GRC AC CUP 5.3

Hello Team,
SAP GRC AC CUP 5.3 , SP15
While clicking on the Change log history under configuration tab and NewAccount Request type from end user form getting below mention error
Application error occurred during the request procession.
Details: com.sap.engine.services.servlets_jsp.server.exceptions.WebIOException:
Error compiling [/scrLeftNav.linkChangeLogConfig.do] of alias [AE] of J2EE application [sap.com/grc~aeear].
Please help me to know the issue.
Thanks,
Jagat

Hi JagatBir,
As suggested by Frank, initial data files are required to be uploaded each time we apply a new patch.There was some issue in SP15 initial files, so a new set of files are available on SMP, check if it can help. I found that only ERM file was updated, so might not be of any use for CUP issue.
Additinally check if below application is running -
sap.com/grc~aeear
Go to visual administrator> Server> Services > Deploy>web services container--> sap.com/grc~aeear
If it is stoped, start it. If it is running, you may try giving a restart.
Let us know how it goes.
Regards,
Sabita

Similar Messages

GRC AC CUP LDAP configuration

Dear team,
I am facing issues with one of my LDAP connections. Users beloning to one particular LDAP are not able to login to the self-provisioning link on CUP. The system log returns 'nulpointer' exception, which generally comes on incorrect logon credentials.
I have checked the user in the connector. It exists and is working well.
The only point is this LDAP is my 6th. How do I make this working?

Assuming User Data Source is pointing to LDAP;
Please check the Connector User[Configuration Tab-> Available Connectors->select the LDAP Connector] between the LDAP and GRC AC CUP is locked .Unlock It and save .
Then check is TEST CONNECTION is successful.
Regards
Ajit.

GRC and CUP and Mobiliity question

Hello GRC friends:
In an environment where GRC and CUP are configured and working, the question came to me,
can the requests for the Firefighter ID be sent to a mobile device?
The person responsible for the request approval must now sign on thier PC.
Are there any known impediments to sending these to say an iPAD to be approved?
Thank you in advance for your assistance.
Regards,
Joe Gonzales
856 912 1136

HI Josep!
There are some applications for mobile devices that you'll be able to find here: http://ecohub.sap.com/store/mobility
This particular application is for GRC approval:http://ecohub.sap.com/store/mobility/catalog/#!solution:SAPGRCAccessApprover
I don't know the cost and if it's available in your country neither....
Cheers,
Diego.

Deleting roles from GRC AC CUP

Hi
We had GRC 5.3 installed with SP05. We have archived all our existing requests and are trying to delete some of the roles from CUP. However when trying to delete the role it is giving a message "Cannot delete because this is referenced by request". Is there something else which i need to take care of? Will application of latest support packs help in this situation?
Appreciate your help regarding the same.
Thank you.
Anjan Pandey

Hi Anajan,
I feel some requests are still exist in GRC CUP for that particler role. Please follow the below steps and try to delete the Role again.
Go to CUP configuration tab > click on Request option under the workflow> choose deleting requests > next> then its asks to delete all requests and then choose Submit option.
once you click on submit button, you will get the message all existing requests are deleted with Job id.
finally go to the Roles and delete the required roles form the GRC CUP.
Regards,
Arjuna.

How to delete stale request from GRC AC CUP

Hi,
I have defined certain workflow which are no more required and should be removed from the wrokflow to avoid any confusion. I am not able to delete the workflow defined since they are tagged to some of the requests which are not approved and are currently available to be approved. How can I delete these old workflow which in not required in future without impacting the configuration setting from GRC CUP.
Thanks,
Abhimanu

Hi Abhimanu,
You may close open requests by configuring stale requests. Take the following steps from configuration.
Navigate to Request --> Stale reqeuests
from action dropdown select enable and no of days field enter no of days any request should wait before it should go to closed status.
Schedule a background job to review all open req. against the Stale Requests setting. Any req. meets the criteria will be automatically closed.
Hope this should help to close those.
Regards,
Asok

