SAP GRC V10 RTA Query

Hello All,
Currently we are in GRC 5.3 SP13.We are planning to migrate to GRC 10 with PLUGIN level 7.We are in process of upgrading GRC 5.3 to Sp16 before migrating to GRC AC 10.As per the note 1655924 and 1662113,we find that GRC PLUGIN is compatible with GRC 5.3 RTA's.
Can you please confirm upto which RTA Level GRC 5.3 RTA is compatible with GRC 10 PLUGIN 7.
Thanks,
Jagat

Hi Jagat,
I don't think there is a hard dependency between the RTA VIRSA* and GRCPI* Plugin as each have a completely separate code base.
The dependency is really on the GRC 5.3 system so that the export utility can extract the data in the correct format and load into GRC 10.0 correctly (GRCFND_A).
Regards, Simon

Similar Messages

SAP GRC v10 and OIM 11g SoD

Hi,
I need some information about implementing integration with SAP GRC v10 and SoD. Does anyone of you has any experience in that configuration?
We have only base information in SAP UM Connector doc and on metalink either. Dooes anyone work with SAP GRC v10 and OIM 11g?
best
mp

See if this helps:
http://www.oracle.com/technetwork/testcontent/oimconnectordatasheet-saperp-134222.pdf
regards,
GP

WebServices in GRC v10.0

Hi all,
I have three questions to WebServices regarding SAP GRC v10.0:
1. Is it possible with v10 to check permissions via WebServices (SAPGRC_AC_IDM_*) only with the RAR component? In v5.3 it was only possible, if CUP was installed too.
2. Contain the WebService SAPGRC_AC_IDM_RISKANALYSIS in v10 a analysis of critical permissions? In v5.3 only SoDs and critical actions was checked.
3. What is the task of the parameter includeCrossSystemsAnalysis of the WebService VirsaCCRiskAnalysisService in v10? In v5.3 the value of this WebService has no impact to the SoD check (it SHOULD be:
includeCrossSystemsAnalysis == true ==> cross system SoD check
includeCrossSystemsAnalysis == false ==> single system SoD check
But doesn't matter what's the value of the parameter. There is always a cross system check. Has this changed in v10.0?
Regards
Peter

Hi Peter,
AFAIK the web services have not yet been published.
If you had the web service return violations without the requirement for CUP, what would you do with that information?
I hear that question a lot, I would really like to understand the ideas behind it.
To one of your other questions: cross system check is only possible for dedicated cross system risks. If there are no such risks defined, this will not yield any results no matter what the value of the parameter is.
Thanks,
Frank.

Implementing SAP GRC CC 5.2 - Help with RTAs for SAP 4.0B & 4.6B Needed

We are in the process of implementing the SAP GRC Compliance Calibrator 5.2 across multiple environments including SAP legacy systems. Our key issue is that we cannot find any RTAs for SAP 4.0B and 4.6B.
I am positive that someone has done this somewhere out there so I am looking for any information and/or solution that you may have implemented to resolve this.
Would you be kind enough to send the information to me asap. I can be contacted on my personal email [email protected]
Many thanks,
Carlos

Dear Carlos,
Available RTAs :
SAP 4.6B and above
PeopleTool 8.46
Oracle eBusiness Suite 11.5.10
Hyperion HFM 4.1.0
In order for target systems to connect to Compliance Calibrator, each Real Time Agent (RTA) must:
Have an entry in the operating system services file of the NetWeaver server
Server must be restarted before new client entries are registered
Be defined as a Technical Landscape in the System Landscape Directory (SLD)
Have a login account for Compliance Calibrator to use for connection
This account information is used for configuring the Java connections
Regards,
Naveen.

