GRC-AC v5.3 SP11, Patch 1: CUP E-Mail Log available?
Hi!
Does anyone know if there is a CUP E-Mail log available that lists all e-mails generated from CUP?
Thanks,
-john
Have a look at the table virsa_ae_emllog.
Frank.
Similar Messages
-
Error after implementing SP11 Patch 5 for 7.5 MS
After implementing SP11 Patch 5 for BPC 7.5 the SPRunConversion function (which worked find under SP07) no longer works. Every time that the function runs an error FX-160 is generated indicating that there is No Entity selected.
I have modified all of the applications, optimized all of the applications, and reprocessed all of the rate related dimension files.
Has anyone else run into this issue with the stored procedure after upgrading to patch 5 on SP11?Hey Experts,
other templates working fine (personell admin. personell time, organizational management, travelmngt.)!
The templates running in the 3.5 BW....but since the update of our testsystem the e-recruiting templates give back these errors.
We dont wanna initialize the migration of templates and other objects to 7.0 now. Maybe in a few months.
Could it be that several (in my case the e-Recruiting Templates/Queries) 3.5 objects never be running without migration?
Thx for your answers!!!
kind regards,
moriz -
CUP: Notification Mail after Role Approval
Dear SAP Experts
We are running GRC AC 5.3 SP11.2 and facing a problem with the CUP workflow behavior.
Each time we change a existing user in the system and assign him at least two new roles with diffrent role owners, we get some problems at the role owner approval stage.
As soon as the first role owner provides his role approval a message is sent out to the requestor, manager and user that all changes to the user profile are done. This behavior repeats for each role owner which has to provide a approval to that request. The roles it self are assigned to the user account when the last role owner approved the request.
Under AC 5.2 we had only one mail beeing sent out to the requestor, manager and user when all roles were approved.
The role owner stage has following settings:
Approval Type --> All Approvers
Do we have to customize some more settings as well?
Many thanks for your help JeffreyHi Frank
Following settings are implemented at the role owner stage (last stage before auto provisioning):
Notification Configuration:
Approved --> User / Requestor / Manager
Rejected --> Requestor / Manager
Different text for mails are maintained
Additional Configuration
Risk Analysis Mandatory -> No
Change Request Content --> Yes
Add Role --> No
Path Revaluation for New Roles --> All Roles in Evaluation Path
Approval Level --> Role
Rejection Level --> Role
Approval Type --> All Approvers
E-mail Group --> BLank
Comments Mandatory --> Yes / Rejected
Request Rejection --> No
Reroute --> No
Confirm Approval --> No
Confirm Rejection --> No
Reject by E-mail --> No
Approve by E-mail --> No
Forward Allowed --> No
Approve Request Despite Risks -> Yes
Display Review Screen--> Yes
Additional Security Configuration (Approval Reaffirm)
Approve --> No
Reject --> No
Create User --> No
Under AC 5.2 we used the Notification Configuration / Approved Mail to inform the defined persons that the request is approved and provisioning is done. This mail has been sent out only once to the persons after all role owners worked on the request. Obviously AC 5.3 behaves different after we have done the migration:-))
Jeffrey -
GRC AC 10 EAM - Is it possible to send FF logs to controller in an email as attachment ?
Hello,
I am new to GRC AC 10 and wanted to check if In GRC AC 10 it is possible to send the Firefighter logs to Controller in an email as an attachment like we were doing in 5.3 or the controller has to login to GRC (via link in the email or direct login to GRC) to view ?
MarkHello Colleen,
Thanks for your reply.
I am using most of these parameters for my FF set up and it is working as expected however I am not able to get the logs in an email as an attachment like we used to get in AC 5.3 .
In NWBC as well we have 3 options for controller-
Email - Controller receives the email with link to GRC action logs - No "Submit " button to approve
Workflow - Controller receives the email with link to GRC action logs - Gets "Submit" button to approve
Log Display - No email , Need to manually generate the logs.
Do you know specific parameter settings or any other way to achieve this.
Regards
Ritu Rawat -
OWB Patch 10.1.0.4 is available in Metalink
Hi,
Patch 10.1.0.4 is available in Metalink.
Cheers
DetlefThe patch number is 4703215, a hefty 528M (for Windows).
