SAP GRC CUP password issue

Hi,
to get user password, i set email reminder, closing as send password in mail No and password display period : 0.It throws a password as sap default string .How can it be standard password,so user can reset by entering it.In SAP GRC 5.3 AC-CUP 5.3_05.0, I can't see password self service tab too.Is there any better way so user can get password in email as sap standard in 8 words (number , letters or any special characters as set like us).

when i try to create request type for password self service. i have only these actions to select
CREATE_USER  Create User 
  CHANGE_USER  Change User 
  DELETE_USER  Delete User 
  LOCK_USER  Lock User 
  UNLOCK_USER  Unlock User 
  ASSIGN_ROLES  Assign Roles 
  SUPER_USER_ACCESS  Super User Access 
  USER_DEFAULTS  User Defaults 
i can't see any action for password self service in configuration->request type-> create  option.please answer it.

Similar Messages

  • Role Upload template for SAP GRC CUP 5.3

    Good Morning / Afternoon / Evening SAP Security Gurus,
    I am looking to upload end user roles via a role upload template spreadsheet for use in SAP GRC CUP 5.3.  I am referring specifically to the recommended template mentioned in step 11 of the 5.3 Post Installation CUP guide, so that roles can be picked within ERM for workflow.
    According to the guide, it recommends uploading from the backend systems via a spreadsheet - any template versions or advice on finalising this would be most appreciated.
    Best Regards
    Steve

    Thanks Ashish,
    Someone else recommended this option as well via another forum. Have tried it out and working fine. 
    Thanks for the reply
    Steve

  • SAP GRC CUP Getting message "Some unmitigated risks exist".

    Hi,
    when there is one profile or role,when approver mitigate the request.It gets message" Some unmitigated risks exist".
    Already it's configured as unchecked for "Allow Approvers to approve access, despite any conflicts" in GRC CUP.
    Any advise or solution.
    Thanks
    shahed.

    Hi Shahed,
    When u you the seeting "Allow approver to approve dispite Risks" as unchecked. This setting exist at stage level as well as at global level. Stage level setting get the preference. With this setting Approver will not be able to approve the request untill all risks are mitigated or no risks exists. It will show an error some unmitigated risk.
    Kind Regards,
    Srinivasan

  • GRC CUP: Password Self Service Problem

    Hi Friends,
    We are working on GRC 5.3 SP16.
    Recently one of the users experienced a peculiar problem while submitting request for resetting the password for his user id. We have defined 2 systems in the CUP in the following way:
    1. ABC_100 (ABC being the system number and 100 being the client number)
    2. ABC_200(ABC being the system number and 200 being the client number)
    So when a user selected both of the systems to reset the password for his id in both the clients, he got the below error message:
    Password reset for the system(s):
    ABC_100: A notification mail with new password has been sent to mnopq_at_xyx.com
    Connection failed with system: ABC_200
    I have checked the JCO connections for that system and clients and working fine and also checked the connectors in the "Configuraiton" tab of CUP. This is also fine.
    Has anybody faced such problem? If so, can you please help me moving in the right direction to solve this problem?
    Regards,
    Faisal

    Hello Faisal,
    Simon was talking about authorizations for communication user you have for that JCo connector. It should have full auth. objects S_USER_AGR, S_USER_AUT, S_USER_GRP, S_USER_PRO, S_USER_SAS, S_USER_SYS. This user is making all provisioning in a backend system.
    Could not be the problem in the client number?
    Password reset for the system(s):
    ABC_100: A notification mail with new password has been sent to mnopq_at_xyx.com
    Connection failed with system: ABC_200
    You are requesting password for client 100 but the error is for client 200.
    Have you checked that you have correct client number in all those JCo connectors (VIRSAXSR3..., ABC_100) and in the connector configured in CUP?
    Regards
    Pavel

  • Anyone have SAP GRC CUP LDAP connector using port 636 SSL working?

    Hello,
    I wanted to verify if anybody connects to an eDirectory (or any other) LDAP in CUP using SSL port 636?
    Statement I received from SAP is that this is not supported in CUP, and only non SSL connections to LDAP work. I just have trouble to believe this as SSL would be best practice in any company.