SAP IDM - GRC Integration Scenario Query

Hello Experts
I want to understand if the following scenario is possible or not. Or if any alternate is available. Please share your thoughts..
Current Situation:
SAP IDM 7.2, SP9, Patch 11, in use with SAP Provisioning Framework 2 and GRC Provisioning Framework 2
SAP GRC Access Control 10.1
Both systems installed, configured and connected (web service connection works well)
Desired scenario:
Business Roles will be requested for assignment in IDM. For each privilege that is contained in the Business Role, IDM will trigger the Risk Analysis task and GRC will perform a risk analysis (privilege grouping not yet defined).
If the GRC risk analysis does not discover a risk, IDM will continue the assignment process of the privileges (or rather Business Role) following the approval workflow defined in IDM.
If the GRC risk analysis discovers a risk, IDM will trigger the AC Validation task and GRC will create a validation request. This request has to be mitigated in GRC. The result will be handed over to IDM and will there be processed accordingly.
Problem:
In IDM only one task from the GRC Provisioning Framework 2 can be triggered when a privilege will be requested for assignment. In our case it’s the “AC Validation – Risk Analysis only” task:
…and the “AC Validation” task:
Using the “Risk Analysis only” task processes the pending value object right after receiving the GRC response. This prevents us from post-processing or modifying the pending value object. The assignment will directly be assigned or rejected.
That means we can either have a risk analysis only OR we’ll have a GRC AC validation request for any privilege assignment request! This is not the foreseen scenario. We want to perform a risk analysis for eacht privilege assignment and if a risk is detected in GRC, a mitigation request shall be started in GRC.
Question:
How can this problem be solved? Is the desired scenario feasible?
Thanks a lot in advance.
Regards,
Krishna.

Hi Krishna,
I suppose AC Validation – Risk Analysis only" should suffice your requirement from IDM side.
IDM prepares risk analysis request, submits the request to GRC and process the output of risk analysis.
Rest to be config'd in SAP GRC side. GRC should receive the request from IDM, performs risk analysis and creates request for remediation and send out of request to IDM. Did you check with your SAP GRC Consultant if workflows and WS are correctly configured in GRC side?
Kind regards,
Jai

SAP GRC 10.1 AMF No data selected when adding duplicate fields from separate tables for configurable data sources

Hi There,
In SAP GRC 10.0, our team had an issue where we could not add duplicate fields from separate table (see ERROR: Select Currency/UoM field for the selected analyzed fields). This was resolved by the SAP Note 1904313/ 1904314 (http://service.sap.com/sap/support/notes/1904313).
We upgraded our system to SAP GRC 10.1 SP05 and could now add the duplicate fields from separate tables. SAP Note 1904313/ 1904314 was part of SAP GRC 10.1 SP03 so it makes sense that we, in a higher version (SP05), would be able to do this.
The issue now is when we add the duplicate fields from different tables and run the Ad-hoc Query to test if the data source works correctly, the No Data Selected warning persists. This means that the data source provides no data for analysis, which is required to write our business rules.
Below is an example:
Basic data source with just one currency reference field EBAN-WAERS.
When you run the Ad-Hoc Query you receive data.
Basic data source with second currency reference field EKKO-WAERS.
When you run the Ad-Hoc Query no data is found.
Please also make reference to the following thread logged by my colleague (ERROR: Select Currency/UoM field for the selected analyzed fields)
Any assistance to receive data with duplicate fields from separate tables will be highly appreciated.
Thanking you in advance.
Regards
Gary Khan