From the documentation:
7.2 Bugs Fixed in 10.1.0.4
4110189 NO COMMIT BACKPORTING TO 10.1.0.X (BOMBAY)
3994801 OMB PLUS PL/SQL SCRIPT CONTAINS MORE AS 2499 CHARACTERS / SP2-0027
4350443 ''NO OCIJDBC10 IN JAVA.LIBRARY.PATH'' ERROR WHEN STARTING RAB IN LINUX
4187143 DWPRD: OWB - CANNOT START IT AFTER ORACLE_HOME CHANGE FOR DATABASE
4633954 BACKPORT BUG 3286037 FIX TO 10.1.0.4 VERSION ON SOLARIS 32 BIT PLATFORM
4609436 BLR BACKPORT OF BUG 3870981 ON TOP OF VERSION 10.1.0.3
3820028 VERY SLOW GENERATION OF PROCESS FLOW PACKAGE WITH 150+ PROCESS FLOWS
3882583 PROBLEM WITH EXTERNAL TABLE
4088890 RPE-02083 WHEN PURGING AUDIT INFORMATION WHILE WORKFLOW PROCESS IS RUNNING
4183568 UPGRADE DEPLOYMENT MGR SCRIPT DOES NOT INCLUDE THE TBS NAME
4373822 SLOW LOGON & NAVIGATION OF LARGE REPOSITORY DUE TO SQL FTS
4428430 RECOVERY SHOULD BE OPTIONAL
3997600 UNABLE TO SET DEPLOYABLE PROPETY OF FOREIGN KEY OF CUBE WITH OMBPLUS
3994878 RUNTIME AUDIT BROWSER PERFORMANCE
4425752 IMPORTING THE MDL FILE GETTING THE ERROR API0407 AT 10%
4393188 FORWARD PORT 4183568
4393182 FORWARD PORT 4106056 TO 10.1.0.4
4144163 PROCESS FLOW PACKAGE VALIDATION HANGS IN OWB 10G
4340763 RUNTIME SERVICE LOG FILE CANNOT BE DELETED WHEN SERVICE IS RUNNING
4106056 PARALLEL EXECUTION OF PROCESS FLOWS FAILS WITH RPE-01003
3836845 UNABLE TO DEPLOY PUBLIC TRANSFORMATION
3829240 DBG1034 AND ORA-00904 WHEN DEBUGGING MAPPING WITH MS-SQLSERVER SOURCE
3773182 OBJECT STATUS UNCERTAIN AFTER SUCCESFULL DEPLOYMENT
4551773 FORWARD PORT OF BUG 3997600
4488992 [7/11]ERROR API8532 VALIDATING EXPRESSION API-8532
4542250 OLAP BRIDGE FAILING ON 10G WITH BRD-02501
4537766 OWB10G BOMBAY DOES NOT INSTALL ON 10G RELEASE 2 DATABASE
4497246 ORA-06502: PL/SQL: NUMERIC OR VALUE ERROR: CHARACTER STRING BUFFER TOO SMALL
4407615 EXPLICIT GARBAGE COLLECTION CAN CAUSE PERFORMANCE PROBLEMS
3165476 UNABLE TO USE DATES BEFORE 1-1-1950; IMPLICIT CONVERSION
4159683 OWB DOES NOT IMPORT SQL QUERY WHILE IMPORTING VIEW DEFINITIONS
3952986 UPGRADING MULTIPLE TABLES FROM UI GIVES DEPLOYMENT FAILURE AS RETURN
3989847 GENERATED CODE HAS INVALID ALIASES AFTER UPGRADE FROM 9.0.3 TO 9.2.0.4
4232118 WBSECURITYSERVICEIMPL SECURITY HOLE
4212170 MAPPING GENERATES INCORRECT TARGET CODE/DATA WHEN SPLITTER INCLUDED
4308848 SLOW PERFORMANCES WHILE LOGIN TO DESIGN REPOSITORY
4311885 PROCESSFLOW FAILS; ORA-20002 3133 ACTIVITY INSTANCE X IS NOT A NOTIFIED ACTIVITY
4543947 UPGRADE OPTION DURING DEPLOYING DIMENSIONS/CUBES IS NOT WORKING CORRECTLY
3872199 JAVA.LANG.NULLPOINTEREXCEPTION WHEN CREATING MODULE WITH LOCAL SET TO TURKISH
4530332 REPOSITORY ASSISTANTS HANG ON STARTUP ON WINDOWS 2000 SP4 - PENTIUM IV XEON
4397564 EXECUTION DELAY WHEN EXECUTING ACTIVITIES DURING HIGH CONCURRENCY
4644829 PURGE TEMPLATE AND SUPPORTING PACKAGES NOT CONSISTENT
4120422 AFTER APPLING SECURITY PATCHSET 68 (3875927), PROCESS FLOWS NO LONGER FUNCTION
4078382 INSTALLING OWB 10G RUNTIME REPO ON AIX 5.2 WITH 8.1.7.4 RDBMS IS NOT POSSIBLE
4260822 ALL_IV_OBJECT_PROPERTIES VIEW NOT SHOWING VALUES
3943759 OMBEXPORT FAILS WITH: TOO MANY NESTED CALLS TO EVAL (INFINITE LOOP?)
3150520 NLS: MONTH DISPLAY AS UPSIDE DOWN OF ? FOR CHINESE CHINA
3826870 MDL FROM OWB 9.0.3 WILL NOT IMPORT
4169687 ENH: REQUEST FOR OPTION TO DISABLE AUDITING COMPLETELY
4402849 NO_ROWS ERROR DURING EXECUTION ON RAC
4213253 PUBLIC VIEWS UNAVAILABLE: ALL_IV_IMPACT_DEPENDENTS AND ALL_IV_LINEAGE_DEPENDENTS -
GRC-AC v5.3 SP11 CUP Role Import format issues
Hi All!
Version: GRC-SAC-SAE 5.3_11.0 ( Build ID:05020110 )
