GRC AC User Search Data Source Configuration

Hello all!
I´ve configured BRM and ARM as recommended on SAP Access Control 10.0. A lot of things are working ok and some of them not. At this moment I´m testing an Access Request to lock a user, the problem happens when I try to search the user, I didn´t receive any return. Please check the print screen:
"Maintain Data Sources Configuration" is configured as the print bellow pointing to our ECC/HR system:
Someone can help?
Regards,
SAP Legend

HI,
Also maintain detail data source and make sure you run repository sync job..
Also check if the user you are trying to lock is present in the table GRACUSER/GRACUSERCONN.
Regards,
Neeraj

Similar Messages

GRC AC - HCM as user search data source

Hello all,
I´ve configured GRC AC to user HCM as user search data source and also user details data source. During my user change tests through the "Access Request" function, I noticed that only existent users at SU01 and HCM (checked through PA30) appear in the access request User Selection. Existent users at HCM but not at SU01 doesn´t appear.
Someone can tell me why? I mean, if I configured the user search to use HCM as data source, shoudn´t it bring all HCM users regardless of his existence at SU01?
Thanks in advance,
Pedro

Hi Pedro,
You only have confirmed that 2 accounts are maintained in HCM and in SU01 as well, so you would be able to see these accounts' details both ways.
Yes, you are right about user account maintenance first in HCM at the time of new hire, then you can manually raise the access request to grant them access to various SAP systems. Or in order to automate this process as Prasahant suggested, you can take help from HR Triggers.
You can refer: GRC 10.0 - HR Trigger configuration - Governance, Risk and Compliance - SCN Wiki
But responding to your original discussion, whatever user accounts are maintained in HCM you would see those details provided you define HR for the "user search data source" AND from SU01 for "user detail data source"
In your case you have 2 accounts which have been maintained in HCM as well as SU01, so that is what creating confusion for you.
Let us know if you need any more clarifications.
Regards,
Ameet

GRC 10 - Legacy connector as user detail data source

Hello,
I'm trying to use a legacy connector (with a text file as input) as a user data-source.
Repository user sync for this legacy connector works : checked GRACUSER table, it is populated with all the user details from the input file (id,firstname,lastname,mail,department,phone
I got it working for user search data source : when creating an access request for "other" user, searching for a user ID/name works : data are displayed in search result, however when I select the user from the serach result the user details are not populated in an access-request form.
Any clue about this ? Any one already got this working ?
GRC 10.0 SP13.
Checked SP14 and SP15 release notes, and found no relevant notes yet.
repository-related notes applied :
-1864423
-1950231
Regards,
Emmanuel.

Hi Pedro,
You only have confirmed that 2 accounts are maintained in HCM and in SU01 as well, so you would be able to see these accounts' details both ways.
Yes, you are right about user account maintenance first in HCM at the time of new hire, then you can manually raise the access request to grant them access to various SAP systems. Or in order to automate this process as Prasahant suggested, you can take help from HR Triggers.
You can refer: GRC 10.0 - HR Trigger configuration - Governance, Risk and Compliance - SCN Wiki
But responding to your original discussion, whatever user accounts are maintained in HCM you would see those details provided you define HR for the "user search data source" AND from SU01 for "user detail data source"
In your case you have 2 accounts which have been maintained in HCM as well as SU01, so that is what creating confusion for you.
Let us know if you need any more clarifications.
Regards,
Ameet

User Details Data Source

Hello all,
I´m working to configure the user search data source and also user details data source from our GRC AC environment. Bellow my doubt:
Can I configure GRC AC to automatically fill the Manager field in the access request screen? Obviously the User Details Data Source must be configured. Is it possible using SU01? HR? LDAP? All of them? Some examples would be really appreciated.
In other words:
When an Access Request is made, I want all User Details filled automatically, including the Manager.
Regards,
SAP Legend

Hi,
Yes you can configure the manager look up functionality by configuring the detail data source in the IMG and make sure you do all the configurations respective to what data source you are using.
If you are using LDAP then make sure you have done the mapping for your AC field name and target system field name and all the LDAP related configurations.
If you are using HR system as the data source please check the below link.
Configure Manager Look-Up in ARM for GRC 10
Regards,
Neeraj

User Details Data Source in CUP 5.3

Dear GRC Gurus,
Iam configuring CUP 5.3., in the User data source (which is used to fetch users,approvers,managers from backend) there is User Details Data Source -> i select SAP and i get the system name -> There is a Field Function Template -> there are two options, standard and Custom.
What is the use of Function Template ?
What is standard and Custom?
If we select Custom, what should we enter in Function Template Name?
Can you please clarify
Thanks a lot...
Regards
Selva

