Running Analysis in GRC AC 5.3  - RAR

Hi,
Can anyone let me know how to resolve the issue.
When i run the Risk Analysis in GRC AC 5.3 - RAR
Informer>Risk Analysis> Role Analysis--> Execute
This is the error message it gives:-
*VIRSAHR_01: Cannot execute BAPI RoleList: Error connecting using JCO.Client: null: Could not create JCOClientConnection for logical System: VIRSAHR_01_MODEL - Model: class com.virsa.cc.modelvirsahr_01.BAPI_VIRSAHR_01. Please assure that you have configured the RFC connections and/or logical system name properly for this model!: Error while obtaining JCO connection.: Failed to resolve JCO destination name 'VIRSAHR_01_MODEL' in the SLD. No such JCO destination is defined in the SLD. *
Please indicate what could be the possible solution for it.
Thanks in advance.
Nazeer

HI ,
Why dont you check the SLD is running fine or not.These are the steps to be followed ,
Check out the URL : http:
<localhost>:50000/sld
When you enter the sld screen then click on administration and there you will see whether sld server is running or not.If it is stopped then start.
Then check whether in visual administrator check for sld data supplier under server node under services node.There on the top there will be a button as trigger sld data supplier .We should get a succesul message.
In the Jco connections click on test option one should get a test message succeful.To see the JCo connections path launch j2ee home page URL : http:
<localhost>:50000/.After that click on web dynpro then on content administrator and then maintain JCo connections.There check out the JCo connections.IF the JCo connections are not working fine then check out the RFC 'c configured in the backend system are testing successfully.
SLD_UC
SLD_NUC
LCRSAPRFC
SAPSLDAPI
If u still face any problem plz let me know.

Similar Messages

  • GRC AC 5.3 - RAR Parameters

    Hello,
    I have the following 8 queries related to GRC AC 5.3 RAR parameters
    When I go into RAR -> Configuration -> Miscellaneous, I see the following entries.
    Maximum Display Lines For Print Preview 
    This parameter specifies the maximum number of lines to be displayed in print preview mode; the default value is 500
    1- What is the Print Preview of the lines for? Can I make it 10000 instead of 500. Is there a performance impact?
    Background Job Spool File Location 
    This parameter specifies the location where the background job spool files are stored Note: You need to restart the server
    2- Why do I need the Background Job Spool File location? Is it when I use Default Logger parameter as SAP Logger? Currently we are using the Default Logger parameter as Java Logger
    Alert Log File Name and Location 
    This parameter specifies the location where the action usage purged data files are stored
    3- Whey do I need this Alert Log file parameter for? I mean how is the Alert Log file generated in RAR 5.3
    SAP Application Server Location 
    Enter SAP application server location here
    4- Why do I need SAP Application Server Location, when I have installed SAP GRC 5.3 on standalone SAP JAVA Stack?
    FTP Site Location 
    Enter FTP site location here
    5- What should the FTP site location be given as? Should I give a fully qualified domain for a particular host for the FTP of above RAR background job log files and RAR Alert log files?
    6- Do we have the background job log files FTP into another host, if Default Logger parameter is chosen as SAP Logger?
    FTP Site User Name 
    Enter FTP site User Name here
    7- What is the best practice for specifying a FTP User? I mean what is the username normally given in RAR environment?
    8- Is there any OSS Note, SAP Help URL which  describes about RAR parameters in detail?
    Thanks,
    Haleem

