Tcodes & Roles for SAP GRC AC 5.3 SPM in R/3

Hello,
After installing part of the SAP GRC AC 5.3 SPM in the Tcode SAINT (R/3).
I want to know what Tcodes do I need to use the Tcode /VIRSA/VFAT.
Or what type of roles do I need. Is there some.
I have read the PDF "SAP Governance, Risk & Compliance Access Control 5.3 - 02 Post-Installation - SPM.pdf", and I have seen some roles. Are this the standard roles for the SPM in R/3?
Best Regards.
Pablo Mortera.

Hi Pablo,
In 5.3 we can use the SPM by two different ways.
1. FFID based: In this you make a user as a FFID and then you use this FFID to perform all the actions.
User based roles are for the above.
3. Role based: In this you assign the roles(maintained in SPM) to the user.
Role based roles are for above.
The basic diffeence is in first one you use user (FFID) to perform the activities whereas in second you use role (which are maintained in SPM).
You can get more details of this in user guide and configuration guide.
Regards,
Shweta

Similar Messages

Standard AC Roles in SAP GRC AC 5.3

Hello,
Can anyone list the STANDARD AC ROLES in SAP GRC AC 5.3 Suite for
1- RAR,
2- SPM,
3- CUP,
4- RT,
5- ERM,
6- GRC PC 2.5
7- GTS,
8- GRC Repository.
I know that the Standard AC Roles that are delivered for CUP are
1- AEADMIN,
2- AESecurity &
3-AEApprover.
Each role comes with different actions in them.
I need similar type of standard AC roles for the above listed modules.
Thanks!!!

Hello Varun,
Below are answers to your statements.
1- There are no portal roles for AC5.3 as such. There is portal role for RM which you have already found.
**ANSWER 1: *There are portal roles for AC 5.3. Kindly see the link http://help.sap.com/saphelp_grcpc30/helpdata/en/27/c67fe32e684e4c85125645dc5918ee/frameset.htm.***
*The role I found in from the above link.*
2- To access AC5.3 applications from portal you would have to create IViews etc.
ANSWER 2 Since SAP provides the predelivered roles, as seen in HELP.SAP.COM in above link, we need not create iViews. The custom IViews are required for custom roles, not the standard roles**
Thanks!!!
Edited by: abdul haleem on Jul 21, 2009 9:44 AM

Spanish Manual for SAP GRC AC 5.3

Hello,
I want to know if someone has an spanish manual for SAP GRC AC 5.3 for the 4 modules (RAR, SPM, CUP & ERM).
Or if someone knows a link to get them. I need them.
Thank you in advance.
Best Regards.
Pablo mortera.

Hi Pablo,
In 5.3 we can use the SPM by two different ways.
1. FFID based: In this you make a user as a FFID and then you use this FFID to perform all the actions.
User based roles are for the above.
3. Role based: In this you assign the roles(maintained in SPM) to the user.
Role based roles are for above.
The basic diffeence is in first one you use user (FFID) to perform the activities whereas in second you use role (which are maintained in SPM).
You can get more details of this in user guide and configuration guide.
Regards,
Shweta

Scope and Proposal preparation for SAP GRC AC Implementation.

Hi ,
I would like to know procedure how the RFP (Request for proposals) are prepared for SAP GRC AC Module implementation. and also how the scope and effort estimation are calculated.
are there any guidelines and checklist are available to be followed.
is there any generic approach followed during SAP GRC AC implementation for proposal as well as for effort estimation.
Pelase clarify my doubts
Regards,
RK

Hi,
Use RTA on SAP BASIS 7.00 System for any system other than ECC which has ABAP and Basis Level 7.00 with Kernel 7.00
I don't see any option for 7.20, may be it will be available later on.
We have SRM connected to GRC so I can cofirm, yes it is possible to connect SRM to GRC and work with SRM rulebook. RTA and Post-RTA activites and JCO and RAR connectors are a must to get it work properly. In fact all configurations are required as it is in ECC system.
No HR RTA is required ,as there is no HR module in SRM.
Regards,
Sabita

Role Upload template for SAP GRC CUP 5.3

Good Morning / Afternoon / Evening SAP Security Gurus,
I am looking to upload end user roles via a role upload template spreadsheet for use in SAP GRC CUP 5.3. I am referring specifically to the recommended template mentioned in step 11 of the 5.3 Post Installation CUP guide, so that roles can be picked within ERM for workflow.
According to the guide, it recommends uploading from the backend systems via a spreadsheet - any template versions or advice on finalising this would be most appreciated.
Best Regards
Steve

Thanks Ashish,
Someone else recommended this option as well via another forum. Have tried it out and working fine.
Thanks for the reply
Steve

Initial roles for sap consultants in Development system .

HI all,
I am new in security, now I have to create one fi ,sd, mm,pp, abap users in my development server (ecc 6.0 in sql server). I need standard roles for there users.
Please give me security matrix.
Regards,
swathi-k

in tcode PFCG you can drop down the list of available roles as per your requirement and assign them to the users. you have to give the appropriate authorizations. In case you can find the role as per your requirement, then you have to create your own roles and assign them to the users.
follow for more details : http://help.sap.com/saphelp_nw2004s/helpdata/en/52/671285439b11d1896f0000e8322d00/content.htm
Cheers,
-Sunil

Looking for SAP GRC study material

Hi Folks
i am looking for some GRC 10.0 material for self study. i found some material in help.sap.com, but looking for some material which deals with basics.
if any one has any any info please share,, that would be a great help....
regards
Kevin.

Hi Kevin,
Since GRC 10 is still in the initial phases, it might take time to publish the study material as like GRC 5.3. However, some of the reference documents are available at New AC 10.0 documents published in BPX
Regards,
Raghu

License for SAP GRC

Hi All,
We are planning to implement the SAP GRC. For this, I would like to know, if Netweaver license is part of GRC software or it needs to be procured seperately ?
Any suggestion on this please!!!
Thanks & Regards,
Santhosh Kumar P

Hi,
It depends upon the your company license contract with SAP, Check with your SAP account contacts.
hope this helps,
Kalyan.

How to identify whether a TCode is for SAP query or for a customized TCode

Hi,
We have a list of TCodes starting with Y_*
Some of these TCodes could be related to SAP Queries and some could be real custom transactions. How do I find out which one of those are related to SAP queries and which ones are related to custom SAP transactions?
I have already checked table TSTC for the program names of these Transactions, but the program name field (PGMNA) is blank. Also in TCode SE93 the transaction mentioned is START_REPORT. Also for some, when I go to the transaction (Y_*) and then environment->status to check the program name the values found are something like AQ11FI==========F10A==========.
Please help on how to identify whether a TCode is actually for an SