Roles in CUP

Hi,
We imported all the roles from SAP into CUP. CUP however requires certain mandatory fields e.g. Role Approver, Business Process, Functional Area, etc which we would like to use. Does this have to be maintained in CUP? I know you can export the roles in excel, update the file and import back to CUP. Can this be maintained in SAP when creating the roles?
The reason I ask, what happens if new roles are maintained in SAP, a sync is done to CUP but someone forgets to maintain these mandatory fields.
Please advise.
Regards,
Mo

Hi,
Thanks for the prompt reply.
We are not using ERM. We are also in the process of a role redesign. I understand that it is best to use the excel and that is the approch we are taking. However, in event that the implementation is complete and new roles are created in SAP, what is the best practice to keep CUP clean (i.e. include fields like Functional Area, Business Process, etc).
Regards,
Mo

Similar Messages

Deleting roles from CUP

Gurus,
We accidently synced CUP with our EP which points to an ABAP stack (therefore tens of thousands of roles!). There are over 6,000 pages of roles in CUP that need to be deleted. Do we have to do this page by page or is there another way?
Thanks,
Grace Rae

Hi Grace,
Role deletion in CUP can be either rolewise or pagewise. However there is an easier method where you can disable the Roles in one go. The Disabled Roles do not get displayed to Users at the time of Request creation.
The Role Upload Template which is used for importing these Roles in CUP would be needed here. There is a 5th field for Systems in the template, which had to be modified.
If the System for these Roles is EP then just replace it with EP(D) in the Role Upload Template. After this modification import the Template again and check the Overwrite Existing Roles option.
Hope this will minimize your efforts in deleting Roles.
Regards,
Nikita.

Synchornized automatically roles into CUP from Backend

Hi all,
We would like to synchronize the roles between backend and CUP both periodically and automatically.
We have only RAR and CUP modules in our GRC.
We can synchronize the roles between CUP and backend by executing regularly the import role job in CUP from Configuration->Roles ->Import Roles or roles could be loaded from backend.
But we are looking for a way to synchornized automatically a list of roles into CUP from backend. It is possible?
Thanks in advance
Marta

Hi Marta,
nope, unfortunately there is no feature to do so.
Best,
Frank

Deleting connectors and roles in cup

Hello,
While deleting connectors and roles through CUP its showing some dependancy error of requests.So first we need to delete the requests or archive the requests.Can we delete the requests through database level or not.

depends on your support pack level, if you are SP11 or higer you maybe able to delte it using a eature provided in GRC.
What is your SP level?
regards,
Chinmaya

Error while trying to assign a role via CUP in Portal

Hello Experts,
I am trying to create a request to assign a role in EP via CUP ( 5.3)
EP Connector is working fine as I have imported Portal roles etc
SPML service is working fine
I have done the mapping in the Provisioning tab for Portal system
logonname in portal is email address of an employee
So the I have done the following mapping
AC Field Application field
email addres-Stndard logonname
And I have the following error while trying to create a request which I grabbed form the log
ERROR Exception during EJB call, Ignoring and trying Webservice Call
LinkageError: loader constraints violated when linking com/virsa/cc/xsys/webservices/dto/WSRAInputParamDTO class
ERROR com.virsa.ae.core.BOException: Exception from the service : Invalid System
com.virsa.ae.core.BOException: Exception from the service : Invalid System
ERROR : BO Exception in Save request
Any suggestions would be really appreciated
Regards
Kev

Kevin,
I was able to replicate your issue and there is a setting in the CUP that you have to disable, Goto the config tab in the CUP and select NO for the "Risk Analysis On Request Submission " under risk analysis.
Issue here is you did not create a connector for your EP in the RAR, I believe you have the above mentioned parameter to yes and so when you are submitting a request CUP is trying to do the risk analysis but RAR was not able to find any System, so it is thowing an error.
You can resolve this issue in two ways, one is to create a connector in RAR or the other is to disable the setting in the CUP.
Hope this helps.
Naveen

Error Provisioning the Federated roles from CUP to enterprise portal

Hi Gurus,
Need help. I am trying to provision the roles to enterprise portal using GRC CUP. I have created the connectors and field mapping and the connection is successful. We have a enterprise portal with producer consumer relation ship. The Enterprise portal acts as consumer for the BI portal. The BI portal Roles are federated to Enterprise portal and i get an error "noSuchIdentifier" when I try to provision the federated BI Portal role on the Enterprise portal. I can successfully provision the local portal roles and UME roles on the enterprise portal. I get the error only when trying to provision the roles which are from BI portal.
Appreciate any help, in this regards.
Thanks,
Pavan

Hi Alma,
This is one of the security issue.We had faced it sometime back.We searched some CSN's and found a solution.
Go to Service Market palce and download the latest Cryptographic Tool kit (Service Market place---->software downloads)
You will get a sca/sda something like tc/iaik./security(something like this)
Deploy this on to your instance using your SDM.
After that,Restart the Portal patching.It will go fine.
reward points if helpful................

CUP SP12: Can no longer import roles to CUP from ERM

Hello All,
I can no longer import roles from ERM to CUP on SP12. What is going on with SP12? Error message: "Action failed."
Log info:
2010-06-14 14:13:52,933 [SAPEngine_Application_Thread[impl:3]_20] ERROR
com.virsa.ae.dao.NoRecordsFoundException: No Records Found ..
com.virsa.ae.dao.NoRecordsFoundException: No Records Found ..
at com.virsa.ae.dao.dto.LocaleFieldContainerDTO.getRecordsList(LocaleFieldContainerDTO.java:127)
2010-06-14 14:13:52,935 [SAPEngine_Application_Thread[impl:3]_20] ERROR com.virsa.ae.configuration.ConfigurationException: No Records Found ..
com.virsa.ae.configuration.ConfigurationException: No Records Found ..
at com.virsa.ae.configuration.bo.ImportRolesBO.upsert(ImportRolesBO.java:979)
Is anyone else running SP12 with CUP & ERM?
Best Regards, Dylan

SAP came back and mentioned that I had some role descriptions missing (empty value) and this was causing the issue.
The results vary by role type:
1. SINGLE roles CAN be imported successfully to CUP from ERM with missing role descriptions.
2. DERIVED roles CANNOT be import to CUP from ERM if the role description is missing.
The solution is to update the DERIVED roles with role descriptions. It's always good practice to have role descriptions for all roles, but many customers have different views on the importance/usefulness of role descriptions.
This didn't appear to be an issue before SP11, but oh well... Also, since the Role Description field in ERM is mandatory, the mass role import should not allow roles to be imported with missing role descriptions, but it does. I've mentioned that to SAP as well.
I'm going to close this thread as solved, with workarounds.
-Dylan

CUP Issue: Unable to see the expired roles

Hi All,
I am experiencing a problem which is explained below:
A ticket was raised in CUP for deleting role(s) in backend system which are expired. When I accessed this ticket to do the needful, I am surprised to see that the Expired roles are not visible to me!
However, I checked with another user and that user can successfully view thos Expired roles for that user mentioned in the request.
Can anybody give me a tip of how to analyze and solve this?
NOTE: My user id in CUP is having all the authorizations of administrator. I also have access to SU01 tcode in the backend system.
Please help.
Regards,
Faisal

Hi Diego,
Thanks for your reply.
i copied user who can view the expired roles in cUP to a new user via UME and checked. Still the same problem. BAsically these user are maintened in LDAP and when I copy the correct existing user to a new user, automatically it is getting created in UME. I am quit suspicious about this.
As far error in AE_UME, yes I have uploaded the latest copy of this after SP upgrade. I have not seen any error while uploading it. If it has any errors, then the user who can view expired roles should also have the same problem.
Please suggest.
Regards,
Faisal

Role created in ERM is not appearing in CUP request for assignment-GRC 10.0

Hi,
We are on GRC 10.0 - SP5
We have created a role in ERM and it was succesfully created in backend system. However when we tried to assign the same role using CUP request - the role is not appearing.
1) Do we need to upload roles for CUP in GRC 10.0 (similar to 5.3) to populate. Will the role doesnot automatically appears in GRC database for CUP as it is created through ERM?
2) If the roles are imported in ERM with role owner information, does the same reflects for CUP also for role owner approver assignments?
Thanks and Best Regards,
Srihari.K

Hi Sri,
Is the role status set to "production" ??
Cheers,
Diego.

CUP 5.3 (SP9) Role search in a CUP request

Dear Experts,
I have a problem. I cannot select roles by company selection in a CUP request. I believe I am not associating companies to roles correctly...I don't know what went wrong and what additional procedures that I have to follow to fix this problem.
I need this selection feature since we are going to give a set of roles to users (or let them select) according to the company that they belong to.
Here is what I did basically:
1. Under Configuration>Role Attributes>Custom Filed in ERM, I set up a custom filed "COMPANY" and put some values (COMP1, COMP2, etc).
2. Under Configuration>Roles>Attributes in CUP, I also set up companies that are exactly the same as those in ERM.
2. Then, I created a role (ROLE1) in ERM and gave a company attribute (COMP1) to that role. Now, ROLE1 should be associated to COMP1, theoretically, right?
3. However, when I crate a new user in a CUP request and then search for a role (ROLE1) by selecting company attribute (COMP1), the role (ROLE1) does not show up. This is my problem.
PS: I have no problem getting a role by functional area, business process, or other predefined attributes in CUP.
Please save me if you can.
HM

Hi Frank,
1. The company ID is identical in ERM and CUP, and properly assigned to roles?
=Yes (double checked).
2. You have imported the roles from ERM to CUP?
=Yes (CUP>Roles>Import Roles/Groups, and the role source is ERM).
3. Do the roles show up with the correct company assigned in CUP Role Search?
=No (please see below commnets).
When I search roles in ERM (Role Management>Role>Search), I can see the company ID under the tab "Custom Attributes".
When I search roles in CUP (Config>Roles>Search Roles), I don't see the company ID anywhere including the tab "Company" and "Custom Attributes".
Does this give you any clue?
Thanks,
HM

Deleting roles from GRC AC CUP

Hi
We had GRC 5.3 installed with SP05. We have archived all our existing requests and are trying to delete some of the roles from CUP. However when trying to delete the role it is giving a message "Cannot delete because this is referenced by request". Is there something else which i need to take care of? Will application of latest support packs help in this situation?
Appreciate your help regarding the same.
Thank you.
Anjan Pandey

Hi Anajan,
I feel some requests are still exist in GRC CUP for that particler role. Please follow the below steps and try to delete the Role again.
Go to CUP configuration tab > click on Request option under the workflow> choose deleting requests > next> then its asks to delete all requests and then choose Submit option.
once you click on submit button, you will get the message all existing requests are deleted with Job id.
finally go to the Roles and delete the required roles form the GRC CUP.
Regards,
Arjuna.

Provisioning EP roles and user groups through CUP

Hello experts,
I am configuring EP provisioning through CUP.
I created the EP connector as per the instructions in the config guide. But I have not added any parameter values or did any field mapping. I have imported necessary Portal roles.
My EP connector is tested successful. But when I try to provision a role through CUP, I get this error:
Error processing your request, Request no: 4 in stage : NEW_AS11.
In the log it shows, Field Mapping is not set for Application (EP)
But when I go to field mapping, I get this error for EP.
Data retrieval from system XP1 failed : com.virsa.ae.service.ServiceException: com.sap.engine.services.webservices.jaxm.soap.accessor.NestedSOAPException: Unable to create message from source.
I could not find much documentation on fieldmapping.
Are there any steps that I am missing for EP provisioning?
Thanks in advance..
Kee

Thanks for your response.
I have set up the parameters while setting up the EP connector in CUP.
My role search URI is correct but I am not sure about the last three parameters...
ASSIGN_GROUPS:OC sapgroup
ASSIGN_ROLES:OC saprole
CHANGE_USER:OC sapuser
CREATE_USER:OC sapuser
CREATE_USER:password password
DELETE_USER:OC sapuser
LOCK_USER:OC sapuser
LOCK_USER:islocked true
RESET_PASSWORD:OC sapuser
RESET_PASSWORD:password password
ROLESEARCH_URI - http://portalserver name:port number/UserRoleSearchForAEService_5_3/Config1?wsdl&style=document
ROLESEARCH_URI_USERNAME - same user Id I provided for the connector
ROLESEARCH_URI_PASSWORD See your system administrator for the value.
UNLOCK_USER:OC Sapuser
UNLOCK_USER:islocked false
ROLE_DATA_SOURCE -- ROLE.UME_ROLE_PERSISTENCE.un:   ??? What is the role data source?? Is the value that is provided is correct for the UME roles
SCHEMA_ID SAPprincipals   ?? What does this Schema Id mean???
USER_DATA_SOURCE ???? Should we mention the user data source on the Portal system. In our case, it is the LDAP. But what would be the corresponding parameter value for LDAP.
So when I go to field mapping to create one for EP, I get the following error:
Data retrieval from system XP1 failed : com.virsa.ae.service.ServiceException: com.sap.engine.services.webservices.jaxm.soap.accessor.NestedSOAPException: Unable to create message from source.
Log Details:
2009-03-03 14:28:48,055 [SAPEngine_Application_Thread[impl:3]_19] ERROR Error in gettting Field Def
com.virsa.ae.service.ServiceException: com.sap.engine.services.webservices.jaxm.soap.accessor.NestedSOAPException: Unable to create message from source.
     at com.virsa.ae.provisioning.idm.spml.request.SchemaRequest.sendSchemaRequest(SchemaRequest.java:131)
     at com.virsa.ae.provisioning.idm.spml.request.SchemaRequest.getSchemaAttributes(SchemaRequest.java:142)
     at com.virsa.ae.provisioning.idm.spml.request.SchemaRequest.getFieldDefinition(SchemaRequest.java:163)
     at com.virsa.ae.configuration.bo.FieldMappingBO.getSAPFieldDefList(FieldMappingBO.java:126)
     at com.virsa.ae.configuration.actions.LoadFieldMapAction.execute(LoadFieldMapAction.java:56)
     at com.virsa.ae.commons.utils.framework.NavigationEngine.execute(NavigationEngine.java:271)
     at com.virsa.ae.commons.utils.framework.servlet.AEFrameworkServlet.service(AEFrameworkServlet.java:425)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
     at com.sap.engine.services.servlets_jsp.server.runtime.RequestDispatcherImpl.doWork(RequestDispatcherImpl.java:321)
     at com.sap.engine.services.servlets_jsp.server.runtime.RequestDispatcherImpl.forward(RequestDispatcherImpl.java:377)
     at com.virsa.ae.commons.utils.framework.servlet.AEFrameworkServlet.service(AEFrameworkServlet.java:455)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
     at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:401)
     at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:266)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:386)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:364)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:1039)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:265)
     at com.sap.engine.services.httpserver.server.Client.handle(Client.java:95)
     at com.sap.engine.services.httpserver.server.Processor.request(Processor.java:175)
     at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:33)
     at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)
     at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)
     at java.security.AccessController.doPrivileged(Native Method)
     at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:102)
     at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:172)
Caused by: com.sap.engine.services.webservices.jaxm.soap.accessor.NestedSOAPException: Unable to create message from source.
     at com.sap.engine.services.webservices.jaxm.soap.SOAPPartImpl.setContent(SOAPPartImpl.java:192)
     at com.sap.engine.services.webservices.jaxm.soap.SOAPMessageImpl.<init>(SOAPMessageImpl.java:83)
     at com.sap.engine.services.webservices.jaxm.soap.MessageFactoryImpl.createMessage(MessageFactoryImpl.java:35)
     at com.virsa.ae.provisioning.idm.spml.request.SchemaRequest.sendSchemaRequest(SchemaRequest.java:118)
     ... 25 more
Caused by: com.sap.engine.lib.xml.parser.NestedSAXParserException: Fatal Error: com.sap.engine.lib.xml.parser.ParserException: XMLParser: Bad Attribute value: ' or " expected!(:main:, row:5, col:18)(:main:, row=5, col=18) -> com.sap.engine.lib.xml.parser.ParserException: XMLParser: Bad Attribute value: ' or " expected!(:main:, row:5, col:18)
     at com.sap.engine.lib.xml.parser.DOMParser.parse(DOMParser.java:139)
     at com.sap.engine.lib.xml.parser.DOMParser.parse(DOMParser.java:173)
     at com.sap.engine.services.webservices.jaxm.soap.SOAPPartImpl.parseDocument(SOAPPartImpl.java:221)
     at com.sap.engine.services.webservices.jaxm.soap.SOAPPartImpl.setContent(SOAPPartImpl.java:189)
     ... 28 more
Caused by: com.sap.engine.lib.xml.parser.ParserException: XMLParser: Bad Attribute value: ' or " expected!(:main:, row:5, col:18)
     at com.sap.engine.lib.xml.parser.XMLParser.scanAttValue(XMLParser.java:1403)
     at com.sap.engine.lib.xml.parser.XMLParser.scanAttList(XMLParser.java:1577)
     at com.sap.engine.lib.xml.parser.XMLParser.scanElement(XMLParser.java:1712)
     at com.sap.engine.lib.xml.parser.XMLParser.scanContent(XMLParser.java:2442)
     at com.sap.engine.lib.xml.parser.XMLParser.scanElement(XMLParser.java:1843)
     at com.sap.engine.lib.xml.parser.XMLParser.scanContent(XMLParser.java:2442)
     at com.sap.engine.lib.xml.parser.XMLParser.scanElement(XMLParser.java:1843)
     at com.sap.engine.lib.xml.parser.XMLParser.scanContent(XMLParser.java:2442)
     at com.sap.engine.lib.xml.parser.XMLParser.scanElement(XMLParser.java:1843)
     at com.sap.engine.lib.xml.parser.XMLParser.scanDocument(XMLParser.java:2845)
     at com.sap.engine.lib.xml.parser.XMLParser.parse0(XMLParser.java:231)
     at com.sap.engine.lib.xml.parser.AbstractXMLParser.parseAndCatchException(AbstractXMLParser.java:145)
     at com.sap.engine.lib.xml.parser.AbstractXMLParser.parse(AbstractXMLParser.java:160)
     at com.sap.engine.lib.xml.parser.AbstractXMLParser.parse(AbstractXMLParser.java:261)
     at com.sap.engine.lib.xml.parser.Parser.parseWithoutSchemaValidationProcessing(Parser.java:280)
     at com.sap.engine.lib.xml.parser.Parser.parse(Parser.java:342)
     at com.sap.engine.lib.xml.parser.DOMParser.parse(DOMParser.java:101)
     ... 31 more
2009-03-03 14:28:48,055 [SAPEngine_Application_Thread[impl:3]_19] ERROR com.virsa.ae.service.ServiceException: com.sap.engine.services.webservices.jaxm.soap.accessor.NestedSOAPException: Unable to create message from source.
com.virsa.ae.core.BOException: com.virsa.ae.service.ServiceException: com.sap.engine.services.webservices.jaxm.soap.accessor.NestedSOAPException: Unable to create message from source.
     at com.virsa.ae.configuration.bo.FieldMappingBO.getSAPFieldDefList(FieldMappingBO.java:134)
     at com.virsa.ae.configuration.actions.LoadFieldMapAction.execute(LoadFieldMapAction.java:56)
     at com.virsa.ae.commons.utils.framework.NavigationEngine.execute(NavigationEngine.java:271)
     at com.virsa.ae.commons.utils.framework.servlet.AEFrameworkServlet.service(AEFrameworkServlet.java:425)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
     at com.sap.engine.services.servlets_jsp.server.runtime.RequestDispatcherImpl.doWork(RequestDispatcherImpl.java:321)
     at com.sap.engine.services.servlets_jsp.server.runtime.RequestDispatcherImpl.forward(RequestDispatcherImpl.java:377)
     at com.virsa.ae.commons.utils.framework.servlet.AEFrameworkServlet.service(AEFrameworkServlet.java:455)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
     at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:401)
     at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:266)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:386)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:364)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:1039)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:265)
     at com.sap.engine.services.httpserver.server.Client.handle(Client.java:95)
     at com.sap.engine.services.httpserver.server.Processor.request(Processor.java:175)
     at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:33)
     at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)
     at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)
     at java.security.AccessController.doPrivileged(Native Method)
     at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:102)
     at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:172)
Caused by: com.virsa.ae.service.ServiceException: com.sap.engine.services.webservices.jaxm.soap.accessor.NestedSOAPException: Unable to create message from source.
     at com.virsa.ae.provisioning.idm.spml.request.SchemaRequest.sendSchemaRequest(SchemaRequest.java:131)
     at com.virsa.ae.provisioning.idm.spml.request.SchemaRequest.getSchemaAttributes(SchemaRequest.java:142)
     at com.virsa.ae.provisioning.idm.spml.request.SchemaRequest.getFieldDefinition(SchemaRequest.java:163)
     at com.virsa.ae.configuration.bo.FieldMappingBO.getSAPFieldDefList(FieldMappingBO.java:126)
     ... 22 more
Caused by: com.sap.engine.services.webservices.jaxm.soap.accessor.NestedSOAPException: Unable to create message from source.
     at com.sap.engine.services.webservices.jaxm.soap.SOAPPartImpl.setContent(SOAPPartImpl.java:192)
     at com.sap.engine.services.webservices.jaxm.soap.SOAPMessageImpl.<init>(SOAPMessageImpl.java:83)
     at com.sap.engine.services.webservices.jaxm.soap.MessageFactoryImpl.createMessage(MessageFactoryImpl.java:35)
     at com.virsa.ae.provisioning.idm.spml.request.SchemaRequest.sendSchemaRequest(SchemaRequest.java:118)
     ... 25 more
Caused by: com.sap.engine.lib.xml.parser.NestedSAXParserException: Fatal Error: com.sap.engine.lib.xml.parser.ParserException: XMLParser: Bad Attribute value: ' or " expected!(:main:, row:5, col:18)(:main:, row=5, col=18) -> com.sap.engine.lib.xml.parser.ParserException: XMLParser: Bad Attribute value: ' or " expected!(:main:, row:5, col:18)
     at com.sap.engine.lib.xml.parser.DOMParser.parse(DOMParser.java:139)
     at com.sap.engine.lib.xml.parser.DOMParser.parse(DOMParser.java:173)
     at com.sap.engine.services.webservices.jaxm.soap.SOAPPartImpl.parseDocument(SOAPPartImpl.java:221)
     at com.sap.engine.services.webservices.jaxm.soap.SOAPPartImpl.setContent(SOAPPartImpl.java:189)
     ... 28 more
Caused by: com.sap.engine.lib.xml.parser.ParserException: XMLParser: Bad Attribute value: ' or " expected!(:main:, row:5, col:18)
Appreciate your response.
Thanks
Kee

Create Role Option in CUP 5.3

HI,
I would like to know the use of Create Role option in CUP.
We have this option Configuration -> Roles -> Create Role.
As we know we import roles form either SAP back-end system or ERM.
In this case what is the use of Create Role option.
Thanks in advance

Hi ammu,
This is just an option in case you need it. Roles created in CUP are just in CUP, not in the back-end. Remember that CUP can be used for non-SAP systems also, in this case the option to create roles in CUP is important. If you just use CUP with "ABAP-based" back-end systems you shouldn't create roles in CUP directly, you usually perform a sync or import form back-end or ERM.
Cheers,
Diego.

CUP 5.3, Risk test of all roles in a Composite Role - possible?

We want to use a Function (Dummy) Role in CUP, that shall have Composite Roles connected in CUP.
But when I do this - I only see the composite role when I make a SoD / Risk check in my cup WF.
Can I somehow also check the single roles in the composite roles?
Thank you
Kristian

Hi Kristen,
It should definitely be possible to analyse the composite role via GRC.
Either through simulation of the assignment of the additional single role into the composite or by the assignment of the composite role into the user's authorisations.
The composite role itself will not have any authorisations but it should read through the single roles contained within it as it is those authorisations which end up with the user.
Have you tried analysing the composite role directly in RAR to isolate it away form the CUP functionality as a unit test? If that works, you should then be able to prove that the risk analysis is indeed working. Then you can concentrate on the configuration of the workflow processes through CUP without being distracted from primary objective.
Simon

Role Import in CUP

Hi
There are two options of choosing the source system for role import in CUP
1. Back end system
2. ERM
I am facing problems in importing roles in CUP from ERM. The system shows a successful import but the number of roles imported are Zero. However if I choose the Backend system as source system, the roles get imported in CUP.
can someone help me with this issue. I want to import roles from ERM because roles imported from ERM will have all the role attributes like Business process, Sub business process, functional area etc which are not available if we import roles from backend.
Regards,
Nitin

Hi Sahad,
Did you look at CUP logs? Is ERM and CUP installed on same server? Have you configured Business process and sub process exactly same as in ERM?
There are 2 ways to upload roles into CUP using spreadsheet:
1) Cumbersome method, if you don't have roles maintained in Excel: You can get R/3 roles via SUIM or some other method and manipulate them to match the role import template of CUP
2) Easy method : Import all the necessary roles into CUP via Backend. Once you have all the roles in CUP, go to 'Search Roles'. Click on 'Search' button without providing any search criteria. This will return all the roles available in CUP. Now, click on Export button. CUP will export all the roles into Excel spreadsheet in the format which CUP understands. Now, delete all the roles from CUP and play with the spreadsheet to manipulate other parameters like role approvers, systems, business process etc and upload that spreadsheet into CUP.
Both these methods require some manual work.
Regards,
Alpesh

Roles in CUP

Similar Messages

Maybe you are looking for