One GRC connected to multiple R3

Hi
Needed you expert opinion
I am implementing GRC for a customer with 10 R3 systems
We have to implement one instance of GRC connected to 10 R3 systems
Each of these R3 belongs to a Business Unit ( 10 different business units in all)
Each of this business Unit is as good as a independent company have their own business and IT processes, roles and user. ( No user would have access in more than one R3 system)
Though many business process and risks would be common amongst the Business units. The risk owner would be different and so would be the mitigation process etc
In the above scenario I have following choices
Choice one - Use Logical system
This would have the least flexibility for the Business unit to manage their risks, actions and permission
Choice Two - Physical systems
Have a choice of common Risk ruleset and connect the 10 R3 systems as physical systems .
In this case the Risks would be common so would have issues related to risk owner, mitigation etc would remain. This would have limited flexibility. Also we may hit the 46000 rules limit
Choice three
Have 10 rulesets (10 sets of risks/functions etc, one each for the business unit)
Each business unit would have their individual risk and thereby greater control
I am inclined towards last choice. My concern is multiple rulesets/risks will lead to an greater number of rules thereby affecting performance
There would be around 6000 users and around 30000 roles in all these 10 systems put together
Can somebody share their experience/expertise on this
Regards

Hello,
I would suggest using the Logical system, and bundle all the 10 systems into One logical system, so you will have to create and maintain only one set of Rules, This will be very helpful in the long run, when you get into the prod support phase.
Coming to your question on using mitigating controls for this approach, You can have multiple monitors for one mitigating control (Please note that there will be only one Management Approver, I would assume it will be someone more at a central level for the entire business in your case). And on the third tab (Reports) in the mitigating control section, you can define a relationship between the systems and the concerned mitigating monitor. This way the mitigating monitor will recieve reports only for their particular system.
Note: This approach will only help if you have a common set of rules across the 10 systems.
Hope this helps.
- Naveen

Similar Messages

One ECC Connected to multiple CRM systems

Hello,
We have a scenario where we have single R/3 system (ECC) connected to multiple CRM systems. I would be obliged if someone can send me some documentation on tht.
Also if we are creating an order in ECC, two queues are generated which I think is wrong. Can someone give me some advice on this.
Thanks & Regards
Priyanka

Hello Pratik,
I would define two different systems in ECC. In such a case, if say I create one material in R/3 (ECC) then should it generate two diffrent queues for flow to CRM.
Also if say the CRM Release etc for the two systems connected to one R/3 are not the same, then how do i take care of the entries in the ECC Config tables for replication i.e CRMFILTAB, CRMCONSUM, CRMPAROLTP etc.
And how does the ECC system identify what settings it has to take for what CRM system and what queues have to be generated? What are the queues to be registered in CRM and ECC in such a case.
Would be obliged if you can give me a more detailed advice.
Rgds
Priyanka

JCos (Java Connectors) from one GRC server to multiple clients on same DEV

I have installed SAP GRC Access Controls RAR on a server.
I have connected the RAR using JCo's to a client (800) on a DEV R/3 (4.7) box. I have also performed analysis succesfully on the roles and users in this DEV client.
I now have another development client on the DEV box (500) which I need to perform analysis for. This client is HR specific.
I know I can create a new JCo to connect to client 500. But what will be the impact on my analysis results? How will I distinguish between the results found from client 500 and those found from client 800?
How would you suggest the best way of doing this?
Many thanks in advance.

You will need to create a second JCO to the second client as JCO's are client specific (username password combinations to log on etc etc)
You distinguish the results in Risk ANalyses by choosing the JCO (system) when you create the reports eg: Client 500, Client 800 or ALL.
It can be very confusing and you have to be careful otherwise you will interpret the results incorrectly.
If your new client is HR specific make sure that you have the HR RTA installed as well and patch the HR and Non-HR RTAs up to the latest versions.