    Hi,
    > Maximum Display Lines For Print Preview 
    >  This parameter specifies the maximum number of lines to be displayed in print preview mode; the default value is 500
    >
    > 1- What is the Print Preview of the lines for? Can I make it 10000 instead of 500. Is there a performance impact?
    > 
    You should used 500 only.
    > Background Job Spool File Location 
    > This parameter specifies the location where the background job spool files are stored Note: You need to restart the server
    >
    > 2- Why do I need the Background Job Spool File location? Is it when I use Default Logger parameter as SAP Logger? >Currently we are using the Default Logger parameter as Java Logger
    > 
    No, background job spool file location is something different from logger. Background spool file location is the location where
    spool file of your background job will be generated.
    Diferent between Java Logger and SAP Logger is that if you choose SAP Logger then log file of your RAR will be generated in NWA. But if you will choose as Java Logger then log file will be generated as separate file as ccappcomp.<n>.log which you will see in CC debugger.
    > Alert Log File Name and Location 
    > This parameter specifies the location where the action usage purged data files are stored
    > 
    > 3- Whey do I need this Alert Log file parameter for? I mean how is the Alert Log file generated in RAR 5.3
    >
    check below link:
    Compliance Calibrator Alert Generation Issue
    > SAP Application Server Location 
    >  Enter SAP application server location here
    > 
    > 4- Why do I need SAP Application Server Location, when I have installed SAP GRC 5.3 on standalone SAP JAVA Stack?
    >
    > FTP Site Location 
    >  Enter FTP site location here
    >
    > 5- What should the FTP site location be given as? Should I give a fully qualified domain for a particular host for the FTP of above RAR background job log files and RAR Alert log files?
    > 6- Do we have the background job log files FTP into another host, if Default Logger parameter is chosen as SAP Logger?
    >
    > FTP Site User Name 
    >  Enter FTP site User Name here
    >
    > 7- What is the best practice for specifying a FTP User? I mean what is the username normally given in RAR environment?
    The following new reports can have long runtimes:
    - User Authorization Count
    - Role Authorization Count
    - List Expired and Expiring Roles for Users
    - For that reason These jobs run on ABAP side and produce a spool file. An icon is displayed on the front-end for the jobs that complete. (If you run jobs on all systems and it finishes on one system before another the icon will display for the finished system first)
    - The report directory on the SAP Enterprise Resource Planning (ERP) application servers. This is the temporary storage location for spool files generated by these background jobs.
    - The same directory name is used for all SAP backend systems.
    - The location, user name, and password for FTP of security reports generated by backend SAP ERP systems.
    > 8- Is there any OSS Note, SAP Help URL which  describes about RAR parameters in detail?
    Note 1121978 - Recommended settings to improve peformance risk analysis
    Check below link for performance optimization of RAR:
    http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/90aa3190-8386-2b10-c4ba-ced67322ea6d?quicklink=index&overridelayout=true
    Thanks
    Sunny

  • Program batch risk analysis offline GRC AC 10.0

    Hello consultant:
    We have configurated GRC AC 10.0 RAR , when we executed risk analysis for Tx:NWBC  , the system run analysis(foreground or background) correctly but when we executed analysis for Tx:SPRO->Governance Risk and compliance->Access control->Batch Risk Analysis , the system run two jobs E:GRAC_SOD and GRAC_SOD but the jobs run only 1 second and finished sucesffully but the system no run analysis.
    Please could you help me?
    Thank you very much

    Please check view details in NWBC.
    or go to abap and select option and run it..
    and u can monitor the same using
    the tcode batch job for GRc monitor tcode dont remember u can check in guide.
    there it can show details.
    need tcodes and all ,please post
    Regards,
    Prasant

  • Remote Risk Analysis in GRC 10

    Dear Experts,
    I am trying to configure Remote Risk Analysis in GRC 10.0.
    Could you please let me know if there are any standard programs that extracts data from ERP system. Like we have below standard programs in 5.3 to extract from ERP system.
    /VIRSA/DLOAD_AUTH_OBJS
    /VIRSA/DLOAD_ROLE_AUTH_OBJS
    /VIRSA/DLOAD_ROLES
    /VIRSA/DLOAD_USRS.
    If programs are not there in GRC 10.0, please advise how to get data for remote risk analysis.
    Thanks,
    Raj

