SAP GRC precautions

Hi SDN,
We have SAP ERP system which is on 4.6c and SAP business objects GRC implemented in other standalone box. We are now upgrading to ECC 6.0 . my question what are the changes and precautions we need to take care when we upgrade our ERP system so that our GRC setup doesn't get affected.
Regards!!

Hi Madhu,
You are saying that you have Ztransaction Codes and some of them are not going to exist. So I guess, your ruleset might have been customized as well. Though in market place we'll get the Global Rule Set, which is delivered along with the AC software (predefined one). It may not meet all your business requirements. it's better to have a back up of the current rule set. I suggest you to download the same and keep it for further comparison and analysis. Hope it'll helpful for you in postupgrade scenario.
Coming to RFC destination, in general there won't be any change after upgrade. But it's better to take screenshots of all the RFC destination and their configuration details and keep it with you. If any RFC doesn't work properly after upgrade, it'll help you to check and rectify the same.
All the very best.
Regards,
Gurugobinda

Similar Messages

SAP GRC NF-e 10.0: Erro na interface NFB2B_procNFe_IB (contendo CDATA)

Olá a todos.
Poderiam por gentileza me ajudar com a questão abaixo?
Estou com o seguinte problema na interface NFB2B_procNFe_IB do SAP GRC NF-e 10.0 (Support Package 15):
Recebemos uma série de XML's de montadoras de automóveis que contém informações adicionais nas tags <infAdProd> e <infCpl>, como por exemplo:
<infAdProd>VLR. PIS R$ 6,81 VLR. COFINS R$ 31,44<![CDATA[<ID ITEM=005115/><PED=4500159772/> <UM=PC/>]]></infAdProd>
Porém ao inserir essa mensagem na interface NFB2B_procNFe_IB, a interface interpreta da seguinte forma:
    <infAdProd>VLR. PIS R$ 6,81 VLR. COFINS R$ 31,44
      <![CDATA[
        <ID ITEM=005115/>
        <PED=4500159772/>
        <UM=PC/>]]>
        </infAdProd>
Sendo assim, ocorre o erro abaixo:
<nm:ExchangeFaultDataExt xmlns:nm="http://sap.com/xi/NFE/common" xmlns:prx="urn:sap.com:proxy:NED:/1SAI/TAS8DFA2846CCAA9B6570C6:702">
<faultText>Erro durante a transformação: Fim de elemento '{http://www.portalfiscal.inf.br/nfe}infAdProd' esperado programa: /1SAI/SAS6F90159886715E7C4560 caminho: nfeProc(1)NFe(1)infNFe(1)det(4)infAdProd(3)ID(1)</faultText>
</nm:ExchangeFaultDataExt>
Sei que temos algumas opções como:
1. Alterar o XML no mapping do PI; (Funcionaria com mensagens processadas através do PI, mas não conseguiria inserir um XML manualmente via SE80)
2. Alterar o XML no ABAP ao executar a classe /XNFE/CL_006NFB2B_PROC_NFE_IB; (Fazer algum replace nesses caracteres "<" e ">" por "<" ">"
Mas como fazer isso sem danificar a assinatura do XML que já está assinado e autorizado na SEFAZ?
Existe alguma nota SAP para corrigir esse problema?
Agradeço desde já a atenção.
Rodrigo Costa.

Felipe,
também tive o mesmo problema do lado do NTB2B_procNFe_OB. Tentei de várias formas transformar o XML para ficar aderente ao cliente, porém o PI sempre alterava o XML (possivelmente devido ao encoding).
Vi muitos posts sobre o tema, mas ainda quando era o GRC NF-e 1.0, com a assinatura no Java. Para o GRC 10.0 não funciona, pois quando o xml chega no PI, o mesmo já está assinado, portanto não se pode alterar nada.
A solução foi para nesses casos específicos enviar o xml através do ECC mesmo.
Mas para o NFB2B_procNFe_IB ainda sem solução.
Abs.
Rodrigo.

SAP GRC NFE não processa NFE's com itens que possuam diferentes alíquotas de IPI.