Hi
following are the error messages from dump
hrtText
   There is already a line with the same key.
hat happened?
   Error in ABAP application program.
   The current ABAP program "SAPLCKMS" had to be terminated because one of the
   statements could not be executed.
   This is probably due to an error in the ABAP program.
rror analysis
   You wanted to add an entry to table "\FUNCTION-POOL=CKMS\DATA=T_DYN_CKMLCR",
    which you declared
   with a UNIQUE KEY. However, there was already an entry with the
   same key.
   This may have been in an INSERT or MOVE statement, or within a
   SELECT ... INTO statement.
   In particular, you cannot insert more than one initial line into a
   table with a unique key using the INSERT INITIAL LINE... statement.
rigger Location of Runtime Error
   Program                                 SAPLCKMS
   Include                                 LCKMSF01
   Row                                     226
   Module type                             (FORM)
   Module Name                             DYNAMIC_PERIOD_CLOSING
Source code where dump ocured
222
223           APPEND ht_ckmlpp TO t_add_ckmlpp.
224           APPEND LINES OF ht_ckmlcr TO t_add_ckmlcr.
225           INSERT ht_ckmlpp INTO TABLE t_dyn_ckmlpp.
>>>>           INSERT LINES OF ht_ckmlcr INTO TABLE t_dyn_ckmlcr.
227         ENDWHILE.
Also I guess there is problem with material ledger in R/3 side
I have never worked on material ledger before so dont hav idea of Tcode and tables in SAP R/3 for material ledger.
Thanks
Navneet

SAP GRC Access Control 5.3 intergration with orcale

Good Day GRC Gurus,
We want to integrate SAP GRC Access Control 5.3 with ORACLE.
It would be great if someone could share some documents, presentation and experience on the same.
Thanks in advance!!!!!!!!!!!!!
Thanks and Regards,
Jagat

Hello Hersh,
RTA for Oracle is basically a set of PL/SQL stored procedures to create grc schema, grant access and object creation. The package was created using oracle 11.5.10.2 version. I am not sure about the compatibility of the package with the new versions of oracle but still batch mode risk analysis is achievable even if the RTA is not compatible.
I do not really like batch mode but it does serve the purpose. If I get a chance to test oracle RTA on new version I will surely share it with you.
Best Regards,
Amol Bharti
http://amudee.com

Upload of SU24 Auth. objects in SAP GRC AC 5.3

Hello,
We are in process of SAP GRC AC 5.3 implementation, and our SAP System is not updated to SU24 (Authorization objects), in which USOBT_C is populated.
In GRC AC 5.3 Pre-implementation checklist, it is mentioned about the above, being necessary.
If the SAP System is not updated to SU24, then what is the other way, to upload authorization objects in RAR Post-Install Steps, after we have already completed SAP GRC Tools ( all the SCA files) install and backend RTA installation?
Thanks!

hi
1. Create file (automated via batch job) from SU24 (report /VIRSA/ZCC_DOWNLOAD_SAPOBJ)
==> SA38 --> Background --> create a variant where you fill out the value for the server + filename (no extension needed for filename) --> schedule periodically
2. convert to UTF-8 format (how can this be automated?)
--> not necessary ; in my system it is UTF-8 by default
3. upload periodically into RAR via background job (from AIX based file system !)
--> configuration tab --> upload objects --> permission --> choose system --> leave local file blank and fill out server location (drive letter) --> click background and schedule the job daily. This is not a heavy job, therefore daily.
Sam Szafranski
Senior Consultant
axl & trax

SAP GRC latest patch in MoPZ

Hi Experts
We are planning to upgrade our ERP to EHP6 from EHP4 . While genreating the stackfile , in the select add step , i do not find the latest patch for SAP GRC component 5.3 (VIRSAHR and VIRSANH).
Select Add on :
I have assigned the required product version for GRC components . Could you please help me , how to get the latest version of the GRC components in the MoPZ .
Regards
Bala

Hi,
There have been enhancement packages release by SAP in ECC 6.0 and the latest released is EHP 6 for ECC 6.0
for the software component SAP_HR the release is 604 and the level is 42
for the software component EA_HR the release is 605 and the level is 19.
Your BASIS consultant would be of great help in this regard letting you know whats the latest.
I hope i addressed your query.
All the best to you
Regards
RR

SAP GRC AC with SAP IdM and without SAP Idm

Hello,
Could anyone provide me what are the advantages implementing SAP IdM with SAP AC suite?
Can I use SAP GRC User Provisioning tool with SAP HCM position based concept?
Thanks in advance.
-Harry

Hi ,
In GRC 10 there is no concept of web services . GRC 10 uses native SQL query for calling risk analysis which mean no need to configure web service in GRC 10
Thanks & Regards
Asheesh

Scope and Proposal preparation for SAP GRC AC Implementation.