    Hi Raj,
    Check this programs:
    /GRCPI/GRIA_DLOAD_AUTH_OBJS Download Authorization object
    /GRCPI/GRIA_DLOAD_ROLE_AU_OBJS Role Authorization Object
    /GRCPI/GRIA_DNLDROLES Download Roles
    /GRCPI/GRIA_DOWNLOAD_SAPOBJ Download objects
    /GRCPI/GRIA_R_DOWNLOAD_DESC Program /GRCPI/GRIA_R_DOWNLOAD_DESC
    /GRCPI/GRIA_R_DOWNLOAD_USRS Program /GRCPI/GRIA_R_DOWNLOAD_USRS
    /GRCPI/GRIA_ZVRAT_UPDWNLOAD updownload data
    Cheers,
    Diego.

  • SAP GRC AC 5.3 RAR Background jobs are cancelled

    Hi Experts,
    we have newly implemented theS AP GRC AC 5.3 RAR  Help me in troubleshooting the Background jobs cancellation in SAP GRC AC5.3 RAR.. we have reported this issue to customersupport they asked us to upgrade the front end  patch level to Sp15, even we upgraded still i have the same problem.. later we upgraded the backend patch  according to the SAP Note. still the problem is not resolved.
    Latest recommendation they are asking us to uninstall the SMD agent.. and also my java control.exe is showing yellow color
    help me how to resolve the issue.??
    Edited by: n.s.k mohan on May 10, 2011 6:21 AM

    Hi,
    Could you please first change RAR log settings to Java logger then take a restart of the system. After that log for your background will start coming in RAR. Then schedule the job if it fails then paste background job log here.
    Also, in future, please raise GRC related issue in GRC forum so that you can get more replies.
    Thanks
    Sunny

  • Error while running analysis

    Hi,
    I want to use reports of standard analysis available in SD module, but when I try to run analysis such as MCTA, MCTC, MCTE etc.system shows messege 'No Data exist for chosen selection'
    What needs to do to get the data in to analysis.

    In material master -> Sales Org.2 View, Material static group should be maintained. Also in customer master->Sales Area Data, Customer static group should be maintained. Then you will get the data in MCTA reports.
    -Alpesh

  • SAP GRC AC 5.3 - RAR Risk analysis Error Log

    Hi
    i have scheduled the background job for full sync risk analysis for the first time . the job ended with status error . critical analysis, user,role and profile action analysis is shown 100% . but the user permission analysis shows 49% , role and profile permission analysis show 97% each . where can i check the log for the errors . do i need to run the whole risk analysis job again ? when i check the management reports , risk violations are shown as zero . Please let me know how i can proceed at this stage . thanks
    Regards
    Prasad

    Thanks.
    First time please do for all users. I assume this was first time and it failed, so i will suggest you scheudle for all.
    once these are done, then periodic jobs should be increamental.
    few tips :
    - schedule user sync separate job and once it finish only then scheudle role sync and when role sync finishes, only then schedule profile sync
    - always select system ids from search help (which is F4 in ABAP)
    - best scheudle one job per system id, so that when failure occurs, so that error analysis is easy
    regards,
    Surpreet

  • Risk Analysis in GRC 10.0

    Dear Experts,
    I have configured RAR in GRC 10.0. Sync jobs are successful. Batch risk analysis is sucessful.
    But when I tried to run a User/Role risk analysis I am not getting any result. I am not sure whether system has run risk analysis or not but I get the confirmation screen with blank result table. Please advise how to fix this issue.
    I appreciate your help.
    Thanks,
    Raj

    Hello Raj,
    Check the below points related to risk analysis
    1.check once the parameter id in configuration settings
    2.BC set activation
    3.while running risk analysis check backend system name and connector which is configured.

  • User Analysis at Permission Level - Detail Report (RAR SP12)

    Hello All,
    I have having question regarding the User Level Analysis at Permission level report. Currently, we are on GRC Access control 5.3 SP12.
    Per my understanding when you execute the User level analysis at Action level, you get SOD conflict reports based on T-code level and not on authorization / permission level. But, if you execute the user level analysis at permission level then SOD report is based on the authorization / permission object level.
    But now, when I execute the user level analysis at PERMISSION LEVEL in the Informer tab, in the report I am only able to see "Transaction Code Check at Transaction Start" name in the Permission Object Column and "Transaction Code" name in the Field column.
    Look forward to hear from you all.
    Thanks in advance,
    Regards,
    Angelica

    Hi Angelica,
    This behaviour is ok for those risks in which you have not enabled any Object/Field value. It will pick S_TCODE Object and show you the risk.
    This is useful because -
    1. If you have risks defiend at Tcode level - you can still catch them while running risk analysis at permission level.
    2. If you have Object Values defined in risk and you are running permission level analysis it will show risk only if Object Values meet. In that case permission level risk anlysis will not show risk if there is no actual risk.
    3. Running risk analysis at Action level can show false positives when risk is defined ta Object level. So, it is always better to r
    un alanysis at permission level, it will bring all actual risks skipping false positives.
    4. You can run only one level risk analysis in CUP and ERM and permission level covers all risks.
    If you have risk defined at Object Level and the role/user is not fulfilling all values, it should not show in permission level. In your case, if it is showing only "Transaction code check at start"  and the risk is defined at Object Level, then sure it is a bug.
    Regards,
    Sabita

  • Risk analysis in GRC 10 error "Subnode COMPONENTCONTROLLER.1.SEARCH.RESULT"

    HI
    We have configured Risk analysis application within GRC 10. Also have executed the sync jobs. Now when i try to do SOD analysis i am getting an error "FPM application started without configuration" . this comes even before opening the link to SOD analysis is even open and this error comes for all type of SOD analysis like for user and role and HR object.
    I check the logs file and in logs system is complaing that "Subnode COMPONENTCONTROLLER.1.SEARCH.RESULT_TABLE" does not exist.
    Any idea why we getting this error message?
    Parven

    HI
    Connector is working fine as sync jobs are running perfectly.
    we have done the mimimum configuration setting as suggested by SAP guide ie Parameter 1023, 1024,1025 and 1026
    For activating BC sets i think we need to do that only when you using out of box SOD rules. In our case we are using customised SOD rules. So i think we dont need to activate the BC set.
    any other suggestion
    Parveen

  • GRC-AC 5.3 RAR Management view error - Expired users not cleaned-up.

    Hello Gurus,
    I have a problem in RAR Management View:  Users who was valid have been analyzed and their conflicts considered in statistics, but when they become expired, their conflicts remain in the statistics forever, because they are not re-analyzed neither in Full nor in Incremental sync.    Even if all roles are removed from the user in backend, the conflicts remain in Management View.
    I think the Full Batch Risk Analysis should clean-up all users violations from current period statistics before recording the new analysis results. 
    Did you have this problem too?  Am I missing something? 
    I appreciate your thoughts about it.
    Vaner

    Hello Nuno,
    Thanks for your comments.
    My release is 5.3 SP 16.2.
    I also think the full sync should be enough but I already find about 20 users with problems, in 4 different backend and in 2 GRC (Tests and Production)
    I think that depending on some procedures done in the back-end the full sync do neither re-analyze the user nor clean-up previuos statistics, for example:
    1. A user was delete and recreated again with option to maintain old data, and he already had expiration date.
    2. A sand-box environment was created as copy of production, users were created valid but already with expiration date.
    I observed that for these scenarios, there was no Change Document for field "valid to", my guess is that Full Sync process relies on Change Documents to do its job.
    I already opened a message in SAP for this, first level could not solve it, It is in Development Team now.
    Vaner

  • Moving connections of GRC AC 5.3 RAR with R/3 ABAP Client (same SID)

    Dear All,
    Please can someone assist me with the documentation for the movement of the connection of AC 5.3 RAR based on Java, from one client in R/3 ABAP to another.
    For e.g. if GRC AC 5.3 is connected to QAS Client 101 on ABAP side, how to move the connection to Client 102 on the same system (SID).Also, mention please, if there are any specific steps to carried out for removal of existing connection.
    Regards,
    Prashant

    Usually you don't move a connection, as the analysis results and the naming reflect the target system.
    I don't know your specific context, but let's asusme you're finished working with the test system and want to add the production system.
    From SP10, RAR has a feature to delete a connector and all related data (Careful! Be sure to back up your rule set before you do that!).
    You would then create the new connector, add it to the logical system, create the rules, plan the sync and analysis jobs and you're good to go.
    If that's not what you're looking for, please tell us a few nmore details.
    Frank.

  • Process chains get an error when run analysis process

    When my PRD system‘s process chains run analysisi process, I  gets below error message:
    Error occurred when starting the parser: Error when opening an RFC connection (FUNCTION: 'R
    Message no. BRAINOLAPAPI011
    Diagnosis
    Failed to start the MDX parser.
    System Response
    Error when opening an RFC connection (FUNCTION: 'R
    Procedure
    Check the Sys Log in Transaction SM21 and test the TCP-IP connection MDX_PARSER in Transaction SM59.
    It's OK when i test the TCP-IP connection MDX_PARSER in Transaction SM59.
    The Sys Log in Transaction SM21(error part):
    M Wed Mar 19 09:22:50 2014
    M  *** ERROR => ThPOpen: ExecPopen("/usr/sap/BWP/DVEBMGS00/exe/tp" bwprd sapgw00 18933904 IDX=35, r, ..) returned -14 [thxxexec.c
    M  {root-id=532810645F5D12A0E1008000C0A8642F}_{conn-id=5328109B5F5D12A0E1008000C0A8642F}_5
    A  RFC 1878  CONVID 18933904
    A   * CMRC=0 DATA=0 STATUS=0 SAPRC=0 RfcExecProgramKernel RfcRaiseErrorMessage cmd could not be started by OS (rc = 1)
    A  RFC> ABAP Programm: SAPLSTPA (Transaction: )
    A  RFC> User: JY-LKZ (Client: 900)
    A  RFC> Destination: CALLTP_AIX (handle: 8, DtConId: 530F4E5C30AF4550E1008000C0A8642E, DtConCnt: 0, ConvId: ,)
    A  RFC SERVER> RFC Server Session (handle: 1, 68443927, {5328109B-5F5D-12A0-E100-8000C0A8642F})
    A  RFC SERVER> Caller host:
    A  RFC SERVER> Caller transaction code: STMS (Caller Program: SAPLTMSC)
    A  RFC SERVER> Called function module: TMS_CI_START_SERVICE
    A  *** ERROR => RFC Error RFCIO_ERROR_SYSERROR in abrfcpic.c : 1887
    FUNCTION: 'RfcExecProgramKernel'
    RfcRaiseErrorMessage cmd could not be started by OS (rc = 1)
    PROG ="/usr/sap/BWP/DVEBMGS00/exe/tp" bwprd sapgw00 18933904 IDX=35
    [abrfcio.c    9213]
    A  {root-id=532810645F5D12A0E1008000C0A8642F}_{conn-id=5328109B5F5D12A0E1008000C0A8642F}_5
    A  TH VERBOSE LEVEL FULL
    A  ** RABAX: end RX_GET_MESSAGE
    M
    M Wed Mar 19 09:23:15 2014
    M  *** ERROR => ThPOpen: ExecPopen("/usr/sap/BWP/DVEBMGS00/exe/tp" bwprd sapgw00 18968493 IDX=61, r, ..) returned -14 [thxxexec.c
    M  {root-id=532810645F5D12A0E1008000C0A8642F}_{conn-id=532811958F750F10E1008000C0A8642F}_1
    A  RFC 1878  CONVID 18968493
    A   * CMRC=0 DATA=0 STATUS=0 SAPRC=0 RfcExecProgramKernel RfcRaiseErrorMessage cmd could not be started by OS (rc = 1)
    A  RFC> ABAP Programm: SAPLSTPA (Transaction: )
    A  RFC> User: TMSADM (Client: 000)
    A  RFC> Destination: CALLTP_AIX (handle: 3, DtConId: 530F4E7830AF4550E1008000C0A8642E, DtConCnt: 0, ConvId: ,)
    A  RFC SERVER> RFC Server Session (handle: 1, 70212851, {53281195-8F75-0F10-E100-8000C0A8642F})
    A  RFC SERVER> Caller host:
    A  RFC SERVER> Caller transaction code: STMS (Caller Program: SAPLTMSC)
    A  RFC SERVER> Called function module: TMS_CI_START_SERVICE
    A  *** ERROR => RFC Error RFCIO_ERROR_SYSERROR in abrfcpic.c : 1887
    FUNCTION: 'RfcExecProgramKernel'
    RfcRaiseErrorMessage cmd could not be started by OS (rc = 1)
    PROG ="/usr/sap/BWP/DVEBMGS00/exe/tp" bwprd sapgw00 18968493 IDX=61
    [abrfcio.c    9213]
    A  {root-id=532810645F5D12A0E1008000C0A8642F}_{conn-id=532811958F750F10E1008000C0A8642F}_1
    A  TH VERBOSE LEVEL FULL
    A  ** RABAX: end RX_GET_MESSAGE.
    ps.
    1、IT's everything ok in the development system.
    2、It’s ok when i repeat this analysis process .
    3、It’s ok when i run this analysis process in analysis process designer.
    4、Attachment is the sys log in sm21.
    Thanks everyone.

