Process control inheritence to child org units - GRC 10.0

Hi All,
We created few process controls in Parent Org Unit - X. We assigned mitigation control ID and access risks to these controls along with control owners. These process controls are being used as Standard Global Controls
We created another Child Org Unit - Y and copied the sub-process and then selected only 1 or 2 controls which are applicable to the Child Org Unit. This will allow us to use few Global controls and create local controls if required.
Now the issue we observed that the Child Org Unit does not carry the Mit. Ctrl ID & Access Risks & Owners from the same control of Parent Org Unit. When we tried to provide the same Mit. Ctrl ID it is stating Mit. Ctrl is not UNIQUE.
Our requirement is we would like to have the same Mit. Ctrl ID for Global Controls both at Parent & Child Org Unit and different Mit. ID for local controls at Child org unit. This will be easy to identify controls which are from Global & Local for testing and other reporting purposes.
We understood that since we are copying the sub-process to Child Unit it is taking only Process control details, not the access control information as it is provided in Org Unit
Can somebody please guide how to acheive the above requirement. How to inherit all the controls from Parent to Child Org unit reflecting Mit. Ctrl ID, Access Risks and Owners
We are on PC 10.0 - SP07
Thanks and Best Regards,
Srihari.K

Hi Sabita,
Did you check this article on Content Life Cycle Mngt supports all SAP GRC products. Check the link for detailed article and I hope this would be right direction for your company to go.
http://www.sdn.sap.com/irj/bpx/go/portal/prtroot/docs/library/uuid/e0431d8f-2298-2e10-5fb0-87840e285f4c
warm regards,
Asok Christian

Similar Messages

I have to find the 10,000 levels below the Child Org unit based on Parent o

Hi,
My requirements is that Use enters a Root organisation in the selection screen , based on which I have to find out and display
the Child org units upto 10,000 levels. Can anyone pls tell me how to proceed ??.

You can use SAP function 'RH_STRUCT_GET'with objectype = 'O', objid = provided org, evaluation path (ACT_WEGID) = 'A002', depth (ACT_TDEPTH) = 1000 .
Rgds.

Team Calendar for Parent & Child Org. Unit Display

Hi Experts, We have a requirment to show child org. unit employees which is associated with parent org. unit. When a employee is in parent org. unit he should be able to see the employees in child org. unit in the team calendar, this is the requirment. In V_PTREQ_TEAM we are maintaing 00000001 SAP Standard 01.01.1800 31.12.9999 Team View Mode View Group (MSS) ESS_LEA_EE In V_TWPC_OBJSEL Object Selection : ESS_LEA_EE_DIR Rule for Objects :ESS_LEA_RULE1 Rule for Target Objects : ESS_LEA_RULE5 In VC_TWPC_OBJSELRULE ESS_LEA_RULE1 is for Org. Unit with evaluation path PTXSSORG ESS_LEA_RULE5 is for Person with evaluation path PTXSSDIR But I have tried here with coster evaluation path and other evaluation path, But desired result is not achieved. Do we have to use here any specific funtion module here in VC_TWPC_OBJSELRULE. Please advise. Regards, IFF

Hi,
Go through the below link if it is helpful to you any way, I think you might need to do some customizations.
http://scn.sap.com/community/erp/hcm/employee-self-service/blog/2014/02/07/manager-self-service-mss--mss-team-view-managers-who-do-not-hold-chief-position
Regards,
Mohsin.

GRC AC 5.3 and GRC Process Control on the same server

Hello,
Can we install SAP GRC AC 5.3 and GRC Process Control 3.0 and GRC Risk Management 3.0 on the same box/ same server.
Is there a OSS Note, which talks about having the above 3 components on one box?
Thanks,
Imran

Hello Imran,
1- My 3 question ARE do I need a separate JAVA Stack for GRC Process Control and seperate JAVA Stack for GRC Access Control
-> No, you can have them installed on save Java stack.
OR
Can I use the same JAVA Stack for GRC Process Control & GRC Access Control?
-> Yes, you can. You have to make sure that you are on SP10 or above for Access Control as only then it will support NW Java 7.01.
2- Can I use EP 7.0.1 installed on same server for both GRC PC 3.0 and GRC AC 5.3?
-> Yes, you can.
3- Can 1 single AS JAVA Database contain both GRC Access Control VIRSA Tables and GRC Process control tables at the same time?
-> For process Control the tables reside on the backend SAP as it is webdynpro ABAP application and for access control the tables reside on the Java database as it is java and webdynpro JAVA application.
Regards, Varun

Org Unit inheritance link to Parent Cost Center - is this Config?