Unable to connect Enterprise portal with GRC AC CUP

Hi Guru's ,
We are configuring Portal with CUP so that we can provision portal roles. We have installed RTA in EP ( both producer and consumer) and have set up the connector portals We have setup the parameters of the connectors as below. Not sure why when I am trying to import role this is not working. Can you please help.
ASSIGN_ROLES:OC
saprole
ASSIGN_GROUPS:OC
sapgroup
CHANGE_USER:OC
sapuser
CREATE_USER:OC
sapuser
CREATE_USER:password
password
DELETE_USER:OC
sapuser
LOCK_USER:OC
sapuser
LOCK_USER:islocked
true
LOCK_USER:type
CHANGE_USER
ROLESEARCH_URI
http://server:port/UserroleSearchForAEService_5_3/Config1?wsdl&style=document
ROLESEARCH_URI_PASSWORD
password defined for Portal user (for retrieving roles)
ROLESEARCH_URI_USERNAME
Portal user id (for retrieving roles)
ROLE_DATA_SOURCE
ROLE.UME_ROLE_PERSISTENCE.un :
SCHEMA_ID
SAPprincipals
UNLOCK_USER:OC
sapuser
UNLOCK_USER:islocked
false
USER_DATA_SOURCE
Choose data source as configured in Portal UME:
USER.PRIVATE_DATASOURCE.un:
USER.R3_DATASOURCE.
USER. CORP_LDAP.

Hi GS GRC team,
Check the below link from RIG that explains you the detailed steps to configure CUP with EP:
[RIG Document on configuring GRC CUP with EP|http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/502a14db-6261-2c10-22b5-95117ab0e5ed?quicklink=index&overridelayout=true]
Regards,
Raghu

GRC AC CUP 5.3 -don't have all pre configured configuration settings

Hi All,
we installed all the GRC AC 5.3 components. In the CUP component we see all the WF types (in the miscellaneous screen) but we do not have all their WF definitions (meaning initiator, stages, paths...) - we have those definitions only for the ERM WF.
Any ideas why is that and can we solve this ?
Thanks
Yudit

Hi Yudit,
You need to create all of them in CUP according to your company scenarios.
These are default workflow types through which your workflow will work, but you need to create workflows.
Even for ERM, you need to create workflows.
Please refer to Config Guide for AC 5.3, goto -
https://websmp102.sap-ag.de/~form/sapnet?_SHORTKEY=01100035870000718172&
In left hand side, click - SAP GRC Access Control - SAP GRC Access Control 5.3 - Configuration Guide - SAP GRC Access Control 5.3
Hope it helps.
Thanks & Regards,
Sabita

Workflow inititator GRC u2013 CUP

I need to cancel initiator from workflow of GRC CUP. When i try to delete initiator it says" Error deleting initiator. There are workflow paths associated with this initiator".When i try to deactiviate the path and try to cancel that path of workflow it says "Error deleting workflow path. There are approximately 10 requests associated with this path".Also i cannot cancel the closed request.Is there anyway to delete it.

Mouhed -
If you are just trying to delete the initiator, then you can do this by changing the related path to be a 'Detour' and then removing the initiator. That should take away the dependency that is preventing you from deleting the initiator.
You cannot delete a workflow path that has requests associated with it. However, you should be able to deactivate the path as long as there are no actively open requests associated with it. If you are running into issues there with closed requests, you could use the 'Archive' functionality to take them out of the active queue. That should take away the dependency on the workflow path and allow you to deactivate it.
- Rob

GRC AC CUP 5.3 SP06: Single Sign-On

Has anyone gotten single sign-on with Compliant User Provisioning to work? I've got my java stack authenticating kerberos tickets through SPNEGO with LDAP as the user data source. It works fine on every other application (RAR, SPM, ERM) except for CUP, which requires users to login. Is there anyway to force single sign-on inside of CUP or will my users always be required to type in their passwords for requesting and approving access?

Daniela,
Thank you, that's exactly what I was looking for, but I'm currently getting an error stating the following:
Application error occurred during request processing.
Details: com.sap.engine.services.servlets_jsp.server.exceptions.WebIllegalArgumentException: Cannot redirect to "null" location.
My redirection URL looks like this:
http://<server>:<port>/RedirectApp/?redirecturl=http://<server>:<port>/AE/index.jsp
Does that look right? What support pack were you able to get this working on?

