SoD Rules for SRM

HI guys,
we have introduced GRC AC RAR 5.3 and rolling now out SRM using more or less the standard SRM roles.
Our problem is to ensure SoD compliance before rolling out SRM worldwide and need to change roles right after.
Is there a GRC / SoD Ruleset for SRM available as it is provided in the GRC SoD ruleset for ERP?
Thanks!
Chris

Hi..
Yes it supports
Regards
Gangadhar

Similar Messages

Query on SoD matrix for CRM-Webshop applications - RAR 5.3

Hi,
We are implementing RAR 5.3 for CRM system. We observed that GRC has standard SoD matrix for CRM application. But there is no SOD matrix available for the Webshop (B2B/B2C/BOB) where access will be provided to the external users
We are of the opinion that there will be no SoD conflicts for the Roles/Users created for the webshop applications as the webshops are used by the external users i.e. customers.
Is there any standard SoD matrix available for the authorization objects of the webshop application with SAP? Has anybody configured SoD rules for the webshop application roles? If yes, please provide us the link of the information where we will get this rule matrix
Thanks in advance.
Srihari.K

Hi Sri,
The standard rule for CRM is available in the marketplace.
But I don't think SAP has created standard rule for webshop.
Thanks,
Sudip.
Edited by: Sudip Saha on May 18, 2009 4:05 PM

GRC-AC v5.3 SP11 -- RAR Rules for BI, GTS, SRM, XI, GRC-AC, SolMan

Hi!
Has SAP released RAR Rule sets for BI, GTS, SRM, XI, GRC-AC, or Solution Manager?
Let me know if anyone else has found them.
Thanks,
-john

Hi John,
SRM rules have always been available. I have not seen rules for BI, GTS, XI, AC or SolMan. Would definitely want to see rules for XI, BI and SolMan.
Alpesh

Maintain settlement rules for order category 30(Maintenance order).

Hi Gurus,
Can we maintain two settlement rules for an order without distribution rule?
Eample:- In an order there are three different costs i.e. material cost,external labour cost and internal labour cost.We want to settle the material cost and external labour cost to Profitability segment and the internal cost to a particular GL account directly.
Note: No distribution rule is required,because all the cost should settle directly to correspoanding heads i.e. PSG or GL.We don't want to assign the GL# again and again for different orders in the corresponding order's settlement rule.
Require your valuable inputs to proceed.
Best Regards,
Ramakanta

Hi Govardhan,
If you are working in ECS, the Shopping cart will not create any follow on document in backend R/3.
I think your Product category is 30, thats why the error says Manual reservation for order category 30 is not allowed.
Where did you get the maintenance order? Generally maintenance order is created in the backend R/3 (Plant Maintenance) and a P.R will get generated against that order.
Using PDP (Plan driven procurement) you can transfer that P.R to SRM and can carry out sourcing and can complete the procurement cycle.
Can you please tell me what is your exact business requirement?
Hope this will make you more clear.
Clarifications are welcome.
Award points for helpful answers.
Rgds,
Teja

SoD rules maintenance: in DEV, QAS or PRD

Hello colleagues,
Could you please help with recommendations for SoD rules maintenance process?
Where to maintain SoD rules: in DEV AC system, QAS (and then transfer to PRD) or directly in PRD AC?
Thanks,
Anton.

Hi Frank,
Thank you for response!
In case rules are exported from DEV and then imported ro PRD then we lose history of function change.
May be you have any additional recommendations for AC usage :
1. Which department is usually responsible for SoD rules transporting for Production: e.g. Risk Department, Basis?
2. How does usually SoD rules change management process set up? Risk Department often does not know authorization model of SAP in details (especially for certain SAP Module), implementation or support team usually does not take care of SoD risks. Normal situation is when SAP ERP was implemented several years ago and now Risk Department is established with some business knowledge but without detail understanding of SAP security model (authorization objects, fields, etc.)
Thanks in advance,
Anton.

