Request Administration in GRC 10.

Dear GRC Experts,
Currently, my GRC system in I have two issues in GRC AC 10 (SP 10), for which I couldn't find an answer here. Help me if you have encountered the same and solved it.
1. When we search the request, we are not able to see the approver there with whom request is pending.
    - We have created a BRF+ initiator and agents. we rechecked again to make sure that we have not skipped any step.
    - Even the version generation was without any error).
    - Also made sure that the Approver of the request has the correct GRC R/3 Role assigned.
2. When we go to Access Request Administration, there we can't find where the request is pending, we are not able to approve any request with admin rights. In the other action there no drop down is available or no approve or submit. It has only "other Actions" as the option and it has only 'return' which prompts to return at any stage.
    - I have assigned all the admin / super user roles to the administrator, but still he is not able to see perform any activity, apart from cancel instance.
3. We have selected the functional area during the request, however we are not able to see post submission of the request. The administrator is not able to see the functional area selected. I have also checked in the user detail tab but could not find it.
Please advise.
Look forward to hear from you.
Regards,
Sahil.
Message was edited by: Sahil Bhanushali

Hi Sahil,
I have migrated to GRC V10 2 months ago and also have been struggling against issues with Request with no approver found and that could not be redirected in Administration.
I have reviewed all my Decision Tables - Table Settings - and marked "Return initial value if no match is found". With this flag, I could define a Escape Route for Approver Not Found and set up a PATH with one stage for which a BRF+ rule find the proper GRC Support Team to be the approver.
In my case I have some people designed by Company pattern [NA_*] for North America, [SA_*] for South America an so on...
With that, I am now receiving the requests with no approver and use Administration to fix information in the request and then Return to the proper path. I can also you manual Forwards with return to involve proper managers.
Hope this can help you.
Vaner

Similar Messages

Request Administration in GRC10

Hi Experts,
I have two issues in GRC AC 10, for which I couldn't find an answer here. Help me if you have encountered the same and solved it.
1. When we search the request, we are not able to see the approver there with whom request is pending.
2. When we go to Access Request Administration, there we can't find where the request is pending, we are not able to approve any request with admin rights.
Regards,
Sabita

Hi Sabita,
Check a few things as we experienced this issue during our Development tests recently at a client.
1) Check that the Approver of the request has the correct GRC R/3 Role assigned. Also check that the roles have a owner assigned and that you have an escape route set up etc.
2) Has the MSMP workflow changed? We found that when for some reason it had not generated the version correctly, we had such errors.
3) Has there been a change to the initiators/BRF+ rules (if any used)? This sometimes does make a strange impact on the workflow from performing properly.
4) Once all this is checked, it might be worth re-creating the same request and trying to approve it again. We found that once we re-activated the workflows and ensured the custom BRF+ rules were re-checked and re-activated, we didnt seem to encounter that problem again.

Issue with 'Archivation of Request Administration Data' in BW

I read couple of SAP notes and SDN about how to reduce database size in BW. There is one way told us 'Archivation of Request Administration Data'. The link is http://help.sap.com/saphelp_nw70/helpdata/en/42/ead8d7b55e1bd2e10000000a11466f/content.htm
The information from SAP help site is still not very clear to me about how to implement this activity step by step. Does anyone have experience on 'Archivation of Request Administration Data' in BW system? Please advise.
The last support package in my system is SAPKW70020.
Thanks a lot!
rajatina.