GRC-AC CUP 5.3 SP11 UAR Admin Review

Hi All,
We are on GRC-AC v5.3 SP11 and we are implementing UARs. My question is on the Admin Review functionality. The only "pushbutton" options are "Change" and "Cancel Request(s)". However, we have noticed in our testing that the only ones that get moved from the "Admin Review" to the actual UAR Reviewer WF stage (via the UAR Review Update Workflow background job) are the ones that have been actually changed. Is this your experience? Is there a way to Mass Approve them as ready for the UAR Reviewer WF without touching every single one?
Thanks for your help!
-john

Hi John,
Current version of AC 5.3 doesn't have the option to Mass Approve UAR requests.
The closest you have is, if there is same "Reviewer" & "Coordinator" for each request in a page, then you can select all of them and update them.
"Mass Approval" of UAR requests needs to be an enhancement.
Please follow the note below to request this enhancement.
Note 1083615 - GRC Access Control Enhancement Process
Best Regards,
Sirish Gullapalli.

GRC 10 CUP Email-Notification: Insert Picture

Hello All,
I want to include a picture (e.g. a company logo) to the notification emails in CUP. This function is need especially for the system-mails to the requestor and the approver-stages.
Is there a possibility to do that?
Thanks and regards,
Daniel

As detailed in the How to Customize Notification Templates forAC 10.0 Workflow:
In the 10.0 release, you cannot include graphical elements for corporate branding in the provided notification templates. Customization is limited to textual messages and hyperlinks
Julien