    Hi Vignesh.B,
    Yes,it's not user's problem . But i don't  think it APD's problem .Cause all APD has the same problem and .
    Below is one of APD souce and target :
    Hope this information  is useful .
    Regards,
    Lian

  • Query on Installation of GRC AC 5.3 RAR component

    Hi,
    We are implementing SAP GRC 5.3 - RAR Component. Can the tool needs to be implemented in the SAP Server itself or can it be installed in a different server other than SAP.
    Can GRC tool be installed in a different server but falling under the same system landscape directory?
    In future  we are also planning to go for the other components of GRC like CUP, SUPM & ERM. In that scenario, does these components also needs to be installed in SAP Server itself.
    Please suggest the SAP best practice of installation of SAP GRC 5.3
    Request the experts to reply at the earliest.
    Thanks and Best Regards,
    Srihari.K

    Hi Srihari,
    I agree with Frank and you need to go to SAP Service Market Place and check out the Installation and Configuration guides for SAP GRC 5.3 at https://service.sap.com/instguides.
    I also recommend to go through these articles published on SDN.
    https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/408bd039-d9c1-2a10-0fab-a92b97c7cd25
    https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/a07b4cc8-1a57-2b10-1798-d2fec068473a
    Hope this helps as a good starting point for learning about SAP GRC Installation reqs.
    Regards,
    Kiran Kandepalli.

  • GRC AC 5.3 - RAR executing a simulation

    Hi All,
    In the risk analysis simulation , what is the meaning of field "Exclude Values:"
    Thanks
    Yudit

    Hello Yudit,
    This functionality is used for cleaning the Roles. By cleaning I mean, making the Risk free, so that when you do analysis using RAR, it should show 'No Conflict found'.
    So suppose you are doing SOD analysis of a BASIS role which show conflicts due to cretain tcode.
    Then rather than going to PFCG and removing that tcode and then again doing SOD analysis, you can use EXCLUDE functionality.
    So when you Simulation using Exclude option, you need to give name of Tcode which should be excluded from the role. So when doing Simulation, RAR will remove that tcode and all the object which comes from SU24 (CM)
    Hope this help. Please let me know if any doubt
    Regards,
    Surpreet Singh Bal

Maybe you are looking for