Has anyone installed SP11 and found that the CUP Role Export format and Import format no longer match....by a long shot. Also, even you conform your export file with changes to the restrictive import file format, it still does not make any changes.
Has anyone seen this issue? Has anyone resolved this issue?
Much thanks!
John StephensAlpesh,
SP11 is only in our development system and you cannot look into certain functionality before you get in installed, except to look over current SAP Notes, SAP SP Release Notes and SAP SDN Forum posts for any current issues.
We are moving from SP8.1 to SP11 since it will solve 12 open SAP Msgs for our SAP GRC-AC system. It has solved 90% of those and has been performing well in tests so far.
We have sent this issue to SAP Support and it is a new issue that has not been reported before.
-john -
Roles in GRC ERM 5.3 (SP11)
Hello Gurus
We have a couple of dude about to import the Roles to ERM.
Our systems: GRC AC 5.3 (last SP) & SAP R/3 4.7 (SP53):
1) We have around of 450 Roles in BackEnd R/3. All they roles exisiting must being fed in the file downloaded of /VIRSA/RE_DNLDROLES??
2)We to use trx PFCG for maintain the Roles in the Company. Each week we to modify the roles for user's request and pure market's strategy. Those roles modified also must uploaded or updated in ERM?
Thanks for all.
Erick Verbena
SAP Basis
PROLAMSAHi Eric,
you can upload entire role in GRC from R/3 system but this will be a resource hungry practice. Better you update the role by increamental method.
Arpan -
Hi!
Has SAP released RAR Rule sets for BI, GTS, SRM, XI, GRC-AC, or Solution Manager?
Let me know if anyone else has found them.
Thanks,
-johnHi John,
SRM rules have always been available. I have not seen rules for BI, GTS, XI, AC or SolMan. Would definitely want to see rules for XI, BI and SolMan.
Alpesh -
GRAC AC 10 CUP E-Mail Notification for Role Owner to approve
Hello Experts ,
I have my CUP working in such a way that role owners are able to go to their Inbox in UI>My Home . However I would like to send E-mail into their Inbox . Right now we are getting the e-mail only at the end of the request when the request is completed.
What should be configured in MSMP ? Following notification events defined for Process ID Access Request Approval Workflow
Notification Event : END_OF_REQUEST Template ID : GRAC_AR_SUBMIT Recipient ID: Requestor
For the stage Config ID GRAC_ROLEOWNER notification settings are :
Not .Event : NEW_WORK_ITEM Template ID : GRAC_AR_NEW_WORK_ITEM Recipient ID : Current Approvers .
What else do I have to do .
Reg,
AnthonyHi,
You will need to make sure that the submission and new work item notifications are activated in MSMP at the various stages and also make sure that the approvers are marked for both approval and notification at the agent assignments.
I would also check to make sure that their emaill addresses are maintained correctly in the GRC system (the data sources will not pick up the approver email addresses automatically).
Cheers, Simon
Edited by: Simon Persin on Jan 25, 2012 6:27 PM -
Can GRC AC 10 be integrated with BOBJ ?? Is Plugin available for BOBJ
Hello Gurus,
We are currently implementing GRC AC 10 for ERP and EP , we have found the plugins for both .
The client requirement is also to implement it in their BOBJ system .
We tried to search the plugin in the marketplace but could not find one.
Does anyone knoe if it is possible to integrate GRC AC 10 with BOBJ ???
If yes , is there any config document or any info link , please let me know.
Thank You.
Regards,
VictorHello Simon,
Thank You for your reply !!
