GRC AC Emergency Access Management (EAM) and STAD report data

Dear Community,
we use EAM (ID based fire fighting) and the Log synchronization jobs are scheduled every half hour in order to get the fire fighter logs from the back-ends for review by the controller. Due to a technical issue the synchronization jobs are not working correctly over several days. We experienced missing session details (executed transactions, programs, changes, etc.) for many Fire fighter sessions. As one the source of of the fire fighter log is STAD on the back end and these data are only buffered 48 hours per default, I expect that I can't recover the logs and they are irreversible lost if GRC is down or the sync-jobs are not running for more that time. That can happen over a weekend....
I ask you:
can you confirm my expectation?
does it make sense to extend the STAD buffer up to e. g. 96 hours for all GRC production back ends?
have you controls in place to check if the sync-jobs are running and the logs are synchronized correct and complete?
I would appreciate, if you can share some thoughts with me about this.
Thanks in advance,
Andreas Langer

Hi Andreas,
- Please check the below note, for missed log entries
1934127 - GRC10 EAM: EAM recovery program to retrieve missing log and to generate the missing workflows
- The maximum value is 99, and it is the number of stat files that are generated. So, you can get records upto 4 days.
- Periodic Monitoring activity activity can be set, which is done manually. I am not aware if Process Control, can take care of this monitoring.
regards

Similar Messages

GRC AC 10: Emergency Access Management, Logon button is disabled (GRAC_SPM)

Hello Gurus,
I have configured Emergency Access Management in GRC AC 10.
GRC Box (SID) : GR1 client 100
Backend ERP system : D24 client 100
The FIREFIGHTER in GRC system : FFUSER1
Z_SAP_GRAC_SUPERUSER_MGMTUSER
Z_SAP_GRC_FN_BASE
Z_SAP_GRC_NWBC
In the Backend ERP system the FIREFIGHTER ID: ABC wants to access the FIREFIGHTER(FFUSER1)
Hence in NWBC (Setup >Superuser Assignment>Firefighter ID) the assignment is done.
ABC(FIREFIGHTER ID) <--->FFUSER1(FIREFIGHTER)
Now the User login the GRC system using FFUSER1 assigned following roles
Z_SAP_GRAC_SUPERUSER_MGMTUSER
Z_SAP_GRC_FN_BASE
Z_SAP_GRC_NWBC
Z_SAP_GRAC_SPM_FFID
and runs Transaction: GRAC_SPM
and he is able to see that ABC is assigned .
Now the user clicks on "Logon" and the status changes from green to "RED".
A new SAP screen opens asking credintials for Backend ERP system D24 client 100
The User enters his own Id : ABC and password and logs in.
Runs the necessary transactions and logs out using transaction: /nex
The session in GRC is still running and now the "LOGON button" is disabled , he comes out of that screen too.
When the user tries to login again using FFUSER1 to do more task , the "LOGON Button" is seen disabled.
and clicking the "unlock" button also doesn;t help.
When checked in SM04, no live session is reflected .
How can we "enable" the LOGON button in the transaction : GRAC_SPM for the same FIREFIGHTER (FFUSER1) assigned for Firefighter ID (ABC) ??
As it is now not possible to click "LOGON" button and the status is "RED".
Please let me know your opinion .
Thank You.
Regards,
Premjit

Thanks to All

Reason Codes not displaying when performing emergency access management(SPM

Hello guru,
I am experiencing a little problem when using superuser privilege management (emergency access) functionality in AC 10.0.
My problem is that the reason codes created in the AC system via the reason code link in the workcenter does not appear as drop down for me when I click on the logon button in the initial screen displayed in transaction SPM_GRAC.
Suffice to say that i do not have any reason code to pick from in the drop down for superuser privilege management in the AC system when i logon with the firefighter user to perform SPM.
Please help me out with your suggestions.
Thanks

Hello guru,
I am experiencing a little problem when using superuser privilege management (emergency access) functionality in AC 10.0.
My problem is that the reason codes created in the AC system via the reason code link in the workcenter does not appear as drop down for me when I click on the logon button in the initial screen displayed in transaction GRAC_SPM.
Suffice to say that i do not have any reason code to pick from in the drop down for superuser privilege management in the AC system when i logon with the firefighter user to perform SPM.
Please help me out with your suggestions.
Thanks

Bomgar's Priveledge Access Management (PAM) and how does it apply to you?