SoD rule set Download issue

Hi All,
While downloading the SoD rule set (Global), I am not getting the data for Function-Action and Function-Permission, except these, rest of the data are coming.
But, I can get to see these data under tables: GRACFUNCACT and GRACFUNCPRM.
so obviously we can't have these data exported from table and to get converted into .txt format to upload SoD.
GRCFND_A is at SP14.
Please help in getting this issue resolved.
Thanks,
Ameet

Hi Ameet,
You have to reactivate it each time you install a SP in order to get the updates.
If you develelop your own SoD ruleset you wont use the SAP standard functions and risk, so reactivate the BC Set wont cause any problem.
If you change the standard functions and risks (which is wrong) such changes will be overwritten when reactivate the BC Set.
After reactivating the BC set you'll be able to download SoD rules fom the logical system SAP_R3_LG.
Cheers,
Diego.

Validation Rules in SRM

Hello Gurus,
I am a new to SRM. I needed to understand if we could set up any CO validation rules in SRM. For e.g. in R/3 we use transaction GGB0 to set up FI and CO validation rules.
1. Is there any transaction to set up validation rules in SRM?
2. In general, is there a process of validating the master data in SRM?
My Scenario:
We are creating an expense report in SRM for employee expenses incurred. Once the expense report is entered in the SRM portal, a trip data is created in R/3. We check the trip data for an employee in R/3 using PR05 and continue posting to FI/CO.
We would like to set up a validation rule in SRM (rule contains combination of GL account, cost center and statistical WBS element) so that when employee tries to post expense to a wrong combination of (GL account/cost center/statistical wbs) the system should give an error message while entering the expenses in SRM. How can we achieve this scenario?
Any feedback would be helpful. Thanks in advance for your help.
Thanks,
Ram

As of i knew there is no validation rule exist in SRM as exists in ECC.
if you require you may need to via RFC call only and validationd done by BBP_DOC_CHECK bADI.
there may not be any front end validation rule combination of GL account and account assignment. It allows to enter any availble GL accounts ( in the ECC) / cost center with any combination .

Is it possible to copy the SoD rules in the same system to diff. Rule SetId

Hi all,
We have created SoD rules as per our business requirement in RAR 5.3 Component connecting to the QA system. We want to copy the same rules into another different RULE SET for the same QA system. Is this possible?
Ex: ABRULE SET - Tailored as per Business Requirement and generated rules linking to QA system [Manually configured the SoD rules].We will use this Rule set for our Production System as it was frozen as per the Business Requirement (This we will do by establishing another JCO to production system)
We wanted to copy the entire SoD rules of ABRULESET to another rule set say YZRULESET. This YZRULESET we will use for making any configuration changes in future before making changes to ABRULESET which will be connected to Production System.
Is it possible to copy the SoD RULES from one Rule Set ID to another Rule Set ID within the same system? If yes, please provide us the procedure on how to copy the rules of one Rule set Id to another Rule set ID.
We explored the options of Export & Import Rules but no where it asked for new Rule Set ID for copying.
Thanks and Best Regards,
Srihari.K

Here is a method I've seen a few customers use, which seems like a good idea:
- load the standard rule set
- create a new empty rule set
- create your risks in the new rule set ( initially this could be a re-import of the risks, risk_desc and risk_ruleset files with a few changes done in excel to change the IDs)
This means you have an exact copy of the SAP standard risks in your own rule set, using the SAP functions.
Even if you have to define your own risks, there's an enormous value in the functions. The identification of TCodes and objects that do similar business transactions is probably the most difficult thing to reproduce on your own.
Now, whenever you have to change a risk (risk level, description, owner) you do that in your own name space
If you have to change a function (modify objects, add custom TCodes), you COPY the function to your own name space and change the risk in your name space to use the changed function.
If you want to be smart, you do all your own stuff in copies of the text files that come with the support packs (i.e. not in rule architect). That may not be an option if your compliance requirements want you to use the change history or automatic workflows that RAR provides, but if you don't need that, here's the advantage of this:
When a new set of rules arrives every few months, you delete your rules with a deletion script you can get from SAP support, upload the standard rule text files, upload your own text files, and you're set with your own rule set that makes use of SAP's latest updated functions.
This is (currently) basically the only way to automatically apply SAP changes without doing it manually, thus leveraging changes to functions by SAP.
All your changes will be in your own text files, which you can document and version control according to your requirements.
Not exactly the way according to the manual, but an interesting concept worth considering.