But can you please provide me little more information .. e.g) we want that using the functionality of CUP (compliant user provisioning) , using various forms the end-user should be able to get access in the BO system.
Is that possible ??
If the plugin has to be custom developed by the "vendor" you specified" , how do we contact them ??
or do we have to raise this issue with SAP ??
Humbly requesting you to guide .
Thank You.
Regards,
Victor -
CUP e-mail notifications + submit and approve requests
Hi experts,
I configured the workflows in CUP and now im trying to configure the email notifications . The CAD's that I've set are:
1. Request Petitioner
2. Internal Control
3. Security
and the approver determinator for each stage are:
1. Petitioner
2. Internal Control
3. Security
So, I need to know two thinks:
1. Could the person who submits a request, send it and approve with a single mouse click? given that the same person must submit a request and then approve it, would it be possible to perform both actions at once?
2. I would like to set e-mail notifications to the appropiate role owner, it 's possible? The problem is that we don´t set the role owners like approvers determinator.
Thanks in advance
MartaHi Marta,
In answer to question #1: You could possibly achieve this by changing your workflow but I do not think you want to do so. You would have to guarantee that submission was always done by those that approve the first stage in you workflow.
Question #2: I am not sure I understand what you would like to do. From what you state, I am assuming the Role approvers are stored in the Role file (CUP >> Configuration Tab >> Roles >> Search Roles/Create Roles) and not in a CAD. Are you looking to personalize the email for each role approver so he/she knows exactly which of his/her roles are in the request to approve from the email notification?
Renee
Edited by: Renee Schmoker on Feb 11, 2011 4:58 PM -
All,
Subscribers of the Supplement Option can now download Headstart Patch 6.5.2.3 and Headstart for Apps patch 6.5.2.3
from My Oracle, using the iDevelopment Accelerators link in the Supplement Offering portlet.
The main purpose of this patch is to improve the performance of the CDM RuleFrame engine
when large transactions are involved.
During development and testing of this patch the following improvements of the CDM RuleFrame engine
were measured on an Windows 2000 laptop with RDBMS 8.1.7.1.1.
- 100 DML statements, 3 Business Rules per statement performance improved from 1.45 sec to 1.05 sec (28%)
- 500 DML statements, 3 Business Rules per statement performance improved from 23.760 sec to 8.48 sec (64%)
- 1000 DML statements, 3 Business Rules per statement performance improved from 78.79 sec to 19.260 sec (76%)
- 2000 DML statements, 3 Business Rules per statement performance improved from above 300 sec to 48.22 sec (83%)
- 5000 DML statements, 3 Business Rules per statement performance improved from ??? to 143.41 sec
It evolves that the RuleFrame engine takes up more time for larger transactions now in a rather linear way.
This means that within 15 minutes more than 100.000 business rules can be validated
on a small windows 2000 laptop.
Besides this performance improvement, the patch also implements the following enhancements to CDM RuleFrame:
- The utility 'Create CAPI Custom Service' makes it possible to include a CAPI Custom Service
(that is, your own package or function) in more than one CAPI
- The utility 'Create VAPI Definition' can now also create VAPI's for subtypes (controlled by new utility parameter)
Furthermore, several Utilities bugs have been fixed in this patch. See the readme in the patch for more details.
If you don't have the Supplement Option, contact your local Oracle Consulting representative.
For more information, read the original announcement of the Supplement Option in this forum at
Re: Archiving the data .
kind regards,
The Headstart Team.I was running just the base version of Headstart until yesterday, when I applied all 3 patches at once. On the base version this column wasn't being included in the CAPI, and now it is, so I guess the change could've come about in any of the patches.
The name of my table is reg_photos, and the column that has Complete=No is large_image.
The specific areas of the CAPI where it's included and which cause compilation errors are:
There's public cursors at the start of the package where the column is being selected:
-- public cursors
-- cursor to select one particular row
cursor c_rpho
( b_project_code in varchar2
, b_photo_no in number
) is
select rpho.rowid the_rowid
, rpho.project_code
, rpho.photo_no
, rpho.photo_type
, rpho.photo_date
, rpho.small_image
, rpho.large_image
, rpho.created_by
, rpho.creation_date
, rpho.last_updated_by
, rpho.last_update_date
from reg_photos rpho
where rpho.project_code = b_project_code
and rpho.photo_no = b_photo_no
-- cursor to select all rows
cursor c_rpho_all
is
select rpho.rowid the_rowid
, rpho.project_code
, rpho.photo_no
, rpho.photo_type
, rpho.photo_date
, rpho.small_image
, rpho.large_image
, rpho.created_by
, rpho.creation_date
, rpho.last_updated_by
, rpho.last_update_date
from reg_photos rpho
It's also included in function get_char_value but this isn't causing a compilation error:
elsif upper(p_column_name) = 'LARGE_IMAGE'
then
return l_row.large_image;
And also in procedure validate_row:
g_current_ind.large_image := true;
I guess it's easy enough to go in and comment all the references out, but I would've thought that columns of this nature should not be included in the CAPI in the first place?