Single jdbc connection opens multiple connections to sql server

Hello!
I'm having a bad problem, because one jdbc connection opens multiple connections to the sql server. I'm working with the open source jdbc driver jtds and the ms sql server. Because I'm using temporary tables that are only visible to one database connection, my code doesn't work. Is this a bug in jtds or is this the normal behaviour of a java.sql.Connection?
Here a code example:
Class.forName("net.sourceforge.jtds.jdbc.Driver");
conn = DriverManager.getConnection(
"jdbc:jtds:sqlserver://"+dbConnDef.getServer()+"/"+dbConnDef.getDatabase(),
dbConnDef.getUserName(),
dbConnDef.getUserPasswd()
Statement stmt = conn.createStatement();
stmt.executeUpdate("SET DATEFORMAT YMD");
stmt.close();
stmt = conn.createStatement();
stmt.executeUpdate("CREATE TABLE #tmp (FieldA INT NOT NULL)");
stmt.close();
stmt = conn.createStatement();
ResultSet rs = stmt.executeQuery("SELECT * FROM #tmp");
stmt = conn.createStatement("SELECT FieldA AS sthElse FROM #tmp");
ResultSet rs2 = stmt.executeQuery("SELECT * FROM #tmp");
// the strange thing is, that this second query does NOT yet open a
// new connection, but the next sql command does.
stmt = conn.createStatement();
stmt.executeUpdate("DROP TABLE #tmp");
stmt.close();
Why is it behaving that strange way? It is absolutely necessary, that EVERYTHING that I do with my connection is really done on the same connection to the SQL server! How can I force a java.sql.Connection not to open multiple sql-server-connections?
It is very urgent, thus, PLEASE HELP!!!
Thousand thanks in advance! Marco.

...but that means, that the jdbc driver I use, is not working properly, because it should work the following way (please correct me, if I misunderstood the concept):
I create a Connection object which should represent exactly one physical connection to the database. Then I can create as many Statement instances by conn.createStatement() as I want. There should still exist only one physical connection.
With each of my Statement objects, I can create one result set.
This means, I should be able to create as many result sets as I want to with only one Connection object (and therefor one physical connection) by creating multiple Statements, right?!
If this is correct, the concept is perfect for me and exactly as I'm used to it by other programming languages. Then, only my jdbc driver does not work properly which means I either have to replace it by another one or change it myself (it's open source).

Create one connection for multiple dynaset reads

I am using VC 6.0 with the OO40 class. I am processing a text file in a console batch mode. The file can contain 1 record or hundreds of records. I would like to open the db connection/session once and read the database multiple times - one for each record being processed. What is happening is that the first record is read, and processed. The subsequent records are not read and the dynaset still points to the first record. I have the dynaset read process in a function - so that the dynaset is destroyed and recreated everytime. What am I doing wrong.

As for your question: it is discussed in sAP online help:
http://help.sap.com/saphelp_erp60_sp/helpdata/en/c6/f841f24afa11d182b90000e829fbfe/frameset.htm
Sorry I misunderstood your question.
The above mentioned solution won't create one single TO from multiple TR.
Edited by: Csaba Szommer on Aug 11, 2010 9:46 AM

Connecting One process Server to Multiple SAP Systems

Hi Experts,
We have a licensed version of the SAP CPS with the Process server limit parameter set to 4, which means we are limited to 4 process server as per my understanding. But when we create a SAP system the process server and the respective Queue is automatically created. SO that means we can create a max number of 4 SAP systems with 4 process servers!!
Or is there a way we can connect one process server with multiple SAP systems ?
Thanks,
Eric.

Yes - Process server limit parameter set to 4 means your CPS environment can start jobs in 4 SAP systems only.
Maybe "SAP Business Automation Enabler (BAE) Connectors" could be useful to you in your situation.
- Check the CPS admin guide for more information on BAE connector.
Regards,
David

One R/3 connected to Multiple BW

Hello,
Can one R/3 connect to multiple BW?
Will delta correctly function ?
Does one datasource will have multiple delta queue based on connections to BW ?
Pranay

Hello,
Sure, the system holds the delta queues per target system as the initialization is done based on different selections and for a specific BI System.
You can check this:
OSS note: 775568 - Two and more BW systems against one OLTP system.
Regards,
Jorge Diogo

Can one syclo server connect to multiple SAP backends?

