Process Control - Access Control Integration

Is it possible that i cannot bring risk analysis results of critical actions risks?? The SoD risks goes well.
Any idea.
Kind Regards,
Isaac

Hi
Even though you set risk analysis to be done at single in RAR , it will automatically consider following type if done from CUP
1. SOD conflict
2.Critical action
3. Critical Permission
If you want to have only SOD risk analysis ,then deactivate all critical action rules in RAR OR create a new ruleset and assign all SOD risk to it and use with CUP .
Thanks & Regards
Asheesh

Similar Messages

UWL Integration - Process Control & Access Control

Hello Community,
Has anyone worked on UWL integration of Access Control 5.3 & Process Control 3.0?
Is this feasible by developing UWL custom connectors? Any hints?
(NW2004s - EP7.0)
Thanks!
Dhanz

Hi
Even though you set risk analysis to be done at single in RAR , it will automatically consider following type if done from CUP
1. SOD conflict
2.Critical action
3. Critical Permission
If you want to have only SOD risk analysis ,then deactivate all critical action rules in RAR OR create a new ruleset and assign all SOD risk to it and use with CUP .
Thanks & Regards
Asheesh

Are GRC Access Control, Process Control and Risk Management separate?

Are these 3 different modules that you have to purchase separately or are they included in one suite?

Hi Anne,
If you are refering to GRC Access Controls 5.3, Process Control 3.0 and Risk Management 3.0 - All 3 are separate.
A new version of GRC 10.0 has been launched which is currently in ramp up. This has all the above 3 in one suite.
Thanks and Best Regards,
Srihari.K

Differences between MIC and Process control

Hi
Could someone please let me know what are the major differences between MIC and process control 2.5.
I have heard that Process control 2.0 is not being used now.
So could you please let me know what the differences for MIC and Process control 2.5.
Regards
Sandhya

Hi Sandhya,
the major differences are:
- automated controls (SAP and non-SAP systems)
- UI interface based on NetWeaver Business Client (NWBC)
- flexibility on scheduling assessments and tests based on control attributes
- configurable reports and extraction to either .pdf or .xls
- possibility to se configure workflow to send reminders and escalations
- integration with Access Control 5.3, RAR component
- concept of service providers allowing controls to be referenced between different organizations (former MIC orgunit)
- assessments based on surveys (questions to be answered)
- effectiveness tests based on test plan (both tests and steps)
Regards
Andre Yuji

Approver not determined process controlled workflow in SAP SRM 7.0

Hello all,
I have setup process controlled workflow in SAP SRM 7.0 EHP3 for shopping cart approval.
I have 4 approval levels.
I have used item-based Decision for entire document because for some items i want system approval.
In implementation of BADI /SAPSRM/BD_WF_RESP_RESOLVER, in the method /SAPSRM/IF_EX_WF_RESP_RESOLVER~GET_AREA_TO_ITEM_MAP, i am skipping the items for which i want system approval.
Also in method /SAPSRM/IF_EX_WF_RESP_RESOLVER~GET_APPROVERS_BY_AREA_GUID of BADI implementation class, i am keeping the approver table empty for the step which i want system approval.
For example i have 1 item in shopping cart and for 1st step, based on some accouting criteria, i want system approval for 1st level and the workitem should go directly to 2 approval step when shopping cart is ordered. This is not happening.
But if i have multiple items, and one item should have system approval based on some criteria and the 1st approval level should be system approval and other item should go to the 1st approver. This is happening and showing 'system' approver for item1 and 'appr_xyz' for item 2.
For shopping cart having only 1 item, If i approve the shopping cart in this state only, it doesn't go to any approver and is not usable.
am i missing anything in BADI /SAPSRM/BD_WF_RESP_RESOLVER??
Please let me know.
Regards,
Yayati Ekbote

Hi Adrian,
Yes it is possible to display custom workflows in the Universal Worklist, However, I am not sure what you are trying to do with a routing table. If the workitems are of type decision, you can use UserDecisionHandler (action handler) configured in the XML file to use the Approve/Reject functionality - we are talking about webflow connector here correct? R/3 connector?
Regards,
Beth Maben
EP - Senior Support Consultant II
SAP Active Global Support
Global Support Centre Ireland
**SDN Forum Moderator:
SAP Enterprise Portal: Application Integration
**SDN Universal Worklist Wiki:
http://wiki.sdn.sap.com/wiki/x/ehU