SAP GRC NFE não processa NFE's com itens que possuam diferentes alíquotas de IPI.
Alguém sabe se esse problema já foi resolvido ou conhece um contorno para essa situação ?
Desde a implantação em junho de 2013 não conseguimos processar notas que possuem itens com diferentes aliquotas de IPI.

Bom dia Fernando (que bom te encontrar aqui também :-)!
Então, o Denny da SAP Alemanha me retornou dizendo que temos que instalar o XI Content SLL-NFE 10.0 e criar novamente os cenários da NF-e.
Eu estou entrando em contato com o nosso Basis que fica em Lima para ver se é possível que ele instale este componente, para que eu crie novamente os cenários da NF-e (extensão _900).
Após a recriação dos cenários, será que eu consigo reenviar as NF-e de teste novamente ou terei que estornar os documentos e fazer os processos novamente?
Obrigado pela ajuda!
Att.
Daniel

SAP SP necessária para suportar os componentes para o SAP GRC NFE 1.0 no XI

oi,
Como estamos atualizando as nossas caixas de XI de SAP XI SAP PI 3.0 para 7,11, verificando o SLD notamos que Nota Fiscal componente de software está disponível. Assim, a pergunta é o que é que os Service Packs do sistema fonte precisa ter, a fim de fornecer todos os componentes necessários para a NF-e?
temos dois sistemas de fonte da qual enviamos os dados para XI, você pode sugerir o que é o pacote de serviços adequados para apoiar SAP GRC NFE 1.0 no XI
1> 6,0 SAP ECC, SP, 14
EHP 2, Nível 2
PI_Basis = 2005_1_700, Level 14
ST = PI 2008_1_700 Nível 2
2> 6,0 SAP ECC, EHP 4
Muito obrigado

Ola, vi o seu e-mail mas resolvi responder por aqui!
Na realidade, se voce for realmente trabalhar com o GRC, dependendo da secretaria da fazenda que voce ira trabalhar aconselhor que voce aplique o sp15 no grc, consule SAP Note 1487119, nessa nota haverao todos os procedimentos necessarios.
Como haviamos falado anteriormente por e-mail, seria necessario, caso vc realmente queira trabalhar com o GRC a aplicacao de algumas notas tecnicas no proprio GRC.
1477834     XML Layout Version 2.00: Missing parameters in NF-e BAdI
1487119     SAPK-10015INSLLNFE: Support Package 15 for SLL-NFE
1496216     Rejection of NFe because of wrong data type of date fields
1499921     Problem with validation after implementing SP15
1498700     Problem on signing NF-e
1497767     Fill field qTrib for new layout version 2.0
1500046     Upgrade validation rule for field ID for version 2.0
1500742     Adjust validation for field NADICAO and NSEQADIC layout 2.00
1501545     Problems in trying to see a XML in the IE
1502612     Select the NFe Status Check Service for Incoming B2B message
1502217     Extend validation rules for <DI>/<adi>, layout 2.00
Sem mais, precisando me mais ajuda avise

SAP GRC NFE

Hello,
eu estou trabalhando no electronica fiscal de Nota. Nós temos seguintes sistemas: --
SAP R/3 -
SAP GRC NFE--JAVA (assinaturas digitais)-SAP NETWEAVER PI/XI -
As AUTORIDADES (PARA A AUTORIZAÇÃO)
como eu verificam a conexão entre estes sistemas. Como eu sei uma comunicação existe entre
SAP GRC NFE--JAVA (assinaturas digitais)-SAP NETWEAVER PI/XI -
A conexão das AUTORIDADES (PARA A AUTORIZAÇÃO)
foi feita já com sucesso entre SAP R/3 E SAP GRC NFE através do RFC.
Por favor ajuda.
Agradecimentos adiantado,
Honey

Bom dia Honey,
Além da comunicação entre os sistemas, você deve customizar as Sefaz-es e também os CNPJs na SPRO do GRC.
Acompanhe as telas aqui:
SAP GRC NFE 1.0 - New Solution Introduction & Implemention Best Practices
Você pode testar o serviço assinador (java) diretamente pelo web service:
Web Service Navigator
Leonardo deu uma boa dica para testar o customizing dos serviços e comunicação com o sistema externo (Sefaz).
Atenciosamente, Fernando Da Ró