Error in creating CUP request on GRC AC 5.3 SP12

-- Request dump for Action Path is scrTopNav.cfg
2010-09-27 20:14:00,416 [SAPEngine_Application_Thread[impl:3]_13] DEBUG AEFrameworkServlet.java@541:logRequest() : initTabName:0::config_request_type#
2010-09-27 20:14:00,416 [SAPEngine_Application_Thread[impl:3]_13] DEBUG AEFrameworkServlet.java@546:logRequest() : -- End Request dump for Action Path is scrTopNav.cfg
2010-09-27 20:14:00,417 [SAPEngine_Application_Thread[impl:3]_13] DEBUG NavigationEngine.java@85:execute() : Current Module: |AE| Conversation: |cnvCreateRequest| Screen: |scrRequestDetails|
2010-09-27 20:14:00,417 [SAPEngine_Application_Thread[impl:3]_13] DEBUG NavigationEngine.java@105:execute() : Module#AE#Conversation#cnvCreateRequest#Screen#scrTopNav#Action#cfg#
2010-09-27 20:14:00,417 [SAPEngine_Application_Thread[impl:3]_13] DEBUG NavigationEngine.java@248:execute() : Changing Screen: FROM: scrRequestDetails TO scrTopNav
2010-09-27 20:14:00,417 [SAPEngine_Application_Thread[impl:3]_13] DEBUG NavigationEngine.java@285:execute() : Handler found:class com.virsa.ae.actions.SuccessAction
2010-09-27 20:14:00,417 [SAPEngine_Application_Thread[impl:3]_13] DEBUG NavigationEngine.java@296:execute() : Target returned by execute action: success
2010-09-27 20:14:00,417 [SAPEngine_Application_Thread[impl:3]_13] DEBUG AEFrameworkServlet.java@458:service() : forwarding to:CFG.cnvConfigRequest.scrConfigRequest.loadConfigRequest.do
2010-09-27 20:14:00,417 [SAPEngine_Application_Thread[impl:3]_13] DEBUG AEFrameworkServlet.java@521:logRequest() :
-- Request dump for Action Path is CFG.cnvConfigRequest.scrConfigRequest.loadConfigRequest
2010-09-27 20:14:00,417 [SAPEngine_Application_Thread[impl:3]_13] DEBUG AEFrameworkServlet.java@541:logRequest() : initTabName:0::config_request_type#
2010-09-27 20:14:00,417 [SAPEngine_Application_Thread[impl:3]_13] DEBUG AEFrameworkServlet.java@546:logRequest() : -- End Request dump for Action Path is CFG.cnvConfigRequest.scrConfigRequest.loadConfigRequest
2010-09-27 20:14:00,418 [SAPEngine_Application_Thread[impl:3]_13] DEBUG NavigationEngine.java@85:execute() : Current Module: |AE| Conversation: |cnvCreateRequest| Screen: |scrTopNav|
2010-09-27 20:14:00,418 [SAPEngine_Application_Thread[impl:3]_13] DEBUG NavigationEngine.java@105:execute() : Module#CFG#Conversation#cnvConfigRequest#Screen#scrConfigRequest#Action#loadConfigRequest#
2010-09-27 20:14:00,418 [SAPEngine_Application_Thread[impl:3]_13] DEBUG NavigationEngine.java@209:execute() : Changing Module: FROM: AE TO CFG
2010-09-27 20:14:00,418 [SAPEngine_Application_Thread[impl:3]_13] DEBUG Context.java@259:clearConversationRep() : INTO the method
2010-09-27 20:14:00,418 [SAPEngine_Application_Thread[impl:3]_13] DEBUG NavigationEngine.java@285:execute() : Handler found:class com.virsa.ae.configuration.actions.RequestConfigAction
2010-09-27 20:14:00,421 [SAPEngine_Application_Thread[impl:3]_13] DEBUG com.virsa.ae.dao.sqlj.RequestTypeDAO : findAll() :   : ,list size=17
2010-09-27 20:14:00,421 [SAPEngine_Application_Thread[impl:3]_13] DEBUG com.virsa.ae.dao.sqlj.RequestTypeDAO : findAll() :   : #0# element:com.virsa.ae.dao.dto.RequestTypeDTO@50e750e7[reqType=NEW_HIRE,reqDesc=New Hire,workflowType=AE,isDeletable=true,shortDesc=New Hire,locale=1,endUserLongDesc=New Hire,active=1,sequenceOrder=0,actType=<null>,actDesc=<null>,actSeq=0,actionMap=<null>]