Thanks,
Kim. -
GRC-AC CUP 5.3 SP11 UAR Admin Review
Hi All,
We are on GRC-AC v5.3 SP11 and we are implementing UARs. My question is on the Admin Review functionality. The only "pushbutton" options are "Change" and "Cancel Request(s)". However, we have noticed in our testing that the only ones that get moved from the "Admin Review" to the actual UAR Reviewer WF stage (via the UAR Review Update Workflow background job) are the ones that have been actually changed. Is this your experience? Is there a way to Mass Approve them as ready for the UAR Reviewer WF without touching every single one?
Thanks for your help!
-johnHi John,
Current version of AC 5.3 doesn't have the option to Mass Approve UAR requests.
The closest you have is, if there is same "Reviewer" & "Coordinator" for each request in a page, then you can select all of them and update them.
"Mass Approval" of UAR requests needs to be an enhancement.
Please follow the note below to request this enhancement.
Note 1083615 - GRC Access Control Enhancement Process
Best Regards,
Sirish Gullapalli. -
Error while creating new connector in GRC CUP 5.3
Hi,
I am trying to create a new SAP Connector in CUP 5.3, when i fill in all the fields in the new connection and select "Test Connection" it says Connection successful and when i save it and look at the Available connectors, i am unable to see my new connector there.
Does anyone know why is this happening.
a quick response is appriciated.
Thanks.
Edited by: Chaitanya Pallapotu on Jul 14, 2009 9:17 PMHi Chetan,
I have the same issue when configuring connectors in CUP. I solved it in this way:
1- Go to RAR(Risk, Analysis and Remediation) --> Configuration --> Connector --> Search
2- Select one of the connectors and write down the values in the list box of the field JCO Destination.
3 - Now, go to CUP, and create the connector using the names writed down in step 2.
CUP will warn you with an error, ignore it, and then save the connector.
Note: when creating the connector in CUP, fill the fields, then save/create(here you will have the error msg), then Test Connection, and then save again.
That works for me!!!
PD: Always log in to GRC with the same language configured in CUP.
Hope this works for you!!! -
GRC AC patch compatibility with higher RTAs
Hi Experts,
Please let me know if GRC AC having lower level patch is compatible with backend having higher level RTA patch or not.
Example- Backend systems are upgraded to RTA patch 7(VIRSANH 7).
But as we are having a lot of issues in ERM patch 7, we want ot keep our ERM Production system at pathc level 6 until a fix is released by SAP.
Please let us know if there would be any issues or it will work fine if we connect GRC patch 6 system to Backend having RTA partch 7.
Thanks & Regards,
SabitaHi Sabita,
There is no backward compatibily supported by ABAP or JAVA versions of GRC today. So, I would recommend you to have ABAP and JAVA on same versions.
Pursuing the scenario that you have mentioned may lead to some functionality issues.
Harleen
SAP GRC RIG
Maybe you are looking for
-
Last digit truncates while downloading to Excel from ALV Grid
Hi All, I have been using REUSE_ALV_LIST_DISPLAY and REUSE_ALV_GRID_DISPLAY in my report program. While i use REUSE_ALV_GRID_DISPLAY and downloading the data to a local file(Excel) the last digit of the Vendor code is truncated. But in REUSE_ALV_LIST
-
Open Directory / Active Directory SSH access
I have recently bound all of our web and database servers on our active directory and open directory realms. I am able to augment the AD records for my account and the accounts of the other admins, give them NFS home directories and all is great. We
-
Calendar can't open. server redirecting improperly
On opening my google home page,The calendar can't open. The message is The page isn't opening properly. . .redirecting in a way that will never complete. It is suggested that cookies or the lack may be part of the problem. My cookies are allowed with
-
I moved from Belgium to Hungary and it seems that all my music, apps and magazine subsriptions have been lost. Sorry if I am too dummy to find the solution. Please help.
-
No response when binding dataset to the subreport
Hi, Environment: OS : Windows 7 Crystal report for VS2010 (13.0.2) Visual Studio 2010 ( using WPF) How to bind the loaded dataset to the sub report. I tired in my code the following: try{ rpt.OpenSubreport("SubreportName").SetDataSource(ds); Catch(Ex