Bomgar is now marketing their new product, the Privilege Access Management (PAM). Honestly, I had never really thought about using Bomgar or any other software to manager remote access amongst our vendors and employees. We have used a mixture of VPN and Remote Desktop Gateway to handle it. However, watching Bomgar's pitch video on the subject (Here) prompted me to think about how I audit and regulate access. Right now, it is a mixture of Active Directory settings and local system configuration which seems highly inefficient when stacked up against Bomgar's PAM. This leads me to the question on whether this applies to you or not. Does this product seem like something you need or if you do not, why? What solutions do you have in place?
This topic first appeared in the Spiceworks Community

This is the original post, but the thread is continued in a duplicate.

Cannot access "Manage Family and Friends"

I recently upgraded my plan, and now qualify for the "Family and Friends" feature.
However, whenever I log in and then click "Manage Family and Friends", I am just
taken back to the login page. I login again, and the same thing happens.
How do I access the page that allows me to list my 5 "Family and Friends"?
Thanks!
Lesenz

How long ago is "recently"? Is the change effective NOW or at the beginning of your next billing cycle? You may need to call Customer service and have them add the numbers for you - at that point you might be able to access the feature.
Try clearing your browser cache, using a different browser entirely, or go to MyVerizon on your phone... Menu >> Settings and Tools >> My Verizon (though trying to access that this morning, I'm not having any luck getting it to come up...it errors out and says the page has no data! GRRRRR!)

Multiple data sets: a common global dataset and per/report data sets

Is there a way to have a common dataset included in an actual report data set?
Case:
For one project I have about 70 different letters, each letter being a report in Bi Publisher, each one of them having its own dataset(s).
However all of these letters share a common standardized reference block (e.g. the user, his email address, his phone number, etc), this common reference block comes from a common dataset.
The layout of the reference block is done by including a sub-llayout (rtf-file).
The SQL query for getting the dataset of the reference block is always the same, and, for now, is included in each of the 70 reports.
Ths makes maintenance of this reference block very hard, because each of the 70 reports must be adapted when changes to the reference block/dataset are made.
Is there a better way to handle this? Can I include a shared dataset that I would define and maintain only once, in each single report definition?

Hi,
The use of the subtemplate for the centrally managed layout, is ok.
However I would like to be able to do the same thing for the datasets in the reports:
one centrally managed data set (definition) for the common dataset, which is dynamic!, and in our case, a rather complex query
and
datasets defined on a per report basis
It would be nice if we could do a kind of 'include dataset from another report' when defining the datasets for a report.
Of course, this included dataset is executed within each individual report.
This possibility would make the maintenance of this one central query easier than when we have to maintain this query in each of the 70 reports over and over again.

UCCX 7.0.1SR5 to 8.0 upgrade while also adding LDAP integration for CUCM - what happens to agents and Historical Reporting data?

Current State:
•    I have a customer running CUCM 6.1 and UCCX 7.01SR5. Currently their CUCM is *NOT* LDAP integrated and using local accounts only. UCCX is AXL integrated to CUCM as usual and is pulling users from CUCM and using CUCM for login validation for CAD.
•    The local user accounts in CUCM currently match the naming format in active directory (John Smith in CUCM is jsmith and John Smith is jsmith in AD)
Goal:
•    Upgrade software versions and migrate to new hardware for UCCX
•    LDAP integrate the CUCM users
Desired Future State and Proposed Upgrade Method
Using the UCCX Pre Upgrade Tool (PUT), backup the current UCCX 7.01 server.
Then during a weekend maintenance window……
•    Upgrade the CUCM cluster from 6.1 to 8.0 in 2 step process
•    Integrate the CUCM cluster to corporate active directory (LDAP) - sync the same users that were present before, associate with physical phones, select the same ACD/UCCX line under the users settings as before
•    Then build UCCX 8.0 server on new hardware and stop at the initial setup stage
•    Restore the data from the UCCX PUT tool
•    Continue setup per documentation
At this point does UCCX see these agents as the same as they were before?
Is the historical reporting data the same with regards to agent John Smith (local CUCM user) from last week and agent John Smith (LDAP imported CUCM user) from this week ?
I have the feeling that UCCX will see the agents as different almost as if there is a unique identifier that's used in addition to the simple user name.
We can simplify this question along these lines
Starting at the beginning with CUCM 6.1 (local users) and UCCX 7.01. Let's say the customer decided to LDAP integrate the CUCM users and not upgrade any software.
If I follow the same steps with re-associating the users to devices and selecting the ACD/UCCX extension, what happens?
I would guess that UCCX would see all the users it knew about get deleted (making them inactive agents) and the see a whole group of new agents get created.
What would historical reporting show in this case? A set of old agents and a set of new agents treated differently?
Has anyone run into this before?
Is my goal possible while keeping the agent configuration and HR data as it was before?

I was doing some more research looking at the DB schema for UCCX 8.
Looking at the Resource table in UCCX, it looks like there is primary key that represents each user.
My question, is this key replicated from CUCM or created locally when the user is imported into UCCX?
How does UCCX determine if user account jsmith in CUCM, when it’s a local account, is different than user account jsmith in CUCM that is LDAP imported?
Would it be possible (with TAC's help most likely) to edit this field back to the previous values so that AQM and historical reporting would think the user accounts are the same?
Database table name: Resource
The Unified CCX system creates a new record in the Resource table when the Unified CCX system retrieves agent information from the Unified CM.
A Resource record contains information about the resource (agent). One such record exists for each active and inactive resource. When a resource is deleted, the old record is flagged as inactive; when a resource is updated, a new record is created and the old one is flagged as inactive.

Project report and frozen report data - CJEB

I would like to build frozen report data based on different selection variants as our data volume is too important that we can do it once. Now I get the problem that the last job will delete the saved date. Actually, we have created for each selection variant one report, using the same form but ideally we would like to use only one report with dedicated selection variants and extracts. Is there a possibility to save several results at the same time?
thanks a lot
Harald

several results in same time will not be possible.

Simple MSMP workflow for Emergency Access Management

Hi,
I am not able to get the EAM to work in Access Control 10. The user is able to successfully place a access request for FFid but there is a error in the workflow logs. I have not done any customization of the MSMP for GRAC_DEFAULT_PATH and other similar stages, as I am not aware of the the specific values that need to be maintained.
I want to avoid customizing as much as possible and use what SAP offers by default. The workflow steps I am looking for is : user places a request for FFid and the request is received by the FFid Owner (Manager) and approved by him, Once approved, the FFID is provisioned automatically and the user can login to tcode GRAC_SPM and use his FFid, and the Controller gets alerted about the log.

Hi Veera,
Did you define a condition in your initiator decision table in BRF+ to route your EAM requests to firefighter path.
Do you have stage called FF Owner?
Did you create a Firefighter path in MSMP configuration with FF Owner stage in it?
Did you maintained route mapping in your MSMP workflow configuration?
Please share your BRF+ initiator decision table and MSMP workflow config screenshots to help you further.
If you are new to MSMP and BRF+ config, please check this link for understanding the concept.
MSMP - Multi Step Multi Process &#8211; GRC&#82... | SCN
Regards,
Madhu.

VZ Access manager update and VPN

usb551l and Cisco VPN client
the update appears to have affected our Cisco VPN client. The client connects but doesn't pass any traffic. The only difference I can see is the new VZAM has an IPv6 address. I unchecked it from network properties but that didn't help. Anyone experiencing this ?

I think that's a Verizon Wireless application? http://www.vzam.net/ That page indicates that it works with Windows 7...
For a list of FiOS stuff that is or isn't compatible with Windows 7, check out http://www.verizon.com/windows7support

Emergency Access Management & SPM 5.3 - add default text!