Hi All,
I am working with SAP Service Manager application and the backend is SAP CRM.
As we all know that the backend system setting for syclo server needs to be maintained in the JavaBE.ini file
Suppose I have a requirement where one of my screen has to deal with a status update development and the backend in this case is ECC and not CRM.
Can I achieve this ? I mean can we configure the JavaBE.ini file to connect the multiple SAP backend ? If yes please explain the process/steps to do so.
Thanks and Regards
Neha Mahanty
Message was edited by: Michael Appleby

Thanks Bill,
As I understand , Going with Standard SAP Integration mechanism means to have connection with CRM system and ECC system can be called internally from CRM via RFC's . Is my understanding correct here ? This can be done If we create a FC in CRM and internally call ECC FC via RFC.
Also I shall try the second approach too. However I have a question here.
Suppose I create a new JavaBE2.ini file and configure it for ECC.
Later when I create java steps will it automatically detect that which SAP system it should connect to? I cannot explicitly tell the Java step to call the ECC system , Can I ?
Please advise.
Thanks
Neha

How to use one dynamic connection managers for multiple parallel data flow tasks

hi there:
I have 6 databases residing on the same server. What I want to do is call a store procedure with identical name on each database dbo schema and transport results to a centralized place. The key is to have those SPs run in parallel instead
of in sequence as each SP may take around 10 mins to finish.
The simplest way is to create 6 OLE DB connection managers and create 6 DFT tasks. However, I do not want to maintain 6 OLE DB connection managers as there is a chance to have more connection managers.
What I did so far is to create a OLD DB connection manager and use expression to set up connectionString properties so that it will get populated by variables at run time. It is fine when running all SPs in a Foreach Loop Container. However, it takes
around 60 mins to finish.
When I try to run it in parallel ( basically created 6 DFTs but use only one Dynamic Connection Manager), the connection string gets confused therefore all DFT tasks failed.
Does anyone here have some experience on this topic?
Thanks
hui
--Currently using Reporting Service 2000; Visual Studio .NET 2003; Visual Source Safe SSIS 2008 SSAS 2008, SVN --

Yes, basically, on the connectionString property of ONE OLEDB, you are using an expression to supply value and this expression is pointing to a variable.
In this case , you can update this variable from a table which contains many connection strings. It's good if you want to execute Store procedures in a sequential order. When in parallel mode, this will cause issues as connectionString gets overwritten.
I am thinking about using script task to exec sp.
The whole idea is that I do not want to maintain a large number of Connection Managers.
Hope it helps
--Currently using Reporting Service 2000; Visual Studio .NET 2003; Visual Source Safe SSIS 2008 SSAS 2008, SVN --
So you are not able to run parallel executions using same conn mgmr, even with dynamic connectionstring, is that correct? Yes, script task will be a way to go if you wish to execute it in parallel, you may connect to SS and query the proper conn string with
SELECT/WHERE clause in each script > pass it to a script variable > use that script variable and execute the proc. This will require only two things to change in each script, the WHERE condition to get the conn string and the proc name (you may even
get the proc names the same way you get conn string) and everything else will be same. Let us know how that goes.
Hope no two or more procs doing insert/update/delete on the same tables.

One premium account and multiple Skype HD devices

Will one Premium account and multiple non premium HD accounts work for video calling? Basically the idea is 10 HD skype devices, the set top boxes connected to tvs will dial into one Premium Mac or PC account for multiple video conferencing.

Yes, one user needs to have a Group Video Calling subscription.
Unfortunately, not all devices support Group Video calling (TV's for example, do not).
Please see our website for more information: http://www.skype.com/en/features/group-video-chat/.

One skype number for multiple users in Skype Manag...

Is it possible to get one Skype-in phone number and assign it to multiple members in Skype Manager?
If so, how do I go about it?
I also asked this here: http://community.skype.com/t5/Skype-Number/One-skype-number-for-multiple-users-in-Skype-Manager/m-p/...