Dump on screen when configuring Process controlled workflow

Hi Experts,
I am facing 1 problem in SAP SRM 7 ehp1. I am configuring Process controlled workflow. Previous workflow settings was Application controlled workflow as its been upgraded from SRM 5. If i run a RFX (BUS2200) cycle in application controlled workflow environment, it works flawlessly.
But when i change my workflow framework to process controlled workflow for all Business Objects. I face a dump when I am creating an RFX. The dump on the portal is:
http://dl3803.ltisap.com:8040/sap/bc/webdynpro/sapsrm/wda_l_fpm_oif
DATREF_NOT_ASSIGNED
No access possible via the 'NULL' data reference
Method: PARTICIPATING_IN_ACTIVE_WF of program /SAPSRM/CL_PDO_DYN_MDA_WF_ADJ=CP
Method: EDIT_DURING_WORKFLOW of program /SAPSRM/CL_PDO_DYN_MDA_WF_ADJ=CP
Method: /SAPSRM/IF_PDO_META_CONF_BO~GET_BO_HDR_ACTION_METADATA of program /SAPSRM/CL_PDO_META_CONF_PROV=CP
Method: /SAPSRM/IF_PDO_META_CONSUMER~GET_ACTION_METADATA of program /SAPSRM/CL_PDO_META_BO_RFQ====CP
Method: /SAPSRM/IF_PDO_META_CONSUMER~GET_ACTION_METADATA of program /SAPSRM/CL_PDO_META_BO_RFQ_ADVCP
Method: /SAPSRM/IF_PDO_META_CONSUMER~GET_ACTION_METADATA of program /SAPSRM/CL_PDO_META_HANDLER===CP
Method: UPDATE_ACTIONS of program /SAPSRM/CL_CH_WD_MAP_IDENT====CP
Method: /SAPSRM/IF_CLL_MAPPER~REFRESH of program /SAPSRM/CL_CH_WD_MAP_IDENT====CP
Method: /SAPSRM/IF_CLL_MAPPER~REFRESH of program /SAPSRM/CL_CH_WD_IDEN_MAP_RFQ=CP
Method: OVERRIDE_LEAVE_INIT_SCREEN of program /SAPSRM/CL_FPM_OVRIDE_OIF=====CP
& when i check in st22. I get the dump as:
Category               ABAP Programming Error
Runtime Errors         DATREF_NOT_ASSIGNED
ABAP Program           /SAPSRM/CL_PDO_DYN_MDA_WF_ADJ=CP
Application Component SRM-EBP-PD
Date and Time          17.12.2011 15:46:56
and get dump at:
1 method PARTICIPATING_IN_ACTIVE_WF.
2   " this method returns ABAP_TRUE if the logon user has an active work item,
3   " i.e. he participates in an active approval workflow process.
4
5   DATA lv_curr_workitem_id    TYPE /sapsrm/wf_workitem_id.
6   DATA lr_process_info        TYPE ref to /SAPSRM/S_PDO_WF_PROCESS_INFO.
7
8   " the default:
9   rv_participates_in_active_wf = abap_false.
10
11   " The scenario is not valid for application-controlled workflow:
12   " Any agents who may edit the document (approver and requester)
13   " enter "Edit" mode right-away. No special handling possible.
14   lr_process_info = io_apf_md_context->get_process_info_ref( ).
>>>   IF lr_process_info->wf_version NE /sapsrm/if_wf_process_c=>GC_APF_VERSION_0200.
16     return.
17   endif.
18
19   " check if a valid workitem exists
20   lv_curr_workitem_id = io_apf_md_context->get_workitem_id( ).
21   IF lv_curr_workitem_id IS INITIAL.
22     RETURN.
23   ENDIF.
the only configuration I change in the system is I changed the workflow framework to process controlled workflow.
Kindly help.
Thanks
Anand

Hello Anand,
As per standard SAP recommendations the application-controlled workflow framework is only intended to be used if you are upgrading from SAP SRM 5.0 or earlier and you need to continue using your existing work-flows.
The default workflow framework setting is the process-controlled workflow from SRM 6.0 on-wards and the user will be provided a option to switch to the application-controlled workflow framework. The option to switch to process-controlled workflows is available only after you have once switched to application-controlled work flows but there will be a big caution that " If you switch from the application-controlled workflow framework to the process-controlled workflow framework; once a process-controlled workflow has been run, it is not supported that you switch back to application-controlled work-flows".
As per the details given i got a feel that we have tried executing the scenario by switching between application and process controlled workflow and hence the system have become inconsistent and its dumping.
I suggest you to raise a OSS ticket to SAP to resolve the issue.
Best Regards,
Rahul

Complexity of using N-step BADI in SRM 7using Process controlled Workflow.