Re: Virsa Compliance Calibrator & Pre-defined SOD Rule Set

Hi All,
We have installed the Virsa Compliance calibrator 5.1 in our sandbox environment. When we goto the "Rule Architect" tab under Compliance calibrator using tcode /virsa/zvrat it brings up the page with Rules information.
Per the Virsa documents that i read they have mentioned that there are pre-defined SOD Rules (Transaction codes and Tcode objects) that we can use in the Rule Architect.
My question is how do i enable and use those pre-set SOD Rules that Virsa provides by default. I do not see them under the Rule architect tab though. Can someone give some pointers to use these pre-set SOD rules.
Thanks & Regards
-Murali

Hi Laziz,
Thanks for your patience in replying to my CC 5.1 queries. I did follow your steps for the Generate Rule & Background Job-> Schedule Analysis and scheduled the job immediate.
However, when i looked up the status of the scheduled analysis Background Job-> Search pulls up the job i scheduled at the top it reads "Job scheduler Status: unknown error" . I clicked on "View Log" button and it shows some messages as shown below (Note: I am just posting some parts of the error msgs below. but it still goes for 1 page...)
May 16, 2007 1:09:07 PM com.virsa.cc.xsys.bg.BgJobDaemon init
INFO: *** BgJobDaemon loaded
May 16, 2007 1:11:09 PM com.virsa.cc.common.util.ConfigUtil setDefaultJ2EEParam
WARNING: Cannot get Application URL: null. PLEASE SET 'Background Daemon URL' IN CONFIGURATION TAB
java.lang.NullPointerException
     at com.virsa.cc.common.util.ConfigUtil.setDefaultJ2EEParam(ConfigUtil.java:203)
     at com.virsa.cc.common.util.ConfigUtil.getBgJobStartURL(ConfigUtil.java:192)
     at com.virsa.cc.xsys.bg.AnalysisDaemonThread.run(AnalysisDaemonThread.java:45)
     at java.lang.Thread.run(Thread.java:534)
May 16, 2007 1:24:37 PM com.virsa.cc.extreport.JarClassLoader loadClassData
FINEST: class name: com.virsa.cc.extreport.ReportPack50SP1_01.ReportPack50SP1_01 class: com/virsa/cc/extreport/ReportPack50SP1_01/ReportPack50SP1_01.class
May 16, 2007 1:24:37 PM com.virsa.cc.extreport.JarClassLoader loadClassData
FINEST: Jar Entry length=1568 compressed size=1568 actual read=1568
May 16, 2007 1:24:37 PM com.virsa.cc.extreport.JarClassLoader loadClassData
FINEST: class name: com.virsa.cc.extreport.ReportPack50SP1_01.CrtActbyRsk_Act_RskLvl class: com/virsa/cc/extreport/ReportPack50SP1_01/CrtActbyRsk_Act_RskLvl.class
May 16, 2007 1:24:37 PM com.virsa.cc.extreport.JarClassLoader loadClassData
FINEST: Jar Entry length=13210 compressed size=13210 actual read=13210
May 16, 2007 1:24:37 PM com.virsa.cc.extreport.JarClassLoader loadClassData
FINEST: class name: com.virsa.cc.extreport.ReportPack50SP1_01.CrtRolbyRsk class: com/virsa/cc/extreport/ReportPack50SP1_01/CrtRolbyRsk.class
May 16, 2007 1:24:37 PM com.virsa.cc.extreport.JarClassLoader loadClassData
FINEST: Jar Entry length=19287 compressed size=19287 actual read=19287
May 16, 2007 1:24:37 PM com.virsa.cc.extreport.JarClassLoader loadClassData
FINEST: class name: com.virsa.cc.extreport.ReportPack50SP1_01.CrtProfbyRsk class: com/virsa/cc/extreport/ReportPack50SP1_01/CrtProfbyRsk.class
May 16, 2007 1:24:37 PM com.virsa.cc.extreport.JarClassLoader loadClassData
FINEST: Jar Entry length=12807 compressed size=12807 actual read=12807
May 16, 2007 1:24:37 PM com.virsa.cc.extreport.JarClassLoader loadClassData
FINEST: class name: com.virsa.cc.extreport.ReportPack50SP1_01.UsersbyOrgLevels class: com/virsa/cc/extreport/ReportPack50SP1_01/UsersbyOrgLevels.class
May 16, 2007 1:24:37 PM com.virsa.cc.extreport.JarClassLoader loadClassData
FINEST: Jar Entry length=18557 compressed size=18557 actual read=18557
May 16, 2007 1:24:59 PM com.virsa.cc.common.util.ConfigUtil setDefaultJ2EEParam
WARNING: Cannot get Application URL: null. PLEASE SET 'Background Daemon URL' IN CONFIGURATION TAB
java.lang.NullPointerException
I am not sure whats causing this and it's been 2hrs since i scheduled the user analysis but i don't see any data still appearing in the fron-end..Any pointers again???
Thanks
-Murali