Hi ,
I would like to know procedure how the RFP (Request for proposals) are prepared for SAP GRC AC Module implementation. and also how the scope and effort estimation are calculated.
are there any guidelines and checklist are available to be followed.
is there any generic approach followed during SAP GRC AC implementation for proposal as well as for effort estimation.
Pelase clarify my doubts
Regards,
RK

Hi,
Use RTA on SAP BASIS 7.00 System for any system other than ECC which has ABAP and Basis Level 7.00 with Kernel 7.00
I don't see any option for 7.20, may be it will be available later on.
We have SRM connected to GRC so I can cofirm, yes it is possible to connect SRM to GRC and work with SRM rulebook. RTA and Post-RTA activites and JCO and RAR connectors are a must to get it work properly. In fact all configurations are required as it is in ECC system.
No HR RTA is required ,as there is no HR module in SRM.
Regards,
Sabita

Person who done the Sap GRC Tool Setup

Hi Experts,
   Hope you are doing well.
i m need in SAP GRC.
    I need to do the lab setup of SAP GRC tool in our company .to do that what the setup we require (software and hardware). Its help me if you provable me in details.
    As of now I have installed IDES ECC6 (Hardware: win 2003, 2 GB ram, 250 GB Hard disk) in company Lab.
Query,
1, what are software and server I need to setup to work on Sap GRC in LAB.
2, What are the added on software we need to SAP GRC Tool (In details)
3, Can I get SAP GRC (trial ver) and patch ( In details) . I have OSS id to download also in SAP Site
Thanks for your Support
Regards
keshava

1, what are software and server I need to setup to work on Sap GRC in LAB.: You need at the bare minimum a system running Netweaver AS 7.0 JAVA with SP12. You could run it on the same system as your ECC installation, but I would not recommend this in a production environment due to performance overheads.
2, What are the added on software we need to SAP GRC Tool (In details): In addition to your NWAS7.0 JAVA server, you'll just need the installation files downloaded through service marketplace and follow the configuration guide from the same place.
3, Can I get SAP GRC (trial ver) and patch ( In details) . I have OSS id to download also in SAP Site: I don't believe you can get a trial version of GRC AC 5.3, but you might consult your SAP rep to make sure.

Cross-enterprise integration of SAP GRC Access Control with PeopleSoft

Friends,
Does anybody has/have/had the owner to implement Cross-enterprise integration of SAP GRC Access Controls 5.2 with PeopleSoft ?
If yes, what are the key points and approach one should keep in mind while going for this kind of cross-enterprise implementation.
Is there any reference material, blog, wiki or such informative resource regarding cross enterprise GRC implementation available on the web?
I tried to search, but could not get good results.
Any help would be highly appreciated.
Best Regards,
Amol Bharti

Amol-
From my experience:
CC 5.2 with Peoplesoft: as long as you have the RTA's installed in the Peoplesoft system and create the connectors in CC, you are good to go.
AE 5.2 with Peoplesoft: cannot provision to Peoplesoft, however you can connect with Peoplesoft HR for Password Self-Service. You have the capability to provision to SAP HR.
FF 5.2 with Peoplesoft: N/A
RE 5.2 with Peoplesoft: N/A
I am not sure if there are any standalone docs out there for AC integration with Peoplesoft. And the 5.2 manuals have sparse information on integration. However, the AC 5.3 manuals have more detailed info on the integration piece with various other non-SAP systems.
Sorry, I couldn't share more info, as that is all I know for now...
Ankur
GRC Consultant

SAP GRC NF-e 10.0: Erro na interface NFB2B_procNFe_IB (contendo CDATA)