Hi,
Just as a big thought,
I have a Shopping Cart requirement, Here i am asked to develop a Custom workflow for SRM 7.0.
And the client is looking for us to use Process Control Workflows i.e(BRF integrated one).
I need to understand the complexity of using a N-step BADI.
How would be the complexity level if I use a N step BADI( ie Multiple approval levels on Line Item Based).
Kindly tell me the complexity of Using it and if any one has come across some requirement like this, then explain me that how did you face the situation.
Expecting an Earliest Response.
Thanks,
Shanky

Hi,
Is your project SRM 7.0 implementation project then you have to go for Process Controlled Workflow and if your project is upgrade then you can still go with Application Controlled Workflow but down line this has to switch to Process Controlled Workflow.
Best Regards,
Saravanan

Document Management in GRC 10.0 Process Control 10.0

Hi - Our Company is looking to implement GRC 10.0 Process Control 10.0. We have a bit of a challenge for which document management services to go with . Currently there is no integration between GRC 10.0 and OpenText or Sharepoint. I was wondering what solutions others have for Document Management in GRC 10.0
Thanks

Hi Sabita,
Did you check this article on Content Life Cycle Mngt supports all SAP GRC products. Check the link for detailed article and I hope this would be right direction for your company to go.
http://www.sdn.sap.com/irj/bpx/go/portal/prtroot/docs/library/uuid/e0431d8f-2298-2e10-5fb0-87840e285f4c
warm regards,
Asok Christian

Process control inheritence to child org units - GRC 10.0

Hi All,
We created few process controls in Parent Org Unit - X. We assigned mitigation control ID and access risks to these controls along with control owners. These process controls are being used as Standard Global Controls
We created another Child Org Unit - Y and copied the sub-process and then selected only 1 or 2 controls which are applicable to the Child Org Unit. This will allow us to use few Global controls and create local controls if required.
Now the issue we observed that the Child Org Unit does not carry the Mit. Ctrl ID & Access Risks & Owners from the same control of Parent Org Unit. When we tried to provide the same Mit. Ctrl ID it is stating Mit. Ctrl is not UNIQUE.
Our requirement is we would like to have the same Mit. Ctrl ID for Global Controls both at Parent & Child Org Unit and different Mit. ID for local controls at Child org unit. This will be easy to identify controls which are from Global & Local for testing and other reporting purposes.
We understood that since we are copying the sub-process to Child Unit it is taking only Process control details, not the access control information as it is provided in Org Unit
Can somebody please guide how to acheive the above requirement. How to inherit all the controls from Parent to Child Org unit reflecting Mit. Ctrl ID, Access Risks and Owners
We are on PC 10.0 - SP07
Thanks and Best Regards,
Srihari.K

Hi Sabita,
Did you check this article on Content Life Cycle Mngt supports all SAP GRC products. Check the link for detailed article and I hope this would be right direction for your company to go.
http://www.sdn.sap.com/irj/bpx/go/portal/prtroot/docs/library/uuid/e0431d8f-2298-2e10-5fb0-87840e285f4c
warm regards,
Asok Christian

Trying to use Process Control in session bean

Hi,
In Workshop, I have a session bean that is <i>trying</i> to call a method on a business process control. (The control was created in a process project and then moved to a control project to make it visible.)
The problem, in the example below, is that 'myControl' never gets set. So how do we access controls in EJBs? (I thought there was some Workshop magic that would implement this initialization.)
Thanks for any help!!
- Rob
// Event.ejb
* @common:control
private controls.getEventsPControl myControl;
* @ejbgen:remote-method
public String getEvent() {
return myControl.getEvent();
}

We're running SP4. Here's the session bean code snippet in a readable format. Again, 'myControl' is null. How do I set it?
Thanks for any ideas..
- Rob
// Event.ejb
* @common:control
private controls.getEventsPControl myControl;
* @ejbgen:remote-method
public String getEvent() {
return myControl.getEvent();
}

Can we rename ABAP roles in GRC Process Control to adhere to naming convntn

Hello,
We are working on a new implementation of the GRC Process Control 2.5 product. It comes with 11 standard roles. I wanted to change the names to adhere to our company's role naming conventions. Will this adversely affect any functionality. I know that in PC, there is a additional level of security that is maintained thru the NWBC. How will that be affected? And is it typical to have a non-sap security team maintain the roles/user thru the NWBC and have SAP Security maintain the ABAP users/roles?
Thanks in advance.