Apache Reverse rule for BSP applicaiton to run in Portal

Dear Expert,
In my portal lanscape we are using reverse proxy and have written some re-write rule in conf file.
All my application other than BSP's are working fine..i am not able to figure it out as what went wrong in my reverse proxy rule
for BSP applicaiton...can any one help me please..?
My reverse proxy rule is as follows -
<VirtualHost XX.XX.XX.XX:443>
    ServerAdmin webmaster@MDCLINUXHYPERV
    ServerName etenderqua.harmony.co.in
    DocumentRoot /var/www/html/ssl/irj
    ProxyRequests Off
    ProxyPreserveHost On
    ProxyVia on
    ProxyTimeout 900
    RequestHeader set ClientProtocol https
    RewriteEngine On
    RewriteLogLevel 9
Portal Rewrite Rules -
    RewriteRule ^/(irj\(.*) http://mdcqa7.hardev.com:50000/irj/$1 [P,L]
    RewriteRule ^/(webdynpro\(.*) http://mdcqa7.hardev.com:50000/webdynpro/$1 [P,L]
    RewriteRule ^/(logon\(.*) http://mdcqa7.hardev.com:50000/logon/$1 [P,L]
    RewriteRule ^/(rtmfCommunicator\(.*) http://mdcqa7.hardev.com:50000/rtmfCommunicator/$1 [P,L]
SRM Rewrite Rules -
    RewriteRule ^/(cfol1\(.*) http://mdcqa3.hardev.com:8000/cfol1/$1 [P,L]
    RewriteRule ^/(sap\(.*) http://mdcqa3.hardev.com:8000/sap/$1 [P,L]
    RewriteRule ^/(webdynpro\(.*) http://mdcqa3.hardev.com:8000/webdynpro/$1 [P,L]
    RewriteRule ^/(rtmfCommunicator\(.*) http://mdcqa3.hardev.com:8000/rtmfCommunicator/$1 [P,L]
RewriteRule ^/(srm7\(.*) http://mdcqa3.hardev.com:8000/srm7/$1 [P,L]
RewriteRule ^/(zbidder\(.*) http://mdcqa3.hardev.com:8000/zbidder/$1 [P,L]
ECC Rewrite Rules -
    RewriteRule ^/(ecc\(.*) http://mdcqa1.hardev.com:8000/ecc/$1 [P,L]
    RewriteRule ^/(sap\(.*) http://mdcqa1.hardev.com:8000/sap/$1 [P,L]
    RewriteRule ^/(webdynpro\(.*) http://mdcqa1.hardev.com:8000/webdynpro/$1 [P,L]
    RewriteRule ^/(rtmfCommunicator\(.*) http://mdcqa1.hardev.com:8000/rtmfCommunicator/$1 [P,L]
BI Rewrite Rules -
    RewriteRule ^/(bi\(.*) http://mdcqa5.hardev.com:8000/bi/$1 [P,L]
    RewriteRule ^/(sap\(.*) http://mdcqa5.hardev.com:8000/sap/$1 [P,L]
    RewriteRule ^/(webdynpro\(.*) http://mdcqa5.hardev.com:8000/webdynpro/$1 [P,L]
    RewriteRule ^/(rtmfCommunicator\(.*) http://mdcqa5.hardev.com:8000/rtmfCommunicator/$1 [P,L]
SSL Configuration -
    SSLEngine on
    SSLCipherSuite ALL:!ADH:!EXPORT56:RC4RSA:HIGH:MEDIUM:LOW:SSLv2:EXP:+eNULL
    SSLCertificateFile /etc/pki/tls/certs/etender.crt
    SSLCertificateKeyFile /etc/pki/tls/certs/etender.key
Portal Proxy Pass Rules -
ProxyPass /irj http://mdcqa7.hardev.com:50000/irj
    ProxyPassReverse /irj http://mdcqa7.hardev.com:50000/irj
    ProxyPass /webdynpro http://mdcqa7.hardev.com:50000/webdynpro
    ProxyPassReverse /webdynpro http://mdcqa7.hardev.com:50000/webdynpro
    ProxyPass /logon http://mdcqa7.hardev.com:50000/logon
    ProxyPassReverse /logon http://mdcqa7.hardev.com:50000/logon
    ProxyPass /rtmfCommunicator http://mdcqa7.hardev.com:50000/rtmfCommunicator
    ProxyPassReverse /rtmfCommunicator http://mdcqa7.hardev.com:50000/rtmfCommunicator
SRM Proxy Pass Rules -
    ProxyPass /sap http://mdcqa3.hardev.com:8000/sap
    ProxyPassReverse /sap http://mdcqa3.hardev.com:8000/sap
    ProxyPass /cfol1 http://mdcqa3.hardev.com:8000/cfol1
    ProxyPassReverse /cfol1 http://mdcqa3.hardev.com:8000/cfol1
   ProxyPass /srm7 http://mdcqa3.hardev.com:8000/srm7
   ProxyPassReverse /srm7 http://mdcqa3.hardev.com:8000/srm7
   ProxyPass /zbidder http://mdcqa3.hardev.com:8000/zbidder
   ProxyPassReverse /zbidder http://mdcqa3.hardev.com:8000/zbidder
    ProxyPass /webdynpro http://mdcqa3.hardev.com:8000/webdynpro
    ProxyPassReverse /webdynpro http://mdcqa3.hardev.com:8000/webdynpro
    ProxyPass /rtmfCommunicator http://mdcqa3.hardev.com:8000/rtmfCommunicator
    ProxyPassReverse /rtmfCommunicator http://mdcqa3.hardev.com:8000/rtmfCommunicator
ECC Proxy Pass Rules -
    ProxyPass /ecc http://mdcqa1.hardev.com:8000/ecc
    ProxyPassReverse /ecc http://mdcqa1.hardev.com:8000/ecc
    ProxyPass /sap http://mdcqa1.hardev.com:8000/sap
    ProxyPassReverse /sap http://mdcqa1.hardev.com:8000/sap
    ProxyPass /webdynpro http://mdcqa1.hardev.com:8000/webdynpro
    ProxyPassReverse /webdynpro http://mdcqa1.hardev.com:8000/webdynpro
    ProxyPass /rtmfCommunicator http://mdcqa1.hardev.com:8000/rtmfCommunicator
    ProxyPassReverse /rtmfCommunicator http://mdcqa1.hardev.com:8000/rtmfCommunicator
BI Proxy Pass Rules -
    ProxyPass /bi http://mdcqa5.hardev.com:8000/bi
    ProxyPassReverse /bi http://mdcqa5.hardev.com:8000/bi
    ProxyPass /sap http://mdcqa5.hardev.com:8000/sap
    ProxyPassReverse /sap http://mdcqa5.hardev.com:8000/sap
    ProxyPass /webdynpro http://mdcqa5.hardev.com:8000/webdynpro
    ProxyPassReverse /webdynpro http://mdcqa5.hardev.com:8000/webdynpro
    ProxyPass /rtmfCommunicator http://mdcqa5.hardev.com:8000/rtmfCommunicator
    ProxyPassReverse /rtmfCommunicator http://mdcqa5.hardev.com:8000/rtmfCommunicator
Error Logs -
    ErrorLog logs/qua.portal.domain.com-error_log
    CustomLog logs/qua.portal.domain.com-access_log common
    RewriteLog logs/qua.portal.domain_unsecured_rewrite.log
</VirtualHost>