2010-09-27 20:14:00,422 [SAPEngine_Application_Thread[impl:3]_13] DEBUG com.virsa.ae.dao.sqlj.RequestTypeDAO : findAll() :   : #1# element:com.virsa.ae.dao.dto.RequestTypeDTO@51935193[reqType=CHANGE,reqDesc=Changes to an Existing Account,workflowType=AE,isDeletable=true,shortDesc=Change Account,locale=1,endUserLongDesc=You can request changes to existing account using this link. You can request additional access and other changes to an account such as account validity and so on,active=1,sequenceOrder=1,actType=<null>,actDesc=<null>,actSeq=0,actionMap=<null>]
2010-09-27 20:14:00,422 [SAPEngine_Application_Thread[impl:3]_13] DEBUG com.virsa.ae.dao.sqlj.RequestTypeDAO : findAll() :   : #2# element:com.virsa.ae.dao.dto.RequestTypeDTO@52165216[reqType=DELETE,reqDesc=Account Deletions,workflowType=AE,isDeletable=true,shortDesc=Delete Account,locale=1,endUserLongDesc=You can use this link to request deletion of accounts from various systems. You can also request mass deletion of accounts,active=1,sequenceOrder=2,actType=<null>,actDesc=<null>,actSeq=0,actionMap=<null>]
2010-09-27 20:14:00,422 [SAPEngine_Application_Thread[impl:3]_13] DEBUG com.virsa.ae.dao.sqlj.RequestTypeDAO : findAll() :   : #3# element:com.virsa.ae.dao.dto.RequestTypeDTO@533c533c[reqType=INFORMATION,reqDesc=Information,workflowType=AE,isDeletable=true,shortDesc=Information,locale=1,endUserLongDesc=Does not know which link to select from above? Click this link for information about what access you need,active=1,sequenceOrder=3,actType=<null>,actDesc=<null>,actSeq=0,actionMap=<null>]
2010-09-27 20:14:00,422 [SAPEngine_Application_Thread[impl:3]_13] DEBUG com.virsa.ae.dao.sqlj.RequestTypeDAO : findAll() :   : #4# element:com.virsa.ae.dao.dto.RequestTypeDTO@54005400[reqType=LOCK,reqDesc=Locking Accounts,workflowType=AE,isDeletable=true,shortDesc=Lock Account,locale=1,endUserLongDesc=You can use this link to request locking of accounts in various systems. You can also request mass locking of accounts,active=1,sequenceOrder=4,actType=<null>,actDesc=<null>,actSeq=0,actionMap=<null>]
2010-09-27 20:14:00,422 [SAPEngine_Application_Thread[impl:3]_13] DEBUG com.virsa.ae.dao.sqlj.RequestTypeDAO : findAll() :   : #5# element:com.virsa.ae.dao.dto.RequestTypeDTO@55095509[reqType=NEW,reqDesc=New Account,workflowType=AE,isDeletable=true,shortDesc=New Account,locale=1,endUserLongDesc=Use this link to request new accounts and Roles/Responsibilities/Structural Profiles,active=1,sequenceOrder=5,actType=<null>,actDesc=<null>,actSeq=0,actionMap=<null>]
2010-09-27 20:14:00,422 [SAPEngine_Application_Thread[impl:3]_13] DEBUG com.virsa.ae.dao.sqlj.RequestTypeDAO : findAll() :   : #6# element:com.virsa.ae.dao.dto.RequestTypeDTO@55c955c9[reqType=UNLOCK,reqDesc=Unlocking Accounts,workflowType=AE,isDeletable=true,shortDesc=Unlock Account,locale=1,endUserLongDesc=You can use link to request unlocking of accounts. You can also request mass unlocking of accounts,active=1,sequenceOrder=6,actType=<null>,actDesc=<null>,actSeq=0,actionMap=<null>]
2010-09-27 20:14:00,422 [SAPEngine_Application_Thread[impl:3]_13] DEBUG com.virsa.ae.dao.sqlj.RequestTypeDAO : findAll() :   : #7# element:com.virsa.ae.dao.dto.RequestTypeDTO@56995699[reqType=SUPER_USER_ACCESS,reqDesc=Superuser Access,workflowType=AE,isDeletable=true,shortDesc=Superuser Access,locale=1,endUserLongDesc=You can use a link to request Superuser Access,active=1,sequenceOrder=7,actType=<null>,actDesc=<null>,actSeq=0,actionMap=<null>]