Hi,
The user data source only reads the user details for use in defaulting the information into request forms / workflow.
I believe that the function template just tells the system whether to use standard fields within the SAP user master or whether you have requirements to use alternative field mappings.
I don't think that the custom template name matters as it is identified.
I must admit that I haven't used it so I may be wrong but that is my current understanding!
Regards, Simon
Edited by: Simon P Persin on Oct 26, 2009 4:40 PM

Lync monitoring Details reports are not getting opened, Getting SQL error like "Cannot impersonate user for data source 'CDRDB"

Hi,
Two month before, We have deployed Lync 13 set up with lync monitoring and archiving service enabled. After configuring we have the Lync monitoring and archiving services are working fine... few weeks back I have changed the Admin Password
of the Lync Setup. After that Lync Monitoring and Archiving services are not working.
when I try open Lync monitoring service from web UI,
http://localhost/ReportServer_LyncMonitoring/
Web UI is opening but Reports home page is not Accessible , Getting error Like
"An error has occurred during report processing. (rsProcessingAborted)
Cannot impersonate user for data source 'CDRDB'. (rsErrorImpersonatingUser)
Log on failed. Ensure the user name and password are correct. (rsLogonFailed)
The user name or password is incorrect"
Please help me to trouble shoot this problem.
Thanks,
Rajarajan.D

Hi Rajarajan.D
You probably need to update the password against the CDRDB datasource in SSRS Report manager, take a look at this article: http://lyncme.co.uk/microsoft-lync-server-2013/cannot-impersonate-user-for-data-source-cdrdb-rserrorimpersonatinguser-error/
If this helped you please click "Vote As Helpful" if it answered your question please click "Mark As Answer"
Georg Thomas | Lync MVP
Blog www.lynced.com.au | Twitter
@georgathomas
Lync Edge Port Check (Beta)
This forum post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

Vb 2010 data source configuration wizard and sql server 2012

I am having a problem using the Data Source Configuration Wizard in vb 2010 express to connect to a remote SQL server database. The weird thing is that I can connect to it just fine if I manually dimension the sqlcommand, sqlconnection and set up the sql
connectionstring. So I know the connectivity is possible, but I would like to use the functionality of the Data Source Configuration Wizard.
Here's what happens when I attempt to add a connection via the Database Explorer:
I only get two SQL Server options. Neither will let me connect to a remote database.
I know that Microsoft SQL Server Compact 3.5 isn't what I want, but I have tried it anyway. It will only let me connect to a database on my computer. An 'ActiveSync' option is greyed out.
Microsoft SQL Server Database File would appear to be what I want, but when I select this option, it informs me (as you can see) that this will only work for a local database:
The connection string that I build manually (and which works) looks like this:
Dim
myConn
As
NewSqlConnection(sConnect)
sConnect =
""Data Source=xxxxxx.xxxxxx.com;Server=""Xxxx XXX Database"";Initial Catalog=StockAnalysisProd;User
ID=cadietz;Password = "& sPW &
I have attempted all variation of this string in the database file name input box to no avail. I think it really should go in as a Data Source but those are hard wired and cannot be changed. I'm sure I'm doing something stupid, but I need someone
to point out what it is. Thanks in advance for your help...
Alex3764

Alberto... thanks for your reply.
Unfortunately this does not appear to work. I downloaded Visual Studio Express for the Web (2012) and attempted the 'work around' proposed by Sergey and I could not make it work on the remote server. I have given up on the Data Connection Wizard and
am simply connecting to my remote SQL server using the manual classes (SqlConnection, SqlCommand, SqlDataAdapter, etc.). The moderator has marked this as an answer but I'm going to unmark it.
I am now even more frustrated because I now find that I cannot connect to my LOCAL SQL database using the Data Connection Wizard and the circumstances are even weirder. Here's what happens:
I open the Add Connection window, select 'Microsoft SQL Server Database File (SqlClient)' as the data source.
I then browse to my local database file in the Database file name input box. When I click the 'Test Connection' button I get a message box that informs me: 'Test connection
succeeded'. Voila!
But, alas, when I close the message box and click OK on the Add Connection window I get this message: 'The ability to open this connection is not supported in this edition of Visual Studio'.
I mean this borders on the absurd. Why is the Data Connection Wizard even offered with VB 2010 Express if you can't use it for anything. Once again I can get around the problem manually but I'm getting very frustrated with MS. Any suggestions??
Alex3764

Cannot impersonate user for data source 'SMSDB'. --- Microsoft.ReportingServices.Diagnostics.Utilities.LogonFailedException: Log on failed. ---