Hi Comandante Che Guevara
Please find the below links... this may be helpful to you...
http://help.sap.com/saphelp_nw70/helpdata/en/42/ea99e6b2161bc9e10000000a11466f/content.htm
https://cw.sdn.sap.com/docs/DOC-17088?treeid=DOC-7670
http://help.sap.com/saphelp_nw70/helpdata/en/42/ead8d7b55e1bd2e10000000a11466f/content.htm
Regards
Sudheer

Request Administrator isuse in OIM 11g

I assignd one OIM user (12345) to role as "Request Administrator" and trying to search all the requests raised in OIM.
I am not able to see all requests .It shows the requests only raised for 12345 user or raised by 12345 user but not other users request.
Please let me know the reason.
Thanks for help.

user123456 wrote:
What do you mean by Claim/acquire the task?There's a small button on top of the page in OIM UI which you can click to acquire the task to your self from some else.
There must be some Role in OIM 11g who can manage all the tasks/requests irrespective of whether it's created by them or assign by them.I doubt if that's simple, why want one single role to manage everything while you are assigning it to some other? Assign it to this role always then!
Do you have any idea about such kind of Role?No
Thanks !!

Archivation of Request Administration Data

Hello,
I need to archive SAP BW administrative data (Archivation of Request Administration Data ). Does anyone have practical experience with this? If yes ,please share with me.
I have read SAP help and just need your guidance.
Thanks a lot

Hi Comandante Che Guevara
Please find the below links... this may be helpful to you...
http://help.sap.com/saphelp_nw70/helpdata/en/42/ea99e6b2161bc9e10000000a11466f/content.htm
https://cw.sdn.sap.com/docs/DOC-17088?treeid=DOC-7670
http://help.sap.com/saphelp_nw70/helpdata/en/42/ead8d7b55e1bd2e10000000a11466f/content.htm
Regards
Sudheer

How to request Administrator or root to execute java programs?

How to request Administrator or root to execute java programs when the user is not enough permission?
as same as following image:
Windows : http://img151.imageshack.us/img151/6113/winrw5.gif
Linux: http://img374.imageshack.us/img374/8990/linuxsj4.png
Edited by: lauangus on 2008?10?13? ??9:15

Dear Sys Admin,
Would you please grant me and my group enough rights to do the tasks that have been assigned to us, we are using the following programs. They will need to asccess....
Sincerely,
lauangus
Note: this will usually have to be accompanied by appropriate supervisor signatures and endorsements.

Role created in ERM is not appearing in CUP request for assignment-GRC 10.0

Hi,
We are on GRC 10.0 - SP5
We have created a role in ERM and it was succesfully created in backend system. However when we tried to assign the same role using CUP request - the role is not appearing.
1) Do we need to upload roles for CUP in GRC 10.0 (similar to 5.3) to populate. Will the role doesnot automatically appears in GRC database for CUP as it is created through ERM?
2) If the roles are imported in ERM with role owner information, does the same reflects for CUP also for role owner approver assignments?
Thanks and Best Regards,
Srihari.K

Hi Sri,
Is the role status set to "production" ??
Cheers,
Diego.

Search request issue in GRC AC10.0

Hello Experts,
When we want to check the status of the request logged by others by using the below option we are not getting any results
GRC 10.0 with SP14.
My Home ->My Profile -> Request Status then click on the Change Query. In the Change query screen enter the request number created by others and click on Preview.
This is not authorization issue. We tested with user having SAP_ALL authorization.
Does anyone has any idea?
Thanks in advance
Hari

Hi Hari,
When we talk about page My Home / My Profile, this shows the information which is related to me/us only. If end user logon using this page/link, he/she can see his/her own data.
Change Query is to filter the existing data which comes at the time of loading/refreshing the window. This should not show data out of scope.
So request status using my home page would not be able to show data for other users.
Search Request link is the only way to check others request data.
Thanks & Regards
Neeraj

Role of Administration in GRC

Hi GRC Experts
Can anybody please share his experience/knowledge on role of Netweaver Administrators in GRC Process Control & Access Control?
Thanks in Advance
Varun

Thanks Claude, I really appreciate you taking the time to reply
We too have opened a message with SAP now, I will check the patch level, maybe that's where the problem lies. Since it's amounting to re-work, we have stopped using RE for now. Also, 5.2 RE is not adding any major value for us, I still like PFCG way better! Maybe we can consider 5.3 RE later on.....I will keep you updated if we apply the hot fix and we test RE again.
Thanks again
Abhishek

Solution Manager Change Management: Transport Request Administration

Hi.
We want to use the CHARM functionality of Solution Manager to improve our transport operations. We have several customers and expend´s a lot of time making tranports to different systems.
I don want to activate CHARM completely. Which activities do i must perform, and which activities do i must leave ?
Regards
Alvaro

Hi Avinash
This is the Business Scenario: Our company is using SAP Solution Manager to perform monitoring and administration activities for over than 30 customers.
Dayly we espend over 85% of the basis team time making transport for all of the customers. We decide to set some internal politics to bundle transports, stablishing several releases of them, at specific hours of the day. So we want to use SOLMAN`S change logistics instead of CHARM Scenario to control and improve this activitiy, releasing time to perform other activities.
Regards
Alvaro

CUP 5.3. Request administration

Hi together,
How is it possible to have a look at all requests which are edited by the admin?
Our revisors want to see all requests, where the admin has to react.
Is it only possible to get this information about reports etc?
Thanks.
Alexa

Hi,
I know I know, but this is really not user-friendly! A clearcut solution would be fantastic
It can even be that the admin is also role-approver or even manager-approver, so that you have to go through a lot of requests for searching.....but you know...
But thanks a lot!!!
Kind regards,
Alexa

Approve Request for GRC

Hi Experts,
I am new, relatively in the mobile space. Here in our company we would like to use the Approve Request Fiori APP specifically to approve the GRC request.
The GRC server resides in other box where I have not installed Fiori. So my question is very simple. Do I need to install fiori in the GRC box in order to see all the requests? or when I created or enabled the services the System alias will be poiting to my GRC box?

Hi Jose,
Which server has NetWeaver Gateway components?
Frontend server - NetWeaver Gateway and Fiori UI. ( I guess your case is ERP)
Backend server - The server which has GFC inbox. ( I guess your case is GRC central server)
Frontend server and backend server should be connected with trusted RFC.
Regards,
Masa
SAP Rapid Innovation Group - RIG

GRC - Security Administrator task

I have the intermediate knowledge about installing, configuring and administration of all the 4 components of GRC. I know how to interconnect all of them, wherever possible. I tried to go through some of the GRC Forums and found mostly related to my current knowledge about using and configuring GRC Components.
Now would like to know, if this is sufficient for a security admin career in SAP GRC. Do I need more knowledge about some other topics. All the SOD and risk are categorized by Functional owners, therefore, I dont have much idea about them, i only know the administration of GRC.
Thanks,
Sanjay

Hi Sanjay,
Following few areas that I would recommend:
- Knowledge of Web-services of Access Control
- Integration knowledge of Access Control with IDM
- Integration knowledge of Access Control with BI for reporting purpose
- Knowledge of Greenlight adapters for Non-SAP systems
Information for above topics is available on BPx --> How-to-Guides. Following is the link:
https://wiki.sdn.sap.com/wiki/display/BPX/Governance%2C%20Risk%2C%20and%20Compliance%20%28GRC%29%20How-To%20Guides
Where as documents for Greenlight adapters are part of the adapter software.
Best Regards,
Sirish Gullapalli.

CUP open request can not be cancelled

GRC AC 5.3 SP 10 CUP
There are some old open CUP requests for super user access. I need to cancel them.
When I try to cancel a request from config - request - administration - it gives me a message that "failed to cancel follwing request".
Also if I click on the request number to see detail then it gives message - "Request Approval Screen is not displayed because Request Status has changed" and it does not show the request detail and remains in the same list of requests screen.
If I click on a closed request number - in next screen, it shows the same message but I can see detail request.
Recently We upgarded GRC to SP10 from SP4. Previously I cancelled CUP requests this way.

Hi Pal
The request can be cancelled by the approver of the request. You can however cancel the request as an administrator in the configuration section in CUP.

GRC 10: Deleting the Ruleset.