    Pados,
      By using STUNNEL, CUP will not know about SSL. CUP will always think it is a regular connection but stunnel will send SSL connection to LDAP. Here is the link:
    http://www.stunnel.org/
    Regards,
    Alpesh

  • SAP GRC CUP for backgrounjobs

    Hi,
    I set background jobs email dispatcher,shedule type other to every sec as 3600 and it's not taking to less than 3600.i am trying to put 60 sec and it's throwing error Enter a valid numeric value for Every Second, Value greater than or equal to Background Job Time Interval, 3600

    Hi,
      The background job dispatcher time should be greater than or equal to the background job time interval time defined under configuration -> miscellaneous. Remember, the Background Job Time Interval is in Minutes.
    Regards,
    Alpesh

  • SAP GRC 5.3 CUP: Approver Determinator "Super Access Owner"

    Hi,
    when configuring a stage, a standard approver determinator called "Super Access Owner" could be selected.My question is where to specify the Super Access Owner in SAP GRC CUP? In the Config Guide of SAP GRC AC 5.3 a hint explains on page 145
    "If you select Superuser Access Owner as the approver determinator, the system
    fetches the configured owner from the SAP system where the Superuser Privilege
    Management is installed and assigns the request to that particular approver." 
    I do not really unterstand where to specifiy. Is it the former FireFighter in the backend.
    Did anybody user this Approver Determinator already?
    Thank you in advance.
    Marco

    Hi Marco,
    Yes this approver is defined in the backend Firefighter which is now Super User Privelege Management. The Firefighter ID owner will be taken as the approver if we select Super User Access Owner in the CUP request. This option is basically being provided for  Integration of Compliant User Provisioning and Super User Privelege Management for SAP GRC AC 5.3. You may now create a request to assign a Firefighter ID to a Firefighter in CUP and do not need to go to SPM for the same.
    In case you do not want to use this approver, please create a Custom Approver Determinator for the same.
    Hope this helps.
    Harleen

  • List of Issues/ problems in SAP GRC AC 5.3 Implementation

    Hello,
    Can anyone provide me with the list of most commonly occurring problems related to
    1- SAP GRC Suite Installation
    2- RAR Module implementation
    3- CUP Module implementation
    4- ERM Module implementation
    5- SPM Module implementation
    6- SAP PC 2.5 implementation
    7- SAP RT Module implementation
    8- SAP GRC Suite Upgradation.
    Thanks in advance!!!

    Hi Abdul,
    As such there are no issues in implemeting the AC modules.
    Just make sure that you undeploy previously installed SP before deploying the new Support packages.
    1. You have to upload the initial file (xml files) again in CUP and ERM. These files should be corresponding to latest support pack.
    2. upload the CC 53_Messages.txt file in RAR with every upgrade.
    Also restart the server after deploying any following the above steps.
    For RT you can follow the note 1225960, 1060673 and make sure to restart the server after configuring the SAP Adapter.
    Regards,
    shweta

  • Offline Form Issue in SAP GRC System

    Experts:
    I am working on creating a Offline Form for GRC Process Control  in SAP GRC System. I have couple of doubts.
    1. In the Form property, there is a new field call 'Inbound Handler'.    The document which I referred says  that, this 'inbound handler' helps in processing the inbound pdf's which comes thro mail.       In this place we need to select the class developed with 2 methods, 1.Create Instance and 2. Handle PDF.    And the document also talks about creating a separate class and referring it in the exit rules (SO50).     I am not sure whether Inbound Handler is a replacement for Exit Rules (SO50) so something else.  Please Clarify.
    2. While generating the PDF file, as you know we call the series of function modules. I have problem with the FM ' CALL FUNCTION fm_name' . When this FM is executed,  normally it should generate the PDF and XML which will be available in fp_formoutput-pdf and fp_formoutput-xml.  But in this system even when there is no issues with the export parameters, the FM is not able to generate the PDF and XML. Both fp_formoutput-pdf and fp_formoutput-xml are coming as EMPTY. Result of which when the FM 'FP_JOB_OPEN' is called it displays the message 'No Job Started' and exits the program.  This same program works find in ECC 6.0 system. Can anyone thro some light on this?
    TYPES: BEGIN OF st_test,
           one   TYPE string,
           two   TYPE string,
           three TYPE string,
           END OF st_test.
    DATA: it_test TYPE st_test  OCCURS 0.
    DATA: wa_test TYPE st_test.
    DATA: fp_outputparams type sfpoutputparams.
    DATA: fm_name TYPE rs38l_fnam.
    DATA: fp_docparams TYPE sfpdocparams.
    DATA: result TYPE sfpjoboutput.
    DATA: fp_formoutput type fpformoutput.
    SELECTION-SCREEN BEGIN OF BLOCK b1 WITH FRAME TITLE text-b02.
    PARAMETERS: p_taskid TYPE grfntaskplan-taskplan_id DEFAULT 'DF492600B7308BF19F5E00237D624FE0' OBLIGATORY,
                p_email  TYPE ADR6-SMTP_ADDR DEFAULT 'a@b' OBLIGATORY,
                p_tmail  TYPE ADR6-SMTP_ADDR DEFAULT 'a@b'' OBLIGATORY,
                p_form   TYPE fpwbformname   DEFAULT 'ZAOF_TEST',
                p_langu  TYPE spras          NO-DISPLAY DEFAULT 'EN',
                p_countr TYPE land1          NO-DISPLAY DEFAULT 'US',
                p_pages  TYPE fppagecount    NO-DISPLAY DEFAULT 2,
                p_loop   TYPE i              NO-DISPLAY DEFAULT 1.
    SELECTION-SCREEN END OF BLOCK b1.
    INITIALIZATION.
    START-OF-SELECTION.
    wa_test-one = 'One'.
    wa_test-two = 'Two'.
    wa_test-three = 'Three'.
    append  wa_test to it_test.
    END-OF-SELECTION.
    CALL FUNCTION 'FP_FUNCTION_MODULE_NAME'
      EXPORTING
        i_name     = p_form
      IMPORTING
        e_funcname = fm_name.
    fp_outputparams-getpdf = 'X'.
    fp_outputparams-nodialog = 'X'.
    CALL FUNCTION 'FP_JOB_OPEN'
      CHANGING
        ie_outputparams = fp_outputparams
      EXCEPTIONS
        cancel          = 1
        usage_error     = 2
        system_error    = 3
        internal_error  = 4
        OTHERS          = 5.
    IF sy-subrc <> 0.
      MESSAGE ID sy-msgid TYPE sy-msgty NUMBER sy-msgno
          WITH sy-msgv1 sy-msgv2 sy-msgv3 sy-msgv4.
    ENDIF.
    DO p_loop TIMES.
      fp_docparams-langu   = 'E'. "p_langu.
      fp_docparams-country = 'US'."p_countr.
      fp_docparams-FILLABLE = 'F'.
      fp_docparams-dynamic = 'X'.
      fp_docparams-UPDATE_INTERACTION_CODE = 'X'.
      CALL FUNCTION fm_name
        EXPORTING
          /1bcdwb/docparams  = fp_docparams
          Ztest      = it_test
        IMPORTING
          /1bcdwb/FORMOUTPUT = fp_formoutput
        EXCEPTIONS
          cancel             = 1
          usage_error        = 2
          system_error       = 3
          internal_error     = 4.
    ENDDO.
    CALL FUNCTION 'FP_JOB_CLOSE'
      IMPORTING
        e_result       = result
      EXCEPTIONS
        usage_error    = 1
        system_error   = 2
        internal_error = 3
        OTHERS         = 4.
    IF sy-subrc <> 0.
      MESSAGE ID sy-msgid TYPE sy-msgty NUMBER sy-msgno
          WITH sy-msgv1 sy-msgv2 sy-msgv3 sy-msgv4.
    ENDIF.
    Thanks in Advance
    Vijai
    Edited by: Thomson VijaiAnand on Apr 21, 2010 11:15 AM

    Hi Thomson 
      I met a similar probleam.
      Could you explain how you get it through?
    Thanks

  • Create user in SAP GRC AC 5.3 for each module (RAR, CUP, SPM, ERM).

    Hello,
    I have a doubt.
    The users of the modules of the SAP GRC AC 5.3 have to created in the UME of the EP Core, is that right?? And thet add the roles of each user for each module (RAR, CUP, SPM, ERM), is that right?
    Best Regards.
    Pablo Mortera.

    Hi Pablo,
    To access GRC AC 5.3 you can create one UME user and assign different roles related to four GRC component.
    Or you can create different GRC user and assign respective components roles.
    The example of GRC Admin role are.
    AEADMIN
    READMIN
    VIRSA_CC_ADMINISTRATOR
    regards,
    Sudip,

  • Add Fields in CUP Request - SAP GRC Access Control 5.3

    Dear Friends,
    I am wondering on how to add fields value in CUP (Compliant User Provisioning) SAP GRC AC 5.3.
    Currently i'm leading 9 SAP Security Coordinators in Indonesia and i want to create Performance Metrics on how long the CUP Requests is processed. It needs to enhance the CUP by adding value Delegation of Authority and the record no. of the DOA requests.
    Really appreciate your inputs on how to add fields value in CUP.
    Thank you so much
    -Mesti-
    Edited by: AnnisaPramesti on Jan 2, 2012 5:37 PM

    Hi.
    Check under http://service.sap.com/instguides
    SAP BusinessObjects -> SAP BusinessObjects Governance, Risk, Compliance (GRC) -> Access Control -> SAP GRC Access Control 5.3
    Cheers,
    Diego.

  • Reset password, block or unblock user in a R/3 from the SAP GRC AC 5.3

    Hello,
    I have 2 doubts.
    I want to know if a user can reset his password of the R/3 from the SAP GRC AC 5.3 automaticly.
    And can someone block or unblock a user using  the GRC AC 5.3 automaticly too?.
    I know you can create a user automaticly from GRC, but can I do those 2 things?
    Best Regards.
    Pablo Mortera.

    Hello,
    What I don't get is, that why do I need the HR module (HR Trigger) to lock, unlock, password slñf service of a user ID. The HR module uses employees attached to a user ID if it has one.
    Why do I need the HR module to configure the automatic request access?
    Best regards.
    Pablo Mortera.

  • SPM in CUP in a SAP GRC AC 5.3 -- "Approver not found" & "Path not found"

    hello,
    I have a problem when I try to do a request.
    I have configured the SPM in the CUP in a SAP GRC AC 5.3
    I gives me an error about "Error creating request. Approver not found ". When I took out the Manager in the Stage it gave me this error in the request "Error creating request. Path not found".
    Best regards.
    Pablo Mortera.

    You can either type in the configuration, like the what option you selected for approver (CAD or role or...etc), or other way is to capture the change log which shows what was the configuration for that stage....
    (Configuration -< Change Log -> Search Change log)
    Cheers !!
    Zaheer

  • Load approvers, solicitors & workflows to the CUP (SAP GRC AC 5.3)

    Hello,
    I want to know if there is a way to load the approvers, solicitors & workflows to the CUP (SAP GRC AC 5.3) massively.
    Best Regards.
    Pablo Mortera.

    Most of the configuration screens in CUP have an export button and an associated excel/text upload template. Use this template to mass create/update configuration data.
    Regards,
    Alpesh

  • SAP GRC AC 5.3 (CUP) connecting to module of R/3 (HR)

    Hello,
    I have a problem.
    I want to monitor from the SAP GRC AC 5.3 (CUP) some event or activation or trigger when someone create or does some modificaction to an employee from the module HR. Maybe from the Tcode PA20, AP30 or PA40.
    IS there a "how to" or a manual to configure this from the SAP GRC AC 5.3?
    Thank you in advance
    Best Regards...
    Pablo Mortera.

    Pablo,
       I am not clear on what exactly you want but as far as I know there is no monitoring capability in CUP. If you want to monitor something, you will have to write your own Java code (for CUP front-end) or ABAP code (SAP back-end) to access particular database tables.
    Regards,
    Alpesh

Maybe you are looking for