Hi, is there a way to initialize the text fields, which pop up when you logon as a firefighter, with default values (such as Enter Ticket Number here: #)?
Would be interesting for 5.3 as well as 10.0.
Thank you

HI Andreas,
There is no such possibility, You can only configure the reason codes, but I dont think there is any way to configure predfeined texts as such, since this is ABAP, you might find a user exit that might allow you to write your own custom code. I have never explored the option.
Regards,
Chinmaya

I made my Apple ID questions when I was in 5th grade, and I can not remember them, my emergency email was deleted, and my birth date wont work, I am freaking out! How do I get my ID questions?

I wrote my apple ID questions in 5th grade, and am in 9th now, so I can notremember them. my emergency email with the info was deleted, so I can not change them, and for some reason, my birht date will not go through, so I must have put the wrong thing in 5th grade, and I am freaking out! What do I do?

You need to ask Apple to reset your security questions. To do this, click here and pick a method; if that page doesn't list one for your country or you're unable to call, fill out and submit this form.
(119011)

Java, access database( mdb) and java.sql.date

I having a problem querying my access database with user specified date the code is as follows
//get results of income from database with respectto dates
     //so u first create the sql.date instances
     private void getResults(){
     String text1=from.getText();//text input is like this 01-01-2005
          String text2=to.getText();
     Date d1=new Date(Integer.parseInt(text1.substring(6)),Integer.parseInt(text1.substring(3,5)),Integer.parseInt(text1.substring(0,2)));
     JOptionPane.showMessageDialog(this,d1.toString());//traces date with 1900 added to year and 1 added to month
     try{
          //custom class DataSource used to connect to database
          Connection conn=DataSource.getConnection("RealFotoInc");
          PreparedStatement ps=conn.prepareStatement("select * from Members where date=?");
          ps.setDate(1,d1);
          ResultSet rs=ps.executeQuery();
          while(rs.next()){
               System.out.println("going");
               System.out.println("trial"+rs.getString(3));
     }catch(Exception se){
          JOptionPane.showMessageDialog(this,se);
     }and it prints out nothing I dont know what is wrong

Whoever put that comment in there about "1900" and so on knew what had to be done. That "Date" class must be "java.sql.Date"; go and read the API documentation of that constructor you are using there. Then adjust the parameters you are passing to it accordingly.

XCelsius and Crystal Report data connectivity

Hello,
I have an Excelsius SWF-file and a Crystal Report in which I want to show the SWF. The data of the SWF should depend on a cross table in Crystal Report (event type/month. I tried but have several difficulties:
1. there are different counts of event types in the different customer databases so I can not assign a fix data area in XCelsius
2. I have sorted the columns in the cross table in CR according to the number of the month, but the name of the month is showing. When I choose the option "use an existing cross table" the SWF in the design form only shows the numbers and not the names like in the cross table of CR
3. in the preview no SWF is shown
4. how to bind cross table(s) AND single values to CR
Can anybody help or can suggest an exact documentation of the connection of the both programms with an example?
Thanks in advance for help.
Monika Anna

Hi Ingo,
Yes, I understand what you 're saying:
"for distributing report objects with a larger audience you need a BusinessObjects server environment - either BusinessObjects Edge or BusinessObjects Enterprise."
What I dont understand is WHY we need to have BusinessObject Enterprise to distribute the crystal report so that my user can access the crystal report?
The reason why I am confused because earlier on, you mentioned we (BW users) can call the URL and access crystal report is saved in the BW Role.
Since my BW users can access crystal report directly from BW, WHY do we still need BusinessObject Enterprise?
Please advise, thank you.

How do I reset responses (and summary report data) and use my online form for a new application?

I created my online form, distributed it and captured the responses - worked well. Now I want to use the same form and start over (track the responses separately from the first time). How do I reset the results / responses? Thanks for any help you provide.

Go to the My Forms tab on the main dashboard (were all of your forms are listed). Select your form and hit the duplicate button. This will make a copy of your form and you have the option to include or not include the responses in the copy.
Randy

GRC AC Emergency Access Management (EAM) and STAD report data

Similar Messages

Maybe you are looking for