After Upgrading from SCCM 2012 Sp1 to SCCM 2012 R2 we are getting following error:
System.Web.Services.Protocols.SoapException: An error has occurred during report processing. ---> Microsoft.ReportingServices.ReportProcessing.ProcessingAbortedException: An error has occurred during report processing. ---> Microsoft.ReportingServices.ReportProcessing.ReportProcessingException:
Cannot impersonate user for data source 'SMSDB'. ---> Microsoft.ReportingServices.Diagnostics.Utilities.LogonFailedException: Log on failed. ---> System.Runtime.InteraopServices.COMException: The referenced account is currently locked out and may not
be logged on to. (Exception from HRESULT: 0x80070775)
   at Microsoft.ReportingServices.WebServer.ReportingService2005Impl.GetReportParameters(String Report, String HistoryID, Boolean ForRendering, ParameterValue[] Values, DataSourceCredentials[] Credentials, ReportParameter[]& Parameters)
   at Microsoft.ReportingServices.WebServer.ReportingService2005.GetReportParameters(String Report, String HistoryID, Boolean ForRendering, ParameterValue[] Values, DataSourceCredentials[] Credentials, ReportParameter[]& Parameters)
Microsoft.ConfigurationManagement.ManagementProvider.SmsException
An error has occurred during report processing.
Stack Trace:
   at Microsoft.ConfigurationManagement.AdminConsole.SrsReporting.ParameterPresenter.GetParameters()
   at Microsoft.ConfigurationManagement.AdminConsole.SrsReporting.ParameterPresenter.LoadParameters(IReport report, Collection`1 navigationParameters, IResultObject resultObject)
   at Microsoft.ConfigurationManagement.AdminConsole.SrsReporting.ReportViewerPresenter.Worker_DoWork(Object sender, DoWorkEventArgs e)
   at System.ComponentModel.BackgroundWorker.OnDoWork(DoWorkEventArgs e)
   at System.ComponentModel.BackgroundWorker.WorkerThreadStart(Object argument)
System.Web.Services.Protocols.SoapException
System.Web.Services.Protocols.SoapException: An error has occurred during report processing. ---> Microsoft.ReportingServices.ReportProcessing.ProcessingAbortedException: An error has occurred during report processing. ---> Microsoft.ReportingServices.ReportProcessing.ReportProcessingException:
Cannot impersonate user for data source 'SMSDB'. ---> Microsoft.ReportingServices.Diagnostics.Utilities.LogonFailedException: Log on failed. ---> System.Runtime.InteropServices.COMException: The referenced account is currently locked out and may not
be logged on to. (Exception from HRESULT: 0x80070775)
   at Microsoft.ReportingServices.WebServer.ReportingService2005Impl.GetReportParameters(String Report, String HistoryID, Boolean ForRendering, ParameterValue[] Values, DataSourceCredentials[] Credentials, ReportParameter[]& Parameters)
   at Microsoft.ReportingServices.WebServer.ReportingService2005.GetReportParameters(String Report, String HistoryID, Boolean ForRendering, ParameterValue[] Values, DataSourceCredentials[] Credentials, ReportParameter[]& Parameters)
Stack Trace:
   at Microsoft.ConfigurationManagement.AdminConsole.SrsReporting.ParameterPresenter.GetParameters()
   at Microsoft.ConfigurationManagement.AdminConsole.SrsReporting.ParameterPresenter.LoadParameters(IReport report, Collection`1 navigationParameters, IResultObject resultObject)
   at Microsoft.ConfigurationManagement.AdminConsole.SrsReporting.ReportViewerPresenter.Worker_DoWork(Object sender, DoWorkEventArgs e)
   at System.ComponentModel.BackgroundWorker.OnDoWork(DoWorkEventArgs e)
   at System.ComponentModel.BackgroundWorker.WorkerThreadStart(Object argument)

HI,
Check the SQL Reporting services account that is used, the one that you supplied when setting up the SQL Reporting Services point in the Configuration Manager 2012 console, it seems to be locked out.
I believe it has been asked once before on the forums as well.
Regards,
Jörgen
-- My System Center blog ccmexec.com -- Twitter
@ccmexec

Hyperion Planning Data Source Configuration Error

Hi,
I'm trying to configure Planning. I'm at the last step of the configuration utility, and trying to configure "Data Source Configuration" for Planning.
When I try to do it, I Create the Datasource, I give the Datasource name, and I select the database (which Oracle), and it throws me the error at the step Relational Storage Configuration Details:
com.hyperion.planning.HspDSRdbPanelManager, ERROR, Relational Database Connection Failed:= :[Hyperion][Oracle JDBC Driver][Oracle]ORA-12505 Connection refused, the specified SID (******) was not recognized by the Oracle server.
I'm sure that I'm entering the correct database details. But still not able to understan why it is not accepting it.
I'm picking up the SID from the TNSNAMES.ora correctly. I'm able to login to the Db via sqlplus with the same username,pwd and SID. Also able to connect to the Db via TOAD using the same credentials.
But not able to configure the Planning!!!
Kindly help.
Thanks.

