reviews" (UAR) requires implementation of ERM?

    Hi Experts,
    re: GRC AC v5.3 CUP "User Access Reviews" (UAR) requires implementation of ERM?
    After reading the guides and forum it is still not clear to me if ERM is absolutely required in order to use CUP "User Access Reviews". The guide mentions in ERM the Role Usage Synch job has to be run, and then that data is to be loaded into CUP. Is this step absolutely required or can we skip it.

    Gary,
      ERM is a necessity if you want to fully use UAR in CUP. I don't know why SAP did it this way but it is how it is.
    Regards,
    Alpesh

  • Mulltiple Rule Sets in GRC 10.0 for one System

    Hi All,
    We do have 2 different companies working on one system and by that 2 different rule sets that are applicable.
    Due to that we are facing different problems we don't know how to solve yet but lets start with the first one dealing with the rule set that should be used in the access request.
    We want to determin which rule set should be used over the requested role (e.g. if role name contains 0001 use rule set 0001, if role name contains 0002 use rule set 0002).
    We have alerady tried several different senarios in BRF+ without success.
    Does anybody have a solution or at least an idea for this topic?
    Thank you all very much in advance!
    Eva

    Hi Ashish ,
    Thanks for your time . Let me explain you my requirement and would really appreciate if you would have some inputs here which would help me to design this .
    The actual client requirement is to design a CUP Workflow and If there are SOD issues identified, the workflow will need to go to a central team for them to address each issue. If this group decides to apply mitigating controls to the issues, the workflow must then go to the compliance group for them to review for appropriateness. Requirement is do a SoD analysis for every role change/add request , so that this group takes the appropriate action based on the SoD Analysis . For all my CUP request raised , i want system to do a SoD analysis and let this group know whenever there is a SoD found or just end the workflow if there is no risk.
    I am aware of the Risk analysis process for GRC 10.0 , however i want it to happen as a part of this work flow requirement.
    The requirement is to configure the access request work flow so that the end goal of work flow is just facilitation of an SOD review.  I hope i was able to explain my requirement . Thanks again for your help.
    Your valuable guidance would be really appreciated.
    Vikas

  • Back up of the RAR 5.3 configuration done

    HI all,
    I want to have a backup of the configuration done in one our systems.So that if some changes are done they can be revert back by applying changes .Any pointers ....

    Hi Ambarish,
    You may keep backup of these settings -
    in CUP - goto configuraiton - initial system data- there is option to export- select what you want to keep and make a export file. You may import it any time again.
    In RAR - goto Configuration - Utilities - Export - select what you want to keep.
    In RAR - Rule Architect - Utilities -  Export - select what you want to keep(risks etc)
    In RAR - goto Mitigation- Configuration - Utilities- Export - select what you want to keep(risks etc)
    In ERM - You can export all business processes, subprocesses etc one by one . there is export option with each of them.
    In ERM - You can export Org Value mapping
    In ERM got oConfiguration - Configuration Settings - Select what you want and export.
    You can import all of them at any given time.
    Thanks & Regards,
    Sabita

Maybe you are looking for