2010-09-27 20:14:00,422 [SAPEngine_Application_Thread[impl:3]_13] DEBUG com.virsa.ae.dao.sqlj.RequestTypeDAO : findAll() :   : #8# element:com.virsa.ae.dao.dto.RequestTypeDTO@56fe56fe[reqType=MITICTRLC,reqDesc=Create Mitigation Control,workflowType=MITICTRL,isDeletable=true,shortDesc=Create Miti. Ctrl.,locale=1,endUserLongDesc=Create Mitigation Control,active=1,sequenceOrder=8,actType=<null>,actDesc=<null>,actSeq=0,actionMap=<null>]
2010-09-27 20:14:00,422 [SAPEngine_Application_Thread[impl:3]_13] DEBUG com.virsa.ae.dao.sqlj.RequestTypeDAO : findAll() :   : #9# element:com.virsa.ae.dao.dto.RequestTypeDTO@57d657d6[reqType=MITICTRLD,reqDesc=Delete Mitigation Control,workflowType=MITICTRL,isDeletable=true,shortDesc=Delete Miti. Ctrl.,locale=1,endUserLongDesc=Delete Mitigation Control,active=1,sequenceOrder=9,actType=<null>,actDesc=<null>,actSeq=0,actionMap=<null>]
2010-09-27 20:14:00,422 [SAPEngine_Application_Thread[impl:3]_13] DEBUG com.virsa.ae.dao.sqlj.RequestTypeDAO : findAll() :   : #10# element:com.virsa.ae.dao.dto.RequestTypeDTO@591f591f[reqType=MITICTRLU,reqDesc=Update Mitigation Control,workflowType=MITICTRL,isDeletable=true,shortDesc=Update Miti. Ctrl.,locale=1,endUserLongDesc=Update Mitigation Control,active=1,sequenceOrder=10,actType=<null>,actDesc=<null>,actSeq=0,actionMap=<null>]
2010-09-27 20:14:00,422 [SAPEngine_Application_Thread[impl:3]_13] DEBUG com.virsa.ae.dao.sqlj.RequestTypeDAO : findAll() :   : #11# element:com.virsa.ae.dao.dto.RequestTypeDTO@59825982[reqType=MITIOBJC,reqDesc=Create Mitigation Object,workflowType=MITIOBJ,isDeletable=true,shortDesc=Create Miti. Obj.,locale=1,endUserLongDesc=Create Mitigation Object,active=1,sequenceOrder=11,actType=<null>,actDesc=<null>,actSeq=0,actionMap=<null>]
2010-09-27 20:14:00,422 [SAPEngine_Application_Thread[impl:3]_13] DEBUG com.virsa.ae.dao.sqlj.RequestTypeDAO : findAll() :   : #12# element:com.virsa.ae.dao.dto.RequestTypeDTO@5a375a37[reqType=MITIOBJD,reqDesc=Delete Mitigation Object,workflowType=MITIOBJ,isDeletable=true,shortDesc=Delete Miti. Obj.,locale=1,endUserLongDesc=Delete Mitigation Object,active=1,sequenceOrder=12,actType=<null>,actDesc=<null>,actSeq=0,actionMap=<null>]
2010-09-27 20:14:00,422 [SAPEngine_Application_Thread[impl:3]_13] DEBUG com.virsa.ae.dao.sqlj.RequestTypeDAO : findAll() :   : #13# element:com.virsa.ae.dao.dto.RequestTypeDTO@5b6a5b6a[reqType=MITIOBJU,reqDesc=Update Mitigation Object,workflowType=MITIOBJ,isDeletable=true,shortDesc=Update Miti. Obj.,locale=1,endUserLongDesc=Update Mitigation Object,active=1,sequenceOrder=13,actType=<null>,actDesc=<null>,actSeq=0,actionMap=<null>]
2010-09-27 20:14:00,422 [SAPEngine_Application_Thread[impl:3]_13] DEBUG com.virsa.ae.dao.sqlj.RequestTypeDAO : findAll() :   : #14# element:com.virsa.ae.dao.dto.RequestTypeDTO@5bca5bca[reqType=RISKC,reqDesc=Create Risk,workflowType=RISK,isDeletable=true,shortDesc=Create Risk,locale=1,endUserLongDesc=Create Risk,active=1,sequenceOrder=14,actType=<null>,actDesc=<null>,actSeq=0,actionMap=<null>]
2010-09-27 20:14:00,422 [SAPEngine_Application_Thread[impl:3]_13] DEBUG com.virsa.ae.dao.sqlj.RequestTypeDAO : findAll() :   : #15# element:com.virsa.ae.dao.dto.RequestTypeDTO@5cca5cca[reqType=RISKD,reqDesc=Delete Risk,workflowType=RISK,isDeletable=true,shortDesc=Delete Risk,locale=1,endUserLongDesc=Delete Risk,active=1,sequenceOrder=15,actType=<null>,actDesc=<null>,actSeq=0,actionMap=<null>]
2010-09-27 20:14:00,422 [SAPEngine_Application_Thread[impl:3]_13] DEBUG com.virsa.ae.dao.sqlj.RequestTypeDAO : findAll() :   : #16# element:com.virsa.ae.dao.dto.RequestTypeDTO@5dc95dc9[reqType=RISKU,reqDesc=Update Risk,workflowType=RISK,isDeletable=true,shortDesc=Update Risk,locale=1,endUserLongDesc=Update Risk,active=1,sequenceOrder=16,actType=<null>,actDesc=<null>,actSeq=0,actionMap=<null>]