Hello Guys,
Anyone has a clue how to go about deleting an existing Ruleset in the system? I tried in SPRO - Delete Ruleset but it is not working. At the same time, I see an option in the nwbc also, which is to Delete the ruleset.
1. Any idea how we should go about deleting the existing Ruleset?
2. What is the difference between deleting from NWBC and deleting from SPRO?
We have 3 Physical systems A, B and C and the connector groups are:
Logical Group 1 - Having A&B systems.
Cross Group 2 - Having A&C systems.
Any ideas appreciated.
Regards.
Edited by: sapgrc10 on Nov 7, 2011 8:14 PM

Hello Asheesh,
Thanks for your reply. Besides SAP_ALL and SAP_NEW, I also have allmost all the roles to myself as under:
SAP_GRAC_ACCESS_APPROVER     Role for Access Request Approver
SAP_GRAC_ACCESS_REQUEST_ADMIN     Role for Access Request Administrator
SAP_GRAC_ACCESS_REQUESTER     Role for End user
SAP_GRAC_ALERTS     Generate, clear and delete SOD Alerts
SAP_GRAC_ALL     Super Admin for AC
SAP_GRAC_BASE     Base Role for all Access Control Users
SAP_GRAC_CONTROL_APPROVER     Create AC MIT control, approve, assign, Alerts and perform Risk Analysis
SAP_GRAC_CONTROL_MONITOR     Ability to assign MIT control to a Risk and perform Risk Analysis
SAP_GRAC_CONTROL_OWNER     Create AC MIT control.
SAP_GRAC_DISPLAY_ALL     Display Access To All AC Objects.
SAP_GRAC_FUNCTION_APPROVER     Approve Function for Workflow
SAP_GRAC_NWBC     View Access Control Information Architecture.
SAP_GRAC_REPORTS     Ability to run all AC reports.
SAP_GRAC_RISK_ANALYSIS     Ability to Perform Risk Analysis
SAP_GRAC_RISK_OWNER     Risk maint. And Risk Analysis
SAP_GRAC_ROLE_MGMT_DESIGNER     Role Management Designer
SAP_GRAC_ROLE_MGMT_ROLE_OWNER     Role Owner
SAP_GRAC_ROLE_MGMT_USER     Role Management Business User
SAP_GRAC_RULE_SETUP     Ability to define Access Rules
SAP_GRAC_SETUP     Ability to setup Access Control
SAP_GRAC_SUPER_USER_MGMT_ADMIN     Super User Administrator Role
SAP_GRAC_SUPER_USER_MGMT_CNTLR     Super User Controller Role
SAP_GRAC_SUPER_USER_MGMT_OWNER     Super User Owner Role
SAP_GRAC_SUPER_USER_MGMT_USER     Super User Firefighter
SAP_GRC_FN_ADISSUE_PROCESS     Ad-hoc Issue Processer
SAP_GRC_FN_ALL     GRC - Power User
SAP_GRC_FN_BASE     GRC - Base role to run GRC applications
SAP_GRC_FN_BUSINESS_USER     GRC - Business User
SAP_GRC_FN_DISPLAY     GRC - Display
SAP_GRC_FN_POST     Role with Post Authority Only
SAP_GRC_MSMP_WF_ADMIN_ALL     MSMP Overall Administrator
SAP_GRC_MSMP_WF_CONFIG_ALL     MSMP Overall Configurator
SAP_GRC_NWBC     Governance, Risk, & Compliance
SAP_GRC_SPC_SCHEDULER     Authorization to schedule background jobs
But still having the problem. When I press the execute botton to delete, the system does not do anything, neither does it give any message or error.
Anything else, that I am missiing?
Also, my second question was if there is any difference deleting the ruleset from NWBC or from the Frontend or are these both the same?
Thanks in advance!
Edited by: sapgrc10 on Nov 8, 2011 5:27 PM

Request Administration in GRC 10.

Similar Messages

Maybe you are looking for