SAP GRC 10.0 Configuration

Hi Experts,
I had attended your last session on GRC 10.0 and it has really helped us a lot in understanding the new features of GRC 10.0, and thanks for answering all my questions. We being a Ramp Up partner (Capgemini India) successfully installed GRC 10.0 and in process of doing the post installation configuration, below are the steps we followed in the phase of installation and configuration:
1.     Installed ABAP stack.
2.     GRC 10.0 Add on Installation.
3.     BC set Activation.
4.     Activated services.
5.     Assigned all necessary roles to the User.
6.     Launched NWBC client and we are able to see all the functionalities of GRC 10.0.
Now next is to create the connectors to the backend system and do the analysis and other activities, and this is the phase were we are stuck and not able to move further as we didnu2019t find any specific documentation or notes for the same, it would be really helpful if you can help us on the next steps to be followed:
Have created backend (ECC 6) connectors through SPRO u2013 GRC - Common Component Settings u2013 Create Connectors.
Further on is a question mark, please help us on this.

Luis Bustamante wrote:
Sandeep,
>
> Most documentation (including new notes) is not publicly available as the solution is in Ramp-Up, please contact your Ramp-Up coach for more detailed assistance on the process. Nevertheless, there are a few things you need to do to get the risk analysis working:
>
> 1. The connectors must be assigned to the AUTH integration scenario (under Common Component Settings -> Integration Framework -> Maintain Connector Settings).
> 2. Assign the connector to the respective connector group containing the rule sets depending on the BC sets you enabled, in most cases it would be SAP_R3_LG. (under Common Component Settings -> Integration Framework -> Maintain Connectors and Connection Types).
> 3. Generate the rules with program GRAC_GENERATE_RULES
> 4. Run the sync jobs: GRAC_ROLEREP_ROLE_SYNC, GRAC_ROLEREP_PROFILE_SYNC, GRAC_ROLEREP_USER_SYNC, GRAC_PFCG_AUTHORIZATION_SYNC.
>
> Regards,
> Luis
Did this work ?
@Luis:I am on the same page (without the steps you have listed) but GRC system does not show backend system as a dropdown, when I click on any related link (e.g. create request under Access Request). Any clue on why is it required to add the connectors to the AUTH integration group ? Is that necessary for the GRC system to recognize the backend.
Thanks,

Similar Messages

  • SAP GRC 10.1 AMF No data selected when adding duplicate fields from separate tables for configurable data sources

    Hi There,
    In SAP GRC 10.0, our team had an issue where we could not add duplicate fields from separate table (see ERROR: Select Currency/UoM field for the selected analyzed fields). This was resolved by the SAP Note 1904313/ 1904314 (http://service.sap.com/sap/support/notes/1904313).
    We upgraded our system to SAP GRC 10.1 SP05 and could now add the duplicate fields from separate tables. SAP Note 1904313/ 1904314 was part of SAP GRC 10.1 SP03 so it makes sense that we, in a higher version (SP05), would be able to do this.
    The issue now is when we add the duplicate fields from different tables and run the Ad-hoc Query to test if the data source works correctly, the No Data Selected warning persists. This means that the data source provides no data for analysis, which is required to write our business rules.
    Below is an example:
    Basic data source with just one currency reference field EBAN-WAERS.
    When you run the Ad-Hoc Query you receive data.
    Basic data source with second currency reference field EKKO-WAERS.
    When you run the Ad-Hoc Query no data is found.
    Please also make reference to the following thread logged by my colleague (ERROR: Select Currency/UoM field for the selected analyzed fields)
    Any assistance to receive data with duplicate fields from separate tables will be highly appreciated.
    Thanking you in advance.
    Regards
    Gary Khan

    Hi
    following are the  error messages from dump
    hrtText
       There is already a line with the same key.
    hat happened?
       Error in ABAP application program.
       The current ABAP program "SAPLCKMS" had to be terminated because one of the
       statements could not be executed.
       This is probably due to an error in the ABAP program.
    rror analysis
       You wanted to add an entry to table "\FUNCTION-POOL=CKMS\DATA=T_DYN_CKMLCR",
        which you declared
       with a UNIQUE KEY. However, there was already an entry with the
       same key.
       This may have been in an INSERT or MOVE statement, or within a
       SELECT ... INTO statement.
       In particular, you cannot insert more than one initial line into a
       table with a unique key using the INSERT INITIAL LINE... statement.
    rigger Location of Runtime Error
       Program                                 SAPLCKMS
       Include                                 LCKMSF01
       Row                                     226
       Module type                             (FORM)
       Module Name                             DYNAMIC_PERIOD_CLOSING
    Source code where dump ocured
    222
    223           APPEND ht_ckmlpp TO t_add_ckmlpp.
    224           APPEND LINES OF ht_ckmlcr TO t_add_ckmlcr.
    225           INSERT ht_ckmlpp INTO TABLE t_dyn_ckmlpp.
    >>>>           INSERT LINES OF ht_ckmlcr INTO TABLE t_dyn_ckmlcr.
    227         ENDWHILE.
    Also I guess there is problem with material ledger in R/3 side
    I have never worked on material ledger before so dont hav idea of Tcode and tables in SAP R/3 for material ledger.
    Thanks
    Navneet

  • List of Issues/ problems in SAP GRC AC 5.3 Implementation

    Hello,
    Can anyone provide me with the list of most commonly occurring problems related to
    1- SAP GRC Suite Installation
    2- RAR Module implementation
    3- CUP Module implementation
    4- ERM Module implementation
    5- SPM Module implementation
    6- SAP PC 2.5 implementation
    7- SAP RT Module implementation
    8- SAP GRC Suite Upgradation.
    Thanks in advance!!!

    Hi Abdul,
    As such there are no issues in implemeting the AC modules.
    Just make sure that you undeploy previously installed SP before deploying the new Support packages.
    1. You have to upload the initial file (xml files) again in CUP and ERM. These files should be corresponding to latest support pack.
    2. upload the CC 53_Messages.txt file in RAR with every upgrade.
    Also restart the server after deploying any following the above steps.
    For RT you can follow the note 1225960, 1060673 and make sure to restart the server after configuring the SAP Adapter.
    Regards,
    shweta

  • Nota fiscal send from R/3 to SAP GRC NFE

    Hello Everyone,
    We have send NFe from sap r/3 to sap grc nfe thru RFC . We cannot trace in GRC .
    What could be the possible error .
    please help.
    Honey

    Hi Honey,
    If configuration is correct on R/3 you can see the received data on tables /xnfe/nfehd (header), /xnfe/nfeit (item) and /xnfe/nfe_hist (history).
    A good approuch to you check what system is being called is put a break-point before R/3 call GRC on the end of function J_1B_NF_MAP_TO_XML or include LJ_1B_NFEF42.
    You can easily start debug on R/3 and follow inside GRC automatically when debugging, but the user of RFC need to be DIALOG and have debug rights. It's not possible do it with a service user.
    Check if the correct FM is being called /xnfe/nfe_create, for other messaging system the FM is J_1B_NFE_XML_OUT (if customizations is wrong you will check this error on ST22 on GRC).
    Kind regards, Fernando Da Ros

  • Mitigation in SAP GRC AC

    Hi all,
    Two questions regarding mitigation in SAP GRC AC:
    1)
    Reading through the forum, we have seen that if monitor does not execute the report (action) within the frequecny set and alert is generated. Are these alerts sent out to the mitigation controls' approvers automatically or need to be triggered by executing alerts generation with mitigation flags set?
    2)
    If WF  is set and appropriate configuration is set in RAR, approver activities in CUP are approval for mitigation control maintenance and mitigation control assignment. Is this correct?
    Thanks in advance. Best regards,
      Imanol

    Hi Imanol,
       Here is my response:
    1) Reading through the forum, we have seen that if monitor does not execute the report (action) within the frequecny set and alert is generated. Are these alerts sent out to the mitigation controls' approvers automatically or need to be triggered by executing alerts generation with mitigation flags set?
    You need to go to Alert Generation -> Select Generate Alert log, Control Monitoring under Action Monitoring and Alert notification.
    2) If WF is set and appropriate configuration is set in RAR, approver activities in CUP are approval for mitigation control maintenance and mitigation control assignment. Is this correct?
    Yes, that is correct.
    Regards,
    Alpesh

  • Implementing SAP GRC CC 5.2 - Help with RTAs for SAP 4.0B & 4.6B Needed

    We are in the process of implementing the SAP GRC Compliance Calibrator 5.2 across multiple environments including SAP legacy systems.  Our key issue is that we cannot find any RTAs for SAP 4.0B and 4.6B.
    I am positive that someone has done this somewhere out there so I am looking for any information and/or solution that you may have implemented to resolve this.
    Would you be kind enough to send the information to me asap.  I can be contacted on my personal email [email protected]
    Many thanks,
    Carlos

    Dear Carlos,
    Available RTAs :
    SAP 4.6B and above
    PeopleTool 8.46
    Oracle eBusiness Suite 11.5.10
    Hyperion HFM 4.1.0
    In order for target systems to connect to Compliance Calibrator, each Real Time Agent (RTA) must:
    Have an entry in the operating system services file of the NetWeaver server
    Server must be restarted before new client entries are registered
    Be defined as a Technical Landscape in the System Landscape Directory (SLD)
    Have a login account for Compliance Calibrator to use for connection
    This account information is used for configuring the Java connections
    Regards,
    Naveen.

  • LDAP Setup in SAP GRC 10 system

    Hello All,
    We are implementing SAP GRC 10 and trying to connect GRC with LDAP to sync users but we are facing below error while doing configuration in LDAP t-code
    Errro “Could not login to directory “
    But it’s working fine when we are trying to login throw ldap.exe to check host and other things.
    Please let me know where we I can check the configuration in GRC and LDAP system to correct the same.
    Thanks & Regards,
    Jagat

    Hello,
    Please check other configuration screens from GRC and LDAP.exe tool
    Screen 1 – LDAP Server
    Screen 2 – System User
    Screen 3 – LDAP Connector Setting
    Screen 4 – LDAP.exe

  • Rule converstion from Approva to SAP GRC AC RAR 5.3

    Hello All,
    We have rule files of approva in XML format , please let me know is there any short cut mettod or process to change it into SAP GRC Rule files
    Please help me on this.....
    Thanks in advance
    Jagat

    Jagat,
    the import file structure is documented in the appendix of the configuration guide.
    Now all you need is a PERL or XML style sheet wizard to make one into another (or the ability to generate a flat file download you can work with in Excel).
    Frank.

  • SAP GRC Process Control - General Questions

    Hi all,
    We have the following general questions regarding SAP GRC Process Control:
    1) Assume that we have set up 5 different SAP Connectors in Process Control. When you configured a specific rule and control and then, schedule the job for such control, how does the system (SAP Process Control) knows which back-end system needs to be accesed for such control?
    2) In which language are the out-of-the box rule steps's script coded? In which different languages can those scripts be coded, what is to say, in which language can we code our own scripts?
    3) How is the detailed flow between SAP Process Control and SAP Back-end system?
    Many thanks. Regards,
        Imanol

    null

  • For GRC 5.3 can I use the SAP GRC 5.2 rule set

    We are going for an upgrade to GRC 5.3,  I have a small concern here....
    Can I use the same ruleset what I used in GRC 5.2 to SAP GRC5.3 ...?
    because when I checked ruleset at permission level in GRC 5.2 it displays first object of an action from one function conflicting with first object of an action from another function, where as in GRC 5.3 it displays all objects of an action from one function vs all objects of an action from another function....
    How will it impact analysis in GRC 5.3 with old rule set...?
    appreciate your response & thanks in advance.

    Hi,
    Here you will find the documentation to get Upgrade/Configuration Guides.
    [https://websmp103.sap-ag.de/~form/sapnet?_SHORTKEY=01100035870000718172&]
    SAP BusinessObjects Governance --> Access Control ---> SAP GRC Access Control 5.3
    There you will find a Upgrade guideline.
    Cheers,
    Martin

  • Advice on SAP GRC career

    Hello,
    My name is Vijay and I am from Denver, CO. I will be graduating with a Master's degree in Information Systems next month from Colorado State University. I have got a job as a ITPA Associate with a big four firm. My job description reads
    1. Assisting clients in matters of Data Assurance, ERP Controls, IT Risk and Security Assurance,Data Protection and Privacy, Project Assurance, and Advanced Risk and Compliance Analytics
    2. Providing ERP controls services to help audit and non-audit clients address risk and control needs around ERP systems
    3. Assessing, recommending, designing and configuring controls as they relate to businessprocesses, ERP application security, and Governance, Risk and Compliance (GRC)".
    4.Designing and assessing control related services around major ERP systems; and
    5.Translating business requirements to efficient and integrated ERP control frameworks.
    I am very new to SAP GRC. Can you please guide me through how to form a career path in SAP GRC?
    Thanks,
    Vijay

    Hi Vijay,
    SAP GRC is  good career path however you start your career basically as a sap security junior associate and finally lands up in the jobs like:
    SAP Security and Controls Consultant
    Senior SAP Security and Controls Consultant
    SAP Security and Controls Administrator
    SAP Security & GRC Consultant
    SAP GRC Manager
    SAP Process Controls Experts
    SAP Advisory Manager - IT Risk Transformation etc.
    Thanks & Regards
    Subhasish

  • SAP GRC Access Control - Compliance Calibrator - License Cost

    Dear all,
    I have some questions on Compliance Calibrator implementation.
    1. Do  we have to pay additional cost for the license to implement Compliance Calibrator?
    2. Since SAP GRC 5.3 is just released, which one do you recommend? SAP GRC 5.2 or 5.3?
    3. What would be the major difference between Compliance Calibrator in GRC 5.2 and 5.3?
    Best regards,
    Rolando

    Hi Rolando-
    1. Yes, there lies some license cost and the amount should not as much as taking SAP R/3 license. I am not sure of exact amount but its nominal as compared to other SAP products.
    2. SAP always recommend for the latest version available and why not one would go for latest version if you are paying something for that.
    Also, it depends on your existing R/3 version and its compatibility. In short run, you can choose per your existing versions but in long run everyone has to move to latest version. Say for example whoever is using SAP R/3 technology with whatever version, they all need to upgrade to ECC6.0 by 2011 with extension upto 2013. I am not sure of any such information about GRC AC though.
    3. Some enhancement have been done with CC 5.3. Those features include-
    1. Risk analysis for SAP Enterprise Portal and UME
    2. BI integration for custom reporting
    3. Reporting enhancement features include additional auditor, business manager and IT reports
    4. SOD management by exception. Can be integrated with workflow.
    5. Import/Export of configuration data
    6. Migration scripts
    7. Download and print capability on every report.
    Some performance improvements-
    1. Concurrent risk analysis.
    2. batch mode risk analysis
    3. Improved memory mgmnt etc.
    Hope it gives you now some more visibility.
    Cheers!
    Ashok

  • SAP GRC Access Control 5.3 .TXT - where to upload it

    Hi Experts,
    can anyone please tell me, I have to deploy/upload the patch:
    SAP GRC Access Control 5.3 .TXT SP04
    As I am new to GRC, can somebody please tell me where I upload/deploy this file.
    Is it on the server at operating system level, or through the application in the Web Browser ?
    Thanks and regards,
    Petr.

    HI ,
    As sahad said that is the right way to extract the *.SAR files the syntax is given below .
    for unix : SAPCAR -xvf /<path>/<filename>
    windows : SAPCAR -xvf <volume>:\<path>\<filename>
    If you donot specify the path then it would get extracted in the path where you are right now means the same location where you the *.SAR file is present and then you can upload .
    Then you can login into RAR portal and then go to configuration tab then click on utilities which would be the last option and then click on import and give the file location.

  • Reset password, block or unblock user in a R/3 from the SAP GRC AC 5.3

    Hello,
    I have 2 doubts.
    I want to know if a user can reset his password of the R/3 from the SAP GRC AC 5.3 automaticly.
    And can someone block or unblock a user using  the GRC AC 5.3 automaticly too?.
    I know you can create a user automaticly from GRC, but can I do those 2 things?
    Best Regards.
    Pablo Mortera.

    Hello,
    What I don't get is, that why do I need the HR module (HR Trigger) to lock, unlock, password slñf service of a user ID. The HR module uses employees attached to a user ID if it has one.
    Why do I need the HR module to configure the automatic request access?
    Best regards.
    Pablo Mortera.

  • SPM in CUP in a SAP GRC AC 5.3 -- "Approver not found" & "Path not found"

    hello,
    I have a problem when I try to do a request.
    I have configured the SPM in the CUP in a SAP GRC AC 5.3
    I gives me an error about "Error creating request. Approver not found ". When I took out the Manager in the Stage it gave me this error in the request "Error creating request. Path not found".
    Best regards.
    Pablo Mortera.

    You can either type in the configuration, like the what option you selected for approver (CAD or role or...etc), or other way is to capture the change log which shows what was the configuration for that stage....
    (Configuration -< Change Log -> Search Change log)
    Cheers !!
    Zaheer

Maybe you are looking for