2010-09-27 20:14:00,423 [SAPEngine_Application_Thread[impl:3]_13] INFO com.virsa.ae.dao.sqlj.RequestTypeDAO : findAll :   : going to return no of records= 17
2010-09-27 20:14:00,424 [SAPEngine_Application_Thread[impl:3]_13] DEBUG NavigationEngine.java@296:execute() : Target returned by execute action: success
2010-09-27 20:14:00,424 [SAPEngine_Application_Thread[impl:3]_13] DEBUG AEFrameworkServlet.java@458:service() : forwarding to:/cfg_request.jsp
2010-09-27 20:14:00,426 [SAPEngine_Application_Thread[impl:3]_13] DEBUG LocaleUtil.java@321:getUserLocaleId() : intLocale : 1
2010-09-27 20:14:00,426 [SAPEngine_Application_Thread[impl:3]_13] DEBUG AECacheUtil.java@2085:getAllActiveWorkFlowTypeDropDown() : INTO the method : pLocaleId1
2010-09-27 20:14:00,426 [SAPEngine_Application_Thread[impl:3]_13] DEBUG LocaleUtil.java@321:getUserLocaleId() : intLocale : 1
2010-09-27 20:14:00,426 [SAPEngine_Application_Thread[impl:3]_13] DEBUG AECacheUtil.java@2085:getAllActiveWorkFlowTypeDropDown() : INTO the method : pLocaleId1
2010-09-27 20:14:00,426 [SAPEngine_Application_Thread[impl:3]_13] DEBUG LocaleUtil.java@321:getUserLocaleId() : intLocale : 1
2010-09-27 20:14:00,427 [SAPEngine_Application_Thread[impl:3]_13] DEBUG LocaleUtil.java@321:getUserLocaleId() : intLocale : 1
2010-09-27 20:14:00,427 [SAPEngine_Application_Thread[impl:3]_13] DEBUG LocaleUtil.java@321:getUserLocaleId() : intLocale : 1
2010-09-27 20:14:00,427 [SAPEngine_Application_Thread[impl:3]_13] DEBUG LocaleUtil.java@321:getUserLocaleId() : intLocale : 1
2010-09-27 20:14:00,428 [SAPEngine_Application_Thread[impl:3]_13] DEBUG LocaleUtil.java@321:getUserLocaleId() : intLocale : 1
2010-09-27 20:14:00,428 [SAPEngine_Application_Thread[impl:3]_13] DEBUG LocaleUtil.java@321:getUserLocaleId() : intLocale : 1
2010-09-27 20:14:00,429 [SAPEngine_Application_Thread[impl:3]_13] DEBUG LocaleUtil.java@321:getUserLocaleId() : intLocale : 1
2010-09-27 20:14:00,429 [SAPEngine_Application_Thread[impl:3]_13] DEBUG LocaleUtil.java@321:getUserLocaleId() : intLocale : 1
2010-09-27 20:14:00,429 [SAPEngine_Application_Thread[impl:3]_13] DEBUG LocaleUtil.java@321:getUserLocaleId() : intLocale : 1
2010-09-27 20:14:00,429 [SAPEngine_Application_Thread[impl:3]_13] DEBUG LocaleUtil.java@321:getUserLocaleId() : intLocale : 1
2010-09-27 20:14:00,430 [SAPEngine_Application_Thread[impl:3]_13] DEBUG LocaleUtil.java@321:getUserLocaleId() : intLocale : 1
2010-09-27 20:14:00,430 [SAPEngine_Application_Thread[impl:3]_13] DEBUG LocaleUtil.java@321:getUserLocaleId() : intLocale : 1
2010-09-27 20:14:00,430 [SAPEngine_Application_Thread[impl:3]_13] DEBUG LocaleUtil.java@321:getUserLocaleId() : intLocale : 1
2010-09-27 20:14:00,430 [SAPEngine_Application_Thread[impl:3]_13] DEBUG LocaleUtil.java@321:getUserLocaleId() : intLocale : 1
2010-09-27 20:14:00,431 [SAPEngine_Application_Thread[impl:3]_13] DEBUG LocaleUtil.java@321:getUserLocaleId() : intLocale : 1
2010-09-27 20:14:00,431 [SAPEngine_Application_Thread[impl:3]_13] DEBUG LocaleUtil.java@321:getUserLocaleId() : intLocale : 1
2010-09-27 20:14:00,431 [SAPEngine_Application_Thread[impl:3]_13] DEBUG LocaleUtil.java@321:getUserLocaleId() : intLocale : 1
2010-09-27 20:14:05,472 [SAPEngine_Application_Thread[impl:3]_18] DEBUG AEFrameworkServlet.java@521:logRequest() :
What is the problem guys???