Hi
We started at a new client and have difficulty maintaining the Org Structure A 011 relationships to child Org Units. The system undoes our implicit links. We want the implicit links to be there and not inherited. Is it possible to switch off the inheritance in config?
Please assist/advise.
Thank you, Adrian

what do you mean when you say the system 'undoes' your implicit links? Did you mean the system undoes the inherited cc value by using the explicit cc-assignment done at an org unit level? if yes that is how sap works,... the options are
a. do not do explicit creation of cost center to org unit . that way assigning a cost center at the top org unit will suffice as that will be inherited to all org units down the structure. But this is not a workable business scenario at all.
b. determine the explicit cost center assignments at each org unit level and do the assignment accordingly.
lastly : I dont think inheritence of cost center is something you can deactivate in img.
cheers

Obtaining Org Unit from Business Partner number

Hi, I am trying to obtain an org unit object id from the bp number that is created when the org unit is created. I am in a BP BADI, so I only have the bp number, and am in the process of creating a new org unit when the BADI is called. I have tried to use RH_STRUC_GET but because we are in the creation process this does not retrieve any results. I understand that this fm reads a buffer to get its results, and the org unit is obviously not in the buffer at this time.
Could anyone help me to find a function module that will find the org unit in this case?

Hi Ratikant,
Thanks for your suggestion. This may work if I was looking for an employee's org unit, but I was actually looking for the BP record for the org. unit that was being created. It would also depend on whether this function module would work before the save and commit has occurred.
I cannot test you solution since I managed to implement a work around where I saved the org unit using a funtion group in another(earlier) BADI so that I could retrieve it in this BADI. This has been tested and implemented and I don't want to cahnge what is already working!
Many thanks though!

Org Unit that controls shipping activities

Question- Which is the org unit that controls the shipping activities of goods?
Ans-1. Plant and storage location
Ans-2. Shipping point
Ans-3. Distribution channel
Which one is the correct?

Hello,
SHIPPING POINT is responsible organisational unit for shipping. and shipping activities
As you aware for delivery creation the SHIPPING POINT is mandatory.
The definition of SHIPPING POINT clearly says as,
Shipping point is an Independent organizational unit that performs shipping processing. You can have many shipping points for a plant but delivery is possible thorugh only one shipping point
The Organisation unit which falls under the LOGISTICS EXECUTION is shipping point and you can find the the organisations units under LOGISTICS EXECUTION which are also responsbible for shipping like, loading point, transportation planning point.
In your question it is the SHIPPING POINT which is controlling the shipping activities

GRC Process Control Tables - Specially tables Related to CONTROLS

Could anybody please let me know the naming convention of tables related to the CONTROLS in SAP GRC Process controls.
Also could anybody please let me know in which document (source) can I find the tables related to Controls and I am also looking for relation behind these tables.

HRP1001 and HRP1000 are the master data tables. go to tcode GRFN_STR_CHANGE to see your org structure. hope this helps

Document Management in GRC 10.0 Process Control 10.0

Hi - Our Company is looking to implement GRC 10.0 Process Control 10.0. We have a bit of a challenge for which document management services to go with . Currently there is no integration between GRC 10.0 and OpenText or Sharepoint. I was wondering what solutions others have for Document Management in GRC 10.0
Thanks

Hi Sabita,
Did you check this article on Content Life Cycle Mngt supports all SAP GRC products. Check the link for detailed article and I hope this would be right direction for your company to go.
http://www.sdn.sap.com/irj/bpx/go/portal/prtroot/docs/library/uuid/e0431d8f-2298-2e10-5fb0-87840e285f4c
warm regards,
Asok Christian

Joining table in GRC 10 Process Control

Hi,
I am trying to create a new Data Source in GRC 10 Process Control. I need to join tables AGR_1251 (main table) and AGR_USERS. I am selecting AGR_1251 as main table. However, nothing comes up when I try to select AGR_USERS as 'Related Table'. On searching AGR_USERS , the system does not return any tables. Both are transparent tables and hence can be joined. I tried using both 'Reference Tables' as well as 'Dependent Tables' .
Can you also explain the difference between 'Reference Tables' and 'Dependent Tables'.
Regards,