Dear Keseli,
Now..i am facing one more issue...
My rules are as follows : -
SRM Rewrite rule -
RewriteRule ^/(sap\(.*) http://mdcqa5.hardev.com:8000/sap/$1 P,L
ProxyPass /sap http://mdcqa5.hardev.com:8000/sap
ProxyPassReverse /sap http://mdcqa5.hardev.com:8000/sap
BI Rewrite Rule -
RewriteRule ^/(sap\(.*) http://mdcqa7.hardev.com:8000/sap/$1 P,L
ProxyPass /sap http://mdcqa7.hardev.com:8000/sap
ProxyPassReverse /sap http://mdcqa7.hardev.com:8000/sap
these rules are written under the same Virtual Host, we are using only one virtual host .From our analysis we knew that the reverse proxy read this file from the starting as as soon as it find the pattern at the left side of the rule it simply directs the request to URL right hand side.
My issue is, since we have created BSP services in SRM and BI...it always directs the request to the matching pattern given in the first occrences.
In the above example it always directs the call to the SRM bsp..never reaches to BI.
Can you suggest us any way out..?

[SOLVED] how to use diffrent iptables rules for different ppp account?

x86 plantform run arch linux system , have two network interface etn1 eth0 .eth1 connect to internet. eth0 connect to other terminals through switch. want use different iptables rules for different pppoe account .also want to know how to forbidden more than one terminals established pppoe link use same account at the same time .
Last edited by linuxsir (2013-09-26 06:48:01)

(You establish PPPoE sessions over the local network to the Arch machine? Which then routes the traffic?)
first question ,yes that is exactly what i am done. second question i also have a small scripts on windows pc to solve routes traffic problem
route -p delete 0.0.0.0
route -p add 192.168.9.0 mask 255.255.255.0 192.168.9.1
route -p add 0.0.0.0 mask 0.0.0.0 192.168.22.0
but after a while i found scripts is not necessary because windows always attempt to use PPPoE sessions as default internet connection local connection is also ok
and use -i pppX in my iptables rules dose not solve my problem , because same account start PPPoE session could be marked as ppp0 or ppp1. it is hard to identified which account start session.

Data not coming from DOE to Mobile After defining Rule for device attribute

Hi All,
I have created a DO and rule for it.In case of Bulk Rule for all definition when i triggere extract from Portal then all the data comes to outbound queue but when i define rule for Device attribute then no data comes to my Outboun queue.Here is the scenario what i am doing :
1. I have order header in my backend which has a field named "Work_Center" and this will be criteria field.
2. In CDS table i have all the records for all the work center.
3. Now in RMM under customized , i have added an attribute named "Work_center".
4. Now i defined a rule with Device attribute mapping and activated the rule.
5. Now on Portal i assigned this data object and in the device attribute tab i assigned the value(this value exist in CDS table for few orders) of a Work center to the attribute "Work_Center" .
6. Then i triggrere extract but its Outbound queue is empty, what could be the reason.
Is my approach is correct
Regards,
Abhishek

Hi Abhishek,
You can check one ore thing, after you have performed all the steps till step 5, i.e. just before triggering
extract. Check if the AT table for ur DO has entries based on the criteria specified by you...
1. In the workbench click on the Data Object, and then right click and select "View Metadata".
2. Select Distribution Model tab.
3. Now select your DO's Association table.
4. For the input field DEVICE ID specify your corresponing device id,and also for status field specify it
as "I" and execute
If there are any entries now in the AT table, and on triggering extract if they are not coming to the
outbound Q there is some EXTRACT Q blocked. And is there were no entries in the AT then the rule
specified is not the satifying.
Thanks,
Swarna
Now if you have entries w

Leave Quota generation with diifferent rules for different countries

Hi,
I have the following requirement need help in achieving this.
Employers must grant 10 days paid leave to employees that worked for six consecutive months from the time of hiring and who worked on not less than 80 per cent of all schedule work days. This paid leave may be taken consecutively or separately. Where an employee's application to take paid leave will hinder the normal business operations, the employer may require the employee to take such paid leave at a different time.
The number of days of paid leave available to employees increases in proportion to employees' length of service as set forth in the below table.
Years of Service 0.5 1.5 2.5 3.5 4.5 5.5 6.5+
Paid Holidays 10 11 12 14 16 18 20
The right to annual paid leave expires after two years. In other words, annual paid leave left over from one year may be carried over and taken the next year only. For example, if an employee is awarded 10 days paid leave after their first 6 months of employment; those paid holidays will become invalid after 2.5 years of employment. Use them or lose them.
Simply put, holidays from one year can be carried over to the next year, but not to the third year. So, if you don't take your leave from one particular year within 12 months of that year ending, you will lose that first year's allowance.
Employee can take leave encashment of holiday leave only when leaving their employer. It is not legal for companies to buy up the holiday leave of those still working for the firm.
In my organization one PSG grouping has been used for all countries, it wont be possible to change the grouping now. In such a case how can we provide different rule for different country without customizing the Leave module.
Do we have to use any PCR for this, if yes which??
Regards,
Jailakshmi
Edited by: Jailakshmi on Aug 3, 2011 7:16 AM

Hi,
Use QUOMO Feature to give different entitilement to employees.
Leave entitlement as per seniority can be configured in base entitlement.
Keep validity and deduction period for 2 years by using :Relative postion" option in validity and deduction period table.
Rgds,
Lata
Rgds,

Best Practices for SRM Installation !!

Hi
can someone share the best Practices for SRM Installation ?
What is the typical timeframe to install SRM on development server and as well as on the Production server ?
Appericiate the responses
Thanks,
Arvind

Hi
I don't know whether this will help you.
See these links as well.
<b>http://help.sap.com/bp_epv170/EP_US/HTML/Portals_intro.htm
http://help.sap.com/bp_scmv150/index.htm
http://help.sap.com/bp_biv170/index.htm
http://help.sap.com/bp_crmv250/CRM_DE/index.htm</b>
Hope this will help.
Please reward suitable points.
Regards
- Atul

Problem with nat / access rule for webserver in inside network asa 5505 7.2

Hello,
i have trouble setting up nat and access rule for webserver located in inside network.
I have asa 5505 version 7.2 and it has to active interfaces, inside 192.168.123.0 and outside x.x.x.213
Webserver has ip 192.168.123.11 and it needs to be accessed from outside, ip x.x.x.213.
I have created an static nat rule with pat (as an appendix) and access rules from outside network to inside interface ip 192.168.123.11 (tcp 80) but no luck.
What am i doing wrong?

Command:
packet-tracer input outside tcp 188.x.x.213 www 192.168.123.11 www detailed
Phase: 1
Type: FLOW-LOOKUP
Subtype:
Result: ALLOW
Config:
Additional Information:
Found no matching flow, creating a new flow
Phase: 2
Type: ROUTE-LOOKUP
Subtype: input
Result: ALLOW
Config:
Additional Information:
in   192.168.123.0   255.255.255.0   inside
Phase: 3
Type: ACCESS-LIST
Subtype:
Result: DROP
Config:
Implicit Rule
Additional Information:
Forward Flow based lookup yields rule:
in id=0x35418d8, priority=500, domain=permit, deny=true
    hits=1, user_data=0x6, cs_id=0x0, reverse, flags=0x0, protocol=0
    src ip=188.x.x.213, mask=255.255.255.255, port=0
    dst ip=0.0.0.0, mask=0.0.0.0, port=0
Result:
input-interface: outside
input-status: up
input-line-status: up
output-interface: inside
output-status: up
output-line-status: up
Action: drop
Drop-reason: (acl-drop) Flow is denied by configured rule

SoD Rules for SRM

Similar Messages

Maybe you are looking for