Hi Arvind:
We copied the standard delivered ABAP roles to our namespace, made a few additional changes and are using them no problem. We also copied the NWBC roles to our namespace. We have the default roles as reference. We did this for consistency, but also because ABAP roles and App roles can change as the App roles did in SP04. This way we compare the app roles before and after a SP to make sure we agree with any role changes introduced to default roles. This way, we don't unknowingly introduce changes to our roles based on the changes SAP introduces to their roles at any given point.
As far as the tester role goes, it is at the Process level. If you aren't sure go into the app under User Access => Roles and their tasks like you will assign it and restrict the selection to "proces". You will see it is at the Process level. As far as the rest goes, you seem pretty well versed in the security guide so I'm sure you know this, but as long as the level of the role is equal to or greater than the task you can assign it. Ex: You can assign a control level task to a Corporate level role but not a Corporate level task to a control level role.
I hope this helps.
Matt

GRC AC 5.3 and GRC Process Control on the same server

Hello,
Can we install SAP GRC AC 5.3 and GRC Process Control 3.0 and GRC Risk Management 3.0 on the same box/ same server.
Is there a OSS Note, which talks about having the above 3 components on one box?
Thanks,
Imran

Hello Imran,
1- My 3 question ARE do I need a separate JAVA Stack for GRC Process Control and seperate JAVA Stack for GRC Access Control
-> No, you can have them installed on save Java stack.
OR
Can I use the same JAVA Stack for GRC Process Control & GRC Access Control?
-> Yes, you can. You have to make sure that you are on SP10 or above for Access Control as only then it will support NW Java 7.01.
2- Can I use EP 7.0.1 installed on same server for both GRC PC 3.0 and GRC AC 5.3?
-> Yes, you can.
3- Can 1 single AS JAVA Database contain both GRC Access Control VIRSA Tables and GRC Process control tables at the same time?
-> For process Control the tables reside on the backend SAP as it is webdynpro ABAP application and for access control the tables reside on the Java database as it is java and webdynpro JAVA application.
Regards, Varun

GRC Process Control

Hi All,
Can anybody have knowledge on GRC, can you explain me why this is used and what are the processess involved in this.
Ragards
Raka

Hi,
Q:what are the prerequisites for such implementation?
You should have an orgn.Structure with well defined roles.
If GRC has to be implemented in an IT Landscape,then you have to have a well contrieved IT system supported by competent IT staff.
Q:Is GRc process control only for SOX compliance or does it take care of other countries compliance requirements.
The GRc process control is intended to help the management in bringing about a good governance at the enterprise level,identify and mitigate the risks and to bring about a meaningful controls [ access and proess controls].[ all at the enterprise level]
Thus the purpose of GRC is to add value to the enterprise beginning with by properly aligning the IT with the business,bring about a good governance by implementing the best practices and constantly monitoring and controlling them.Besides a constant endevour is made to improve the maturity of the various components of controls to afford a great comfort level to the stake holders. This is the ultimate goal of GRC.
The GRC helps complying with regulatory measures [like Basel 2 etc] across countries other than SOX as well- as the focus is about good governance and not about a particular act such as sOX.
Regards.
Ramesh.

Applying Business View format of ARA into Job Monitoring of Process Control

Hi Gurus,
I have an issue regarding with the Job Result of when using SOD sub-scenario in Process Control. We have integrated AC and PC and the controls that have been set for automation, however, the fields (User ID, Name, Group, Risk Description, etc.) are not showing on the PC Job result like the ARA can do. Below information are given:
1. In ARA --> User Level --> Simulate the risk analysis with Business View format --> Result --> choosing Management Summary --> above mentioned fields are shown.
2. In Automated Monitoring --> Choosing Management Summary --> onlyfields of technical view format are the only ones that can be shown (User ID,Risk ID and Control ID).
Thus with this, is there any possibility that the Result of the Job Monitoring of the PC can be manipulated? If yes, can you provide some steps?
Hope you can help me on this.
Kindly refer on the attached file for more info.
Thanks!
Mackoy

Christopher,
Re-generating the transfer structure does not need InfoPacks to be re-created. if you are still getting the old error, two possibilities:
1) You created a new DataSource with new transfer structure, etc. but the InfoPack in the process chain still points to the old trsnfer structure.
2) The data in the table has some records as MM/YYYY and some as YYYYMM.
You don't need to re-create the InfoPacks if your transfer structure is re-generated. They should work off the latest definition always.
Cheers
Aneesh

Process Control Error in Workspace

Hello Gurus,
Please Help me in this ASAP.
we have stopped our Production servers and in the process of up and running Disaster recovery servers.
completed the following tasks.
system configurationis successful
registered the application successfully
when we are trying to access the process control in data tasks getting the follwing error message.
ERROR 1B6 Object doesn't support this property or method
please anyone advise what the problem exactly and ASAP.
Regards,

Thank you for your reply Varun.
if i am not mistaken ru taking about configuration? i have completed all the configuration.
can u guide me how to set the metadata setting and ur taking about windows client or web?
please advise i need ur help urgently.
thanks...

Process Control Position in North Texas

We are looking for a hands-on process control person with experience programming in LabView and with NI compact Fieldpoint and CompactRio instrumentation. Job duties will include designing and building control and data acquisition systems for production equipment as a well as one-off pressure and and hydraulic actuated test equipment. Must be able to troubleshoot, maintain, and upgrade existing NI control systems with minimal oversight. Will also be responsible for collecting and maintaining test and process data. Mechanical design and AutoCAD experience a plus.

Dear hiring manager,
My name is Patrick Hart I have seven years experience developing in LabVIEW and have a lot of experience with both compact Fieldpoint and CompactRio. I also have a Mechanical Engineering degree so I have experience in mechanical design as well. Below is my resume.
Thank you for your consideration
Patrick Hart
[email protected]
801-928-3073
Patrick Hart
13073 SE Capistrano Ct Milwaukie Or 97222
Phone: (801) 928-3073
Email: [email protected]
[email protected]~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Summary
Experienced LabVIEW developer with expertise in configuring, building, and deploying test, measurement and automation systems.
Professional Summary
Measurements Engineer
Blount International, Inc. (August2011- Present)
Architect      and write automated LabVIEW tests to control dynamometers for DC motor      testing.
Develop      automated LabVIEW tests to run overnight to test durability of electric      tools.
Create      lab tests to simulate the environment of battery powered tools.
Characterize      DC motors to help make important product design decisions.
Design      signal conditioning to interface with multifunction daq boards.
Develop      LabVIEW Real Time and LabVIEW FPGA Embedded Loggers.
Design      test fixtures to test mechanical and electrical products.
System Test Engineer
EFV - Expeditionary Fighting Vehicle - Hill AFB (November 2009 – August 2011)
Developed software using LabVIEW to simulate vehicle signals and functionality for a real-time hardware in the loop PXI test system.
Developed software solutions interfacing with data acquisition (A/Ds and D/As), FPGA, CAN, and Serial Hardware (RS 232 and RS 485).
Wrote code that is compiled down to an FPGA using LabVIEW FPGA.
Develop and debug signal conditioning circuits.
Developed test procedures to validate software requirements.
Was part of a CMMI level five organization.
Possess an active secret security clearance.
Test Engineer / Field Applications Engineer
National Instruments (August 2005 - November 2009)
Configured PXI ATE systems for Test and Measurement applications
Integrated multi software platforms including LabVIEW, TestStand, LabVIEW Real Time, LabVIEW FPGA, C, MatLab, and VHDL.
Integrated multi-measurement hardware platforms including equipment from National Instruments, Agilent, Tektronix and LeCroy.
Interfaced hardware through software via multiple buses including: Serial, PXI, PCI, Can, GPIB, USB, Ethernet, and LXI.
Created and presented training and seminars on such topics as: LabVIEW, Data Acquisition, Industrial Automation and Rapid Prototyping.
Acted as primary liaison between R&D and customized client needs.
Increased efficiencies by incorporating LabVIEW into R&D, validation and production environments
Coordinated with R&D and marketing groups for new product suggestions and hardware redesigns.
Worked closely with client-engineers to develop test methods, custom software solutions and integration strategies.
Supported existing systems      and upgrades.
Managed major account      relations.
Supported and diagnosed      problems with existing ATE systems and made recommendations for upgrades.
Engineering Intern
Smith Lift (Smith International) (May 2004 - September 2004)
Designed and built prototypes for components of down hole pumps.
Designed and built test fixtures using 3D modeling tool Pro Engineer.
Designed and implemented tests and artificial environments to observe the behavior of the product in different environmental conditions.
Staged comprehensive failure analysis on field tested equipment.
Computer Technician / Technical Support Representative
Sento Corporation (October 2000 - April 2003)
Provided tech support services to integrate software and hardware.
Diagnosed problems with proprietary software.
Educational Experience
BS – Mechanical Engineering – Brigham Young University 2005
Learned Java, C, MatLab, Unigraphics (UG), and Maple
Took graduate courses on Advanced Materials and Composites
Additional Skills
Advanced LabVIEW programmer
CLAD Certified
Experience with TestStand
Experience with C, and Java
Fluent in Portuguese (written and spoken)

Process Control - Access Control Integration

Similar Messages

Maybe you are looking for