SAP GRC NF-e 10.0 - Problema durante Upgrade (mensagem /XNFE/APP 011)

Boa tarde a todos!
Realizamos o "Upgrade" do SAP GRC NF-e da versão 1.0 para a versão 10.0 (SLL-NFE 900, nível 0008) e estamos convivendo com um problema em uma mensagem XML do PI.
Na transação SXMB_MONI, monitor de mensagens processadas, ao filtrar por mensagens com SELSTAT = 017 Application Error - Manual Restart Possible, encontramos problemas em mensagens do seguinte tipo:
Sender: BATCH_BatchProcess_006
Receiver: CLNT100TND (Mandante 100 do Sistema TND)
Receiver Interface Namespace: http://sap.com/xi/NFE/006
Receiver Interface: BATCH_nfeRecepcaoLoteResponse_IB
Para estes, quando vou até o detalhe da mensagem e seleciono "Call Inbound Proxy" (com status vermelho), em "Payloads", vejo o erro "Não existe ID de lote 000000000000000".
Pelo que vi na tabela T100, a mensagem se refere ao código /XNFE/APP, número 011.
Por que será que está acontecendo este erro? Alguém já vivenciou esta situação antes?
P.S.: Já abri chamado na SAP e eles encaminharam o problema para a SAP Alemanha...
Obrigado,
Daniel

Bom dia Fernando (que bom te encontrar aqui também :-)!
Então, o Denny da SAP Alemanha me retornou dizendo que temos que instalar o XI Content SLL-NFE 10.0 e criar novamente os cenários da NF-e.
Eu estou entrando em contato com o nosso Basis que fica em Lima para ver se é possível que ele instale este componente, para que eu crie novamente os cenários da NF-e (extensão _900).
Após a recriação dos cenários, será que eu consigo reenviar as NF-e de teste novamente ou terei que estornar os documentos e fazer os processos novamente?
Obrigado pela ajuda!
Att.
Daniel

List of Issues/ problems in SAP GRC AC 5.3 Implementation

Hello,
Can anyone provide me with the list of most commonly occurring problems related to
1- SAP GRC Suite Installation
2- RAR Module implementation
3- CUP Module implementation
4- ERM Module implementation
5- SPM Module implementation
6- SAP PC 2.5 implementation
7- SAP RT Module implementation
8- SAP GRC Suite Upgradation.
Thanks in advance!!!

Hi Abdul,
As such there are no issues in implemeting the AC modules.
Just make sure that you undeploy previously installed SP before deploying the new Support packages.
1. You have to upload the initial file (xml files) again in CUP and ERM. These files should be corresponding to latest support pack.
2. upload the CC 53_Messages.txt file in RAR with every upgrade.
Also restart the server after deploying any following the above steps.
For RT you can follow the note 1225960, 1060673 and make sure to restart the server after configuring the SAP Adapter.
Regards,
shweta

Can SAP GRC AC 5.3 connect without any problem with SAP R/3 4.7 Enterprise?

hello,
I went to the PAM in the SAP Marketplace to see if SAP GRC AC 5.3 could connect to SAP R/3 4.7 Enterprise but I can't see all the "Add-On Product Version for...", it's cut off.
Can SAP GRC AC 5.3 connect without any problem with SAP R/3 4.7 Enterprise?
If I can't is there any proof about it? I have to show it to a client.
Best Regards,
Pablo Mortera,

Pablo,
GRC AC 5.3 works perfectly fine with SAP's R/3 4.6c, mySAP ERP 4.7 and ECC systems. In fact we have two 4.7 Enterprise systems connected to GRC AC 5.3 system.
You can get the details of supported SAP ERP systems under prerequisite section of Info page of GRC AC 5.3 , it can be accessed on marketplace at -
Downloads-->Installations and Upgrades - Entry by Application Group > SAP Solutions for Governance, Risk, and Compliance>SAP GRC Access Control>SAP GRC ACCESS CONTROL>SAP GRC ACCESS CONTROL 5.3
Just ensure to have proper BASIS and ABAP support pack level as mentioned in prerequisites.
Regards,
Amol

Nota fiscal send from R/3 to SAP GRC NFE

Hello Everyone,
We have send NFe from sap r/3 to sap grc nfe thru RFC . We cannot trace in GRC .
What could be the possible error .
please help.
Honey

Hi Honey,
If configuration is correct on R/3 you can see the received data on tables /xnfe/nfehd (header), /xnfe/nfeit (item) and /xnfe/nfe_hist (history).
A good approuch to you check what system is being called is put a break-point before R/3 call GRC on the end of function J_1B_NF_MAP_TO_XML or include LJ_1B_NFEF42.
You can easily start debug on R/3 and follow inside GRC automatically when debugging, but the user of RFC need to be DIALOG and have debug rights. It's not possible do it with a service user.
Check if the correct FM is being called /xnfe/nfe_create, for other messaging system the FM is J_1B_NFE_XML_OUT (if customizations is wrong you will check this error on ST22 on GRC).
Kind regards, Fernando Da Ros

SAP GRC 10.0 on ECC

Hi Guys,
We are planning on implementing SAP GRC 10.0. Our Basis guy has suggested that we can use ECC (EHP 6) box for installing the add on(GRCFND_A) component for it. The reason for this is to avoid adding another system to the landscape and to reduce the cost of implementation
Are there any known issues using this approach?
Thanks in advance,
Silver

Hi
the GRC project is totally IT driven.
I get why you are having to drive this - especially when you have to respond to audit requirements and your focus is on support processes.
However, GRC is all about business risk management - Governance, Risk and Compliance (well internal controls). The GRC System is just the tool to manage this. Without business buy in how is this going to be successful? Who will review business process to determine what a risk is? Who in a senior leadership position will determine what risks are acceptable? Who will determine appropriate controls, report on them, and more importantly enforce them? Who in a leadership position will champion the project and support why a user must work a certain why (including access removed from them)?
I get that you are focussing on a POC and trying to minimise cost but what happens post POC? I've given recommendations where I've said don't put in GRC until you sort your process and culture. I've done this as much as the innner techy in me knows I won't get to play with a new toy because without all the business buy-in you will have a system built and deployed that gives you a false sense of security when it comes to managing access controls.
Another way to look at the SP issues - what happens if it's on ECC and the functional team (aka the business representatives) demand an SP increase for their functionality? They proceed to increase SP and now your functionality stops working.. which then impacts the business as you can't process their access requests and give them timely access to the system (assume this is your business case). Are your basis team going to tell the business that they can't have the SP stack increase because IT needs the system on a certain level and they need to wait until next time it's compatible?
Good luck with your POC. I understand it will allow you to use the tool and check what will work for the business. If you are still undecided on system landscape post POC, take care in having that decision made for you. As you go down the POC path and time runs out the project may move from POC to design/build and now that it's working there will be reluctance to move it to a separate system.
Regards
Colleen

SAP GRC 10.0 Risk Management - Forecasting Horizon Scoring Analysis Mode

Hi everyone,
In SAP GRC 10.0 Risk Management Support Package 7, we need to assess a corporate risk by performing an automatic analysis aggregation based on a scoring analysis profile.
The problem is that corporate risks must be created based on a forecasting horizon.
So, can we create forecasting horizons with scoring analysis mode? How? Must be enabled through customizing or applying a SAP note?
Best Regards,
Chema Traveso

Hi,
I think this is still user-specific, as it was in 5.X. I have checked the new GRC authorisation object parameters delivered within the roles and also tried to see if a Admin user was able to see all the variants created by the different users, but so far I have not found a solution.
It may be worthwhile to raise this in "IdeaPlace", hoping it gets enough votes and SAP's attention for implementing in a future Support Pack delivery.