You could always allocate a number to multiple business accounts in Skype Manager. Then re-direct the number via IP-PBX to go to different extensions.
Try the following here [If you look in the advanced section of this manual, you'll see an example of two accounts using one number]
http://download.skype.com/share/business/guides/skype-connect-user-guide.pdf
7.5 Online Numbers for incoming calls
You can use both business Skype accounts and Online Numbers simultaneously on a
single SIP Profile if you wish. In other words, you may have multiple business accounts
and Online Numbers added to one SIP Profile at the same time.
7.5.1 Adding an Online Number to your SIP Profile
Shows you how to setup such
Thanks,
Kent C.

FTP won't connect Get multiple daemons

I had the problem where no one could connect with any password in FTP. I replaced the /Library/FTPServer/Configuration/ftpaccess file and fixed the bad password problem.
For a few minutes I could connect. Now I cannot. When I try to connect I get:
++++
ftp server1
Connected to server1.<ourDomain>.com.
(Here long wait)
421 Service not available, remote server timed out. Connection closed
+++++
On the server itself I find instances of the daemon where I had tried to connect before:
++++++
admin$ ps -ax | grep xftp
411 ?? R 2:07.21 xftpd -a
440 ?? R 1:01.14 xftpd -a
441 ?? R 1:00.91 xftpd -a
463 ?? R 0:50.93 xftpd -a
477 ?? R 0:32.96 xftpd -a
478 ?? R 0:32.22 xftpd -a
481 ?? R 0:22.42 xftpd -a
482 ?? R 0:22.22 xftpd -a
491 ?? R 0:20.26 xftpd -a
494 ?? R 0:08.76 xftpd -a
495 ?? R 0:08.65 xftpd -a
510 p2 U+ 0:00.00 grep xftp
Any help would be appreciated.

In addition to this, When ever I try to connect, I start an Xftp daemon that EATS cpu time.
The SAMPLE data is below.
Thanks
Kirk
+++++++TOP+++++++++
Processes: 125 total, 5 running, 1 stuck, 119 sleeping... 390 threads 14:51:53
Load Avg: 2.50, 2.26, 1.78 CPU usage: 30.1% user, 69.9% sys, 0.0% idle
SharedLibs: num = 188, resident = 41.5M code, 4.63M data, 10.5M LinkEdit
MemRegions: num = 13841, resident = 313M + 17.5M private, 130M shared
PhysMem: 159M wired, 169M active, 389M inactive, 718M used, 1.30G free
VM: 7.11G + 107M 112124(0) pageins, 0(0) pageouts
PID COMMAND %CPU TIME #TH #PRTS #MREGS RPRVT RSHRD RSIZE VSIZE
28709 top 15.0% 0:02.16 1 19 22 488K 504K 936K 26.9M
28708 pop3d 0.0% 0:00.06 1 18 80 472K 2.20M 1.90M 48.7M
28707 imapd 0.0% 0:00.13 1 25 86 684K 2.71M 2.41M 49.4M
28596 xftpd 70.9% 5:20.61 1 17 30 200K 612K 672K 26.8M
28565 smtpd 0.0% 0:00.07 1 16 76 452K 1.57M 1.68M 29.3M
28557 imapd 0.0% 0:00.10 1 25 86 688K 2.71M 2.37M 49.4M
28490 trivial-re 0.0% 0:00.03 1 16 20 200K 568K 708K 26.7M
28361 imapd 0.0% 0:00.26 1 25 91 672K 2.83M 2.41M 49.7M
28360 imapd 0.0% 0:00.13 1 25 86 668K 2.72M 2.39M 49.4M
+++++++++++++Output+++++++
Analysis of sampling pid 28596 every 10.000000 milliseconds
Call graph:
849 Thread_011f
849 0x21c8
849 0x2320
849 0xca30
849 0x1ca7c
849 0x1c4f4
633 0x1b030
575 lstat
575 lstat
57 0x1b030
1 dyldstublstat
1 dyldstublstat
150 0x1b064
133 readlink
133 readlink
16 0x1b064
1 dyldstubreadlink
1 dyldstubreadlink
12 0x1b010
7 strcat
7 strcat
5 dyldstubstrcat
5 dyldstubstrcat
7 0x1af94
5 strchr
5 strchr
2 dyldstubstrchr
2 dyldstubstrchr
7 0x1afcc
4 strcpy
4 strcpy
3 dyldstubstrcpy
3 dyldstubstrcpy
6 0x1b0ec
4 strcpy
4 strcpy
2 dyldstubstrcpy
2 dyldstubstrcpy
5 0x1aeec
3 bcmp
3 bcmp
2 dyldstubmemcmp
2 dyldstubmemcmp
5 0x1b024
3 strcat
3 strcat
2 dyldstubstrcat
2 dyldstubstrcat
3 0x1afa4
3 strlen
3 strlen
3 0x1aff4
3 0x1aff4
3 0x1b038
3 0x1b038
2 0x1af10
2 dyldstubmemcmp
2 dyldstubmemcmp
2 0x1af34
2 dyldstubmemcmp
2 dyldstubmemcmp
2 0x1afe8
2 0x1afe8
2 0x1b088
2 0x1b088
2 0x1b0c4
2 strcpy
2 strcpy
1 0x1afc0
1 0x1afc0
1 0x1afe4
1 0x1afe4
1 0x1b044
1 0x1b044
1 0x1b048
1 0x1b048
1 0x1b074
1 0x1b074
Total number in stack (recursive counted multiple, when >=5):
Sort by top of stack, same collapsed (when >= 5):
lstat 575
readlink 133
0x1b030 57
0x1b064 16
strcat 10
strcpy 10
dyldstubstrcat 7
dyldstubmemcmp 6
dyldstubstrcpy 5
strchr 5