Hi,
Your error message is too small to get information for troubleshooting!!
Please search the [SAP Service Market Place for SAP Notes|http://service.sap.com/notes] with a filter on Application Area field with GRC AC CUP (you can browse to select).
Regards,
Dipanjan

GRC AC 10.0: Info about rejected roles in the CUP Email

Hello all,
the GRC componetent CUP seems to be technically mature in comparison to Role Management component, but there is one thing where I am not sure, is it an error or did I miss some config parameters:
When the CUP Request ist closed, the user gets an email (Template ID: GRAC_AR_CLOSE). Not all of the roles were approved, some of the roles were rejected. But the user gets an email where only the approved roles are listed:
We would like to inform the user about the status of all roles in the CUP requests: which roles were approved and which roles were rejected. Is it possible to configure in MSMP Workflow?
Right now we have the following setting:
Thanks,
regards Sabrina

Hi Sabrina,
To notify the requester for the roles which got rejected, you can try with Email notification template: GRAC_MSMP_ERM_REJECTED for the for the message class.
You can create custom version of this template. For more understanding on how to customize the Email notification template, you can refer to: http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/605077fc-3577-2e10-e1a6-a743514d4eb3?QuickLink=index&…
Hope this helps, Let us know if you face any issues.
Regards,
Ameet

Configuring ERM workflow in CUP issue (GRC AC 5.3)

Hi once again fellow SAP Security Folk,
Using GRC AC CUP 5.3 SP 13 I am trying to configure ERM workflow for the following scenario :
Every role change made via ERM requires approval from relevant Business Process (BP) area. If the role change contains an SOD conflict of Medium or higher then approval is required from a 2nd central approver (basically regardless of the business process area).
I have not been able to configure ERM workflow within CUP to be able to do this u2013 I have only been able to configure it for dual approval, i.e. every change must have approval from both BP approver and Central approver before request can progress. I did this by assigning the Central approver to all Business Processes as an additional approver. This means that the conditions for the scenario above are met but the drawback is that all other requests also require approval from Central approver even though they donu2019t need to, generating additional workload.
Can anyone advise if this is possible and how to do it ?
Further info:-
I have setup in CUP an ERM Initiator, an ERM Custom Approver Determinator (CAD), an ERM Stage.
I have setup in ERM I have defined Business Process Approval Criteria for each Business Process approver.
I tried creating a 2nd ERM stage using a separate 2nd ERM CAD but this meant all changes required 2nd approval before request can continue.
I tried modifying the 1st Stage to Approval type All Approvers but this meant all changes required approval from all possible BP Approvers (instead of any one) before request can continue.
I tried creating a Detour/Fork but could only see within the Workflow Type selection criteria non ERM workflow types.
Thanks
Steve

You can either type in the configuration, like the what option you selected for approver (CAD or role or...etc), or other way is to capture the change log which shows what was the configuration for that stage....
(Configuration -< Change Log -> Search Change log)
Cheers !!
Zaheer

Query on Installation of GRC AC 5.3 RAR component

Hi,
We are implementing SAP GRC 5.3 - RAR Component. Can the tool needs to be implemented in the SAP Server itself or can it be installed in a different server other than SAP.
Can GRC tool be installed in a different server but falling under the same system landscape directory?
In future we are also planning to go for the other components of GRC like CUP, SUPM & ERM. In that scenario, does these components also needs to be installed in SAP Server itself.
Please suggest the SAP best practice of installation of SAP GRC 5.3
Request the experts to reply at the earliest.
Thanks and Best Regards,
Srihari.K

Hi Srihari,
I agree with Frank and you need to go to SAP Service Market Place and check out the Installation and Configuration guides for SAP GRC 5.3 at https://service.sap.com/instguides.
I also recommend to go through these articles published on SDN.
https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/408bd039-d9c1-2a10-0fab-a92b97c7cd25
https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/a07b4cc8-1a57-2b10-1798-d2fec068473a
Hope this helps as a good starting point for learning about SAP GRC Installation reqs.
Regards,
Kiran Kandepalli.

GRC AC CUP 5.3

Similar Messages

Maybe you are looking for