Hi Amarnath,
tables is used to provide the table for the CURR(currency) or QUAN (quantity) fields.
In your case you want to join tables via foreign key(s) and therefore will have to use dependant tables.
The search for table AGR_USERS as dependant table for AGR_1251 will not return anything since the only table
referred as check table (for a foreign key) in AGR_1251 is AGR_DEFINES.
I would suggest to build your query based on defined check tables (see se11) of the needed tables (in this case AGR_DEFINE is the common point of both AGR_USERS & AGR_1251).
Kind regards,
Pascal

SAP GRC 10.0 Process Control - IT, HR and FICO Controls

Hi,
I need more details about GRC 10.0 Process Control - IT, HR and FICO Controls. Normally we are using standard controls in implementation. According to the business as well as industry requirements, we can create new custom controls. Can you please elaborate IT,HR and FICO controls and their significance in Process control implementation.

Dear Reddy,
as you are asking for suggestions on internal controls I would strongly recommend to check out my document in this regard.
http://scn.sap.com/docs/DOC-56548
Let me know if you have any specific question.
Regards,
Alessandro

Controlling area already used for org. unit problem

Hi people,
can you please help me with one problem, my customer is upgrading SAP HR from 4.6 to 6.0 and now we are testing QAS system.
When I create new or. unit in PPOME, I have Cost-centre inherited from the org.unit above, but when I want to put another Cost-centre it gives me the next error "Controlling area HR01 already used for organizational unit XXXXXXXX".
The same procedure worksin PRD system which is on version 4. 6. Could you please help me what is wrong because i am not able to change cost centre in the QAS system.
Thank you.
Romano
Edited by: Romano Cinotti on Oct 13, 2009 11:25 AM

Hi,
To which object u are going to change the cost center i.e, position, job, org.unit.
If you are changing the cost center to position, If it is not allowing to change the cost center then u have to check the parameters:
May be u already assigned cost center
May be u already assigned cost center to ur org, unit, which u assigned to ur position. If u already assigned diffrent cost center to ur org.unit, you may not change the cost center to ur position or job.
Regards
Devi.

SAP GRC Process Control - General Questions

Hi all,
We have the following general questions regarding SAP GRC Process Control:
1) Assume that we have set up 5 different SAP Connectors in Process Control. When you configured a specific rule and control and then, schedule the job for such control, how does the system (SAP Process Control) knows which back-end system needs to be accesed for such control?
2) In which language are the out-of-the box rule steps's script coded? In which different languages can those scripts be coded, what is to say, in which language can we code our own scripts?
3) How is the detailed flow between SAP Process Control and SAP Back-end system?
Many thanks. Regards,
Imanol

null

Can we rename ABAP roles in GRC Process Control to adhere to naming convntn

Hello,
We are working on a new implementation of the GRC Process Control 2.5 product. It comes with 11 standard roles. I wanted to change the names to adhere to our company's role naming conventions. Will this adversely affect any functionality. I know that in PC, there is a additional level of security that is maintained thru the NWBC. How will that be affected? And is it typical to have a non-sap security team maintain the roles/user thru the NWBC and have SAP Security maintain the ABAP users/roles?
Thanks in advance.

Hi Arvind:
We copied the standard delivered ABAP roles to our namespace, made a few additional changes and are using them no problem. We also copied the NWBC roles to our namespace. We have the default roles as reference. We did this for consistency, but also because ABAP roles and App roles can change as the App roles did in SP04. This way we compare the app roles before and after a SP to make sure we agree with any role changes introduced to default roles. This way, we don't unknowingly introduce changes to our roles based on the changes SAP introduces to their roles at any given point.
As far as the tester role goes, it is at the Process level. If you aren't sure go into the app under User Access => Roles and their tasks like you will assign it and restrict the selection to "proces". You will see it is at the Process level. As far as the rest goes, you seem pretty well versed in the security guide so I'm sure you know this, but as long as the level of the role is equal to or greater than the task you can assign it. Ex: You can assign a control level task to a Corporate level role but not a Corporate level task to a control level role.
I hope this helps.
Matt

Are GRC Access Control, Process Control and Risk Management separate?

Are these 3 different modules that you have to purchase separately or are they included in one suite?

Hi Anne,
If you are refering to GRC Access Controls 5.3, Process Control 3.0 and Risk Management 3.0 - All 3 are separate.
A new version of GRC 10.0 has been launched which is currently in ramp up. This has all the above 3 in one suite.
Thanks and Best Regards,
Srihari.K

Process control inheritence to child org units - GRC 10.0

Similar Messages

Maybe you are looking for