Can I use existing portal to connect to multiple R3 systems for config

I am planning to use existing portal 6.0 to connect to multiple R/3 systems for testing and configuration.
We have three portals in our landscape DEV TST and PRD.
Our R/3 system landscape -->DEV, DEV2, TST,TST2,TST3 etc.
DEV portal is connect to dev system TST portal to R/3 TST system etc.
Is there a way I can connect DEV portal to DEV2 R/3 System without effecting portal testing and configuration which is in progresses in DEV R/3 system.
If any one has done it in the past, please share instructions
Thanks,
adil

Hi Syed,
Check this link for creating systems.
Configuring EP for connecting to SAP R/3
http://help.sap.com/bp_epv260/EP_EN/documentation/EP/N03_BB_InstallGuide_EN_US.doc
Regards
Arun

Connecting to multiple schemas using datasources file

I am trying to connect to multiple oracle schemas on the same database using a 10.1.3 version of datasources.xml file. Has any one done this. If yes, can you please post an example.

I am trying to connect to multiple oracle schemas on the same database using a 10.1.3 version of datasources.xml file. Has any one done this. If yes, can you please post an example.

Java Stored Procedure in one database connecting to muntiple databases.

Hello,
I created a Java Stored Procedure in one database(Oracle10g) and successfully open a connection to another database(Oracle10g) using Thin JDBC Driver. I want to actually transfer CLOB data from one DB to another DB. I am concern that by opening a connection another database in Java Stored Procedure, might interfere with oracle and destabilize the instance at some point. Oracle JDBC FAQ (Link: http://www.oracle.com/technology/tech/java/sqlj_jdbc/htdocs/jdbc_faq.htm#34_13) stated that Yes it could be done but then mentioned the workaround.(if it could be done why do we need a workaround!!!)
I would like to confirm whether connecting to multiple DB using JDBC Thin Driver in a Java Stored Procedure is supported by Oracle10g or not and whether it has any known issue with it.
Thanks in Advance!
Edited by: user649261 on Sep 16, 2008 8:05 PM

hrishy wrote:
Thanks i have modified the title so its easy to comprehendWrite the two parts mentioned above and post if you get problems with your code.
First write code that calls the stored procedure and test that to make sure that it works.
Then write a simple webservice and test it out to make sure it works. The integration should be trivial after that.

One GRC connected to multiple R3

Similar Messages

Maybe you are looking for