Which version of planning are you referring to, what OS has it been installed on.
Does your tnsnames ora have different names in the configuration
net_service_name=
(DESCRIPTION=
(ADDRESS=(protocol_address_information))
(CONNECT_DATA=
(SERVICE_NAME=service_name)))
Is the net_service_name the same as the service_name, if they are different have you tried both of them?
Cheers
John
http://john-goodwin.blogspot.com/

ADF application deployment and Data source configuration

Hi, we are developing an adf application . This app accessing the tables from a data base and i can run it in the integrated WLS of Jdeveloper. Now i would like to run it in a standalone WLS server. I can create a Data source in the server.
How can i tell the application to use the data source configured in the stand alone server. My understating is i have to configure it in the deployment descriptor. May i know how to this in Jdeveloper for an ADF application . Thanks .
ganesh

First of all make sure that you use jdbc data source in your application module configuration (right click on the application module and select Configurations, then edit). It should look something like 'java:comp/env/jdbc/hrDS'.
On your stand alone server you create a data source with the jdbc name of 'jdbc/hrDS' pointing to the db you like to use.
When you deploy the app, the server should pick up the defined data source.
Timo

Got rid of User Profiles data source in 2013?

We're trying to put together an approval workflow using 2013, but it seems like they got rid of the "User Profiles" data source, so you cant simply select the Manager of the current user. I wanted to add that manager to the Participants of a Task
process, but I kind of hit a brick wall with that.
Is the process overall different in how I would talk to the active directory through the workflow? Or should I just stick to 2010 workflow?

Correct, it is no longer there. You're going to have to use the user profile web service. See here:
http://sharepointrocks.wordpress.com/2013/08/22/sharepoint-2013-using-infopath-and-userprofileservice-asmx-with-claims-based-web-applications/
Andy Wessendorf SharePoint Developer II | Rackspace [email protected]

CUIC data sources configuration

I have a question. Can UCCX 9 CUIC be made to make a connection to a legacy UCCX.8.5 server via the data sources configuration page? I have included a screenshot of the config tab.

Hi,
Awb database? Have you configured EPMA? Sounds like your config may not be correct.
If you have installed EPMA make sure it is correctly configured.
Seb

Problem in configuring Hyperion Planning Data Source configuration.

* I have configured all the components of Hyperion Planning except Data Source Configuration. The problem is when i provide server name, username and password when the system prompts to enter the essbase server information, the system gets hang and does not respond. I am stuck in this step (data source configuration) and cannot move forward.*
Please help me out???

make sure given credentials are correct are not.

Where is the data source configuration in Jdev 11g?

Does anybody know where is the data source configuration in JDeveloper 11g? I want to create a JNDI data source using the database connection. Do I have to login the Integrated WLS to create the data source? Thanks.

Hi Chris,
Configuring the data source in Integrated WLS works for me. Thanks for your help!
Looks 11g didn't create the data source automatically in the App Navigator. I checked the deployed application directory - "Application Data\JDeveloper\system11.1.1.2.36.55.36\o.j2ee\drs\TestDS\adf\META-INF" and "Application Data\JDeveloper\system11.1.1.2.36.55.36\o.j2ee\drs\TestDS\META-INF". I didn't find the data source file - data-sources.xml. Then I started the web application and checked the Context, I can only find the data source which I defined in the Integrated WLS. It is interesting that 11g removed the JNDI list from the RMI bindings.
Also thanks to Nick for the information. We are migrating a Spring Framework application to Oracle and don't use ADF Business Components in this project.
Huaichen

Where is the UME data source configuration XML file stored on the server?

I'm trying to activate windows integrated authentication in my portal server. The java engine's UME configuration has been loaded as a deep AD read only database using the file "dataSourceConfiguration_ads_deep_readonly_db.xml" but I can't find this on my server. I need to modify a couple of parameters in there to activate kerberos principal management. My recent portal training course offered me a completed working example but it was for an ads_flat_writeable_db so I can't simply load that and I need to understand the changes required.
Where to I find the configuration file on my java instance server so I can make the necessary changes to a copy and upload that?

Try to read
https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/e1959b90-0201-0010-849c-d2b1d574768b
UME user data is stored in one or more data sources. Each type of data source has its own persistence adapter. The persistence manager consults the persistence adapters when creating, reading, writing, and searching user management data. Persistence adapters for the following types of repositories are available: 1. Database: See the Product Availability Matrix on SAP Service Marketplace (http://service.sap.com/pam60) for details on which databases are supported. 2. u2022 Lightweight Directory Access Protocol (LDAP) directory: See the Product Availability Matrix on SAP Service Marketplace (http://service.sap.com/pam60) for details on which directories are supported. 3. SAP Systems based on Web Application Server 6.20 You can configure UME to use one or more of these persistence devices in parallel. Users can also be stored in several different physical LDAP directory servers, or in different branches of the same LDAP directory server.

GRC AC User Search Data Source Configuration

Similar Messages

Maybe you are looking for