Olá a todos.
Poderiam por gentileza me ajudar com a questão abaixo?
Estou com o seguinte problema na interface NFB2B_procNFe_IB do SAP GRC NF-e 10.0 (Support Package 15):
Recebemos uma série de XML's de montadoras de automóveis que contém informações adicionais nas tags <infAdProd> e <infCpl>, como por exemplo:
<infAdProd>VLR. PIS R$ 6,81 VLR. COFINS R$ 31,44<![CDATA[<ID ITEM=005115/><PED=4500159772/> <UM=PC/>]]></infAdProd>
Porém ao inserir essa mensagem na interface NFB2B_procNFe_IB, a interface interpreta da seguinte forma:
    <infAdProd>VLR. PIS R$ 6,81 VLR. COFINS R$ 31,44
      <![CDATA[
        <ID ITEM=005115/>
        <PED=4500159772/>
        <UM=PC/>]]>
        </infAdProd>
Sendo assim, ocorre o erro abaixo:
<nm:ExchangeFaultDataExt xmlns:nm="http://sap.com/xi/NFE/common" xmlns:prx="urn:sap.com:proxy:NED:/1SAI/TAS8DFA2846CCAA9B6570C6:702">
<faultText>Erro durante a transformação: Fim de elemento '{http://www.portalfiscal.inf.br/nfe}infAdProd' esperado programa: /1SAI/SAS6F90159886715E7C4560 caminho: nfeProc(1)NFe(1)infNFe(1)det(4)infAdProd(3)ID(1)</faultText>
</nm:ExchangeFaultDataExt>
Sei que temos algumas opções como:
1. Alterar o XML no mapping do PI; (Funcionaria com mensagens processadas através do PI, mas não conseguiria inserir um XML manualmente via SE80)
2. Alterar o XML no ABAP ao executar a classe /XNFE/CL_006NFB2B_PROC_NFE_IB; (Fazer algum replace nesses caracteres "<" e ">" por "<" ">"
Mas como fazer isso sem danificar a assinatura do XML que já está assinado e autorizado na SEFAZ?
Existe alguma nota SAP para corrigir esse problema?
Agradeço desde já a atenção.
Rodrigo Costa.

Felipe,
também tive o mesmo problema do lado do NTB2B_procNFe_OB. Tentei de várias formas transformar o XML para ficar aderente ao cliente, porém o PI sempre alterava o XML (possivelmente devido ao encoding).
Vi muitos posts sobre o tema, mas ainda quando era o GRC NF-e 1.0, com a assinatura no Java. Para o GRC 10.0 não funciona, pois quando o xml chega no PI, o mesmo já está assinado, portanto não se pode alterar nada.
A solução foi para nesses casos específicos enviar o xml através do ECC mesmo.
Mas para o NFB2B_procNFe_IB ainda sem solução.
Abs.
Rodrigo.

SAP GRC NFE não processa NFE's com itens que possuam diferentes alíquotas de IPI.

SAP GRC NFE não processa NFE's com itens que possuam diferentes alíquotas de IPI.
Alguém sabe se esse problema já foi resolvido ou conhece um contorno para essa situação ?
Desde a implantação em junho de 2013 não conseguimos processar notas que possuem itens com diferentes aliquotas de IPI.

Bom dia Fernando (que bom te encontrar aqui também :-)!
Então, o Denny da SAP Alemanha me retornou dizendo que temos que instalar o XI Content SLL-NFE 10.0 e criar novamente os cenários da NF-e.
Eu estou entrando em contato com o nosso Basis que fica em Lima para ver se é possível que ele instale este componente, para que eu crie novamente os cenários da NF-e (extensão _900).
Após a recriação dos cenários, será que eu consigo reenviar as NF-e de teste novamente ou terei que estornar os documentos e fazer os processos novamente?
Obrigado pela ajuda!
Att.
Daniel

SAP GRC V10 RTA Query

Similar Messages

Maybe you are looking for