SAP GRC 10.0 - Risk Analysis - Define global variant

Hi Experts,
We are implementing SAP GRC 10.0 and we have a question about variant management in Access Risk Analysis.
When we saved a variant, it seems that this variant is user specific.
Is it to possible to define this variant as default for all users?
Thanks.
Best regards,
Nicolas RICHARD

Hi,
I think this is still user-specific, as it was in 5.X. I have checked the new GRC authorisation object parameters delivered within the roles and also tried to see if a Admin user was able to see all the variants created by the different users, but so far I have not found a solution.
It may be worthwhile to raise this in "IdeaPlace", hoping it gets enough votes and SAP's attention for implementing in a future Support Pack delivery.

SAP IDM 7.0 connecting to SAP GRC 10.1

Hi Gurus,
I was looking into connecting SAP IDM 7.0 with SAP GRC AC 10.1 and I cannot find a suitable connector for this.
Could any of you provide some guidance on how to make this connections.
Thanks and Regards,
Juan

If i remember correctly the 7.0 version had only mx_provision, mx_deprovision and mx_modify -tasks so the integration would have be built on these tasks. As there is no validate add task to hang the GRC call GRC would have to do provisioning.
7.0 datamodel is different than 7.2, I haven't studied in detail but would guess there is enough difference also in the tables that store tasks/jobs etc that the 7.2 GRC provisioning framework would not even import to 7.0. You would need to set-up a 7.2 on the side to study the framework to see how to duplicate the tasks..
VDS in the middle is another thing as it would need to be able to communicate with your custom connector in 7.0.
If you must stick with 7.0 maybe the GRC connector of 7.1 is worth a try.. But you would probably need also older VDS.
Depending on the level of your existing customisations and what data from 7.0 is worth keeping the upgrade to 7.2 is not necessarily big thing compared to the effort of building the interim custom interface.. The real question is how big and complex is your 7.0 implementation?
regards, Tero

Mitigation in SAP GRC AC

Hi all,
Two questions regarding mitigation in SAP GRC AC:
1)
Reading through the forum, we have seen that if monitor does not execute the report (action) within the frequecny set and alert is generated. Are these alerts sent out to the mitigation controls' approvers automatically or need to be triggered by executing alerts generation with mitigation flags set?
2)
If WF is set and appropriate configuration is set in RAR, approver activities in CUP are approval for mitigation control maintenance and mitigation control assignment. Is this correct?
Thanks in advance. Best regards,
Imanol

Hi Imanol,
Here is my response:
1) Reading through the forum, we have seen that if monitor does not execute the report (action) within the frequecny set and alert is generated. Are these alerts sent out to the mitigation controls' approvers automatically or need to be triggered by executing alerts generation with mitigation flags set?
You need to go to Alert Generation -> Select Generate Alert log, Control Monitoring under Action Monitoring and Alert notification.
2) If WF is set and appropriate configuration is set in RAR, approver activities in CUP are approval for mitigation control maintenance and mitigation control assignment. Is this correct?
Yes, that is correct.
Regards,
Alpesh

Offline Form Issue in SAP GRC System

Experts:
I am working on creating a Offline Form for GRC Process Control in SAP GRC System. I have couple of doubts.
1. In the Form property, there is a new field call 'Inbound Handler'.    The document which I referred says that, this 'inbound handler' helps in processing the inbound pdf's which comes thro mail.       In this place we need to select the class developed with 2 methods, 1.Create Instance and 2. Handle PDF.    And the document also talks about creating a separate class and referring it in the exit rules (SO50).     I am not sure whether Inbound Handler is a replacement for Exit Rules (SO50) so something else. Please Clarify.
2. While generating the PDF file, as you know we call the series of function modules. I have problem with the FM ' CALL FUNCTION fm_name' . When this FM is executed, normally it should generate the PDF and XML which will be available in fp_formoutput-pdf and fp_formoutput-xml. But in this system even when there is no issues with the export parameters, the FM is not able to generate the PDF and XML. Both fp_formoutput-pdf and fp_formoutput-xml are coming as EMPTY. Result of which when the FM 'FP_JOB_OPEN' is called it displays the message 'No Job Started' and exits the program. This same program works find in ECC 6.0 system. Can anyone thro some light on this?
TYPES: BEGIN OF st_test,
       one   TYPE string,
       two   TYPE string,
       three TYPE string,
       END OF st_test.
DATA: it_test TYPE st_test OCCURS 0.
DATA: wa_test TYPE st_test.
DATA: fp_outputparams type sfpoutputparams.
DATA: fm_name TYPE rs38l_fnam.
DATA: fp_docparams TYPE sfpdocparams.
DATA: result TYPE sfpjoboutput.
DATA: fp_formoutput type fpformoutput.
SELECTION-SCREEN BEGIN OF BLOCK b1 WITH FRAME TITLE text-b02.
PARAMETERS: p_taskid TYPE grfntaskplan-taskplan_id DEFAULT 'DF492600B7308BF19F5E00237D624FE0' OBLIGATORY,
            p_email TYPE ADR6-SMTP_ADDR DEFAULT 'a@b' OBLIGATORY,
            p_tmail TYPE ADR6-SMTP_ADDR DEFAULT 'a@b'' OBLIGATORY,
            p_form   TYPE fpwbformname   DEFAULT 'ZAOF_TEST',
            p_langu TYPE spras          NO-DISPLAY DEFAULT 'EN',
            p_countr TYPE land1          NO-DISPLAY DEFAULT 'US',
            p_pages TYPE fppagecount    NO-DISPLAY DEFAULT 2,
            p_loop   TYPE i              NO-DISPLAY DEFAULT 1.
SELECTION-SCREEN END OF BLOCK b1.
INITIALIZATION.
START-OF-SELECTION.
wa_test-one = 'One'.
wa_test-two = 'Two'.
wa_test-three = 'Three'.
append wa_test to it_test.
END-OF-SELECTION.
CALL FUNCTION 'FP_FUNCTION_MODULE_NAME'
EXPORTING
    i_name     = p_form
IMPORTING
    e_funcname = fm_name.
fp_outputparams-getpdf = 'X'.
fp_outputparams-nodialog = 'X'.
CALL FUNCTION 'FP_JOB_OPEN'
CHANGING
    ie_outputparams = fp_outputparams
EXCEPTIONS
    cancel          = 1
    usage_error     = 2
    system_error    = 3
    internal_error = 4
    OTHERS          = 5.
IF sy-subrc <> 0.
MESSAGE ID sy-msgid TYPE sy-msgty NUMBER sy-msgno
      WITH sy-msgv1 sy-msgv2 sy-msgv3 sy-msgv4.
ENDIF.
DO p_loop TIMES.
fp_docparams-langu   = 'E'. "p_langu.
fp_docparams-country = 'US'."p_countr.
fp_docparams-FILLABLE = 'F'.
fp_docparams-dynamic = 'X'.
fp_docparams-UPDATE_INTERACTION_CODE = 'X'.
CALL FUNCTION fm_name
    EXPORTING
      /1bcdwb/docparams = fp_docparams
      Ztest      = it_test
    IMPORTING
      /1bcdwb/FORMOUTPUT = fp_formoutput
    EXCEPTIONS
      cancel             = 1
      usage_error        = 2
      system_error       = 3
      internal_error     = 4.
ENDDO.
CALL FUNCTION 'FP_JOB_CLOSE'
IMPORTING
    e_result       = result
EXCEPTIONS
    usage_error    = 1
    system_error   = 2
    internal_error = 3
    OTHERS         = 4.
IF sy-subrc <> 0.
MESSAGE ID sy-msgid TYPE sy-msgty NUMBER sy-msgno
      WITH sy-msgv1 sy-msgv2 sy-msgv3 sy-msgv4.
ENDIF.
Thanks in Advance
Vijai
Edited by: Thomson VijaiAnand on Apr 21, 2010 11:15 AM

Hi Thomson
I met a similar probleam.
Could you explain how you get it through?
Thanks

SAP GRC precautions

Similar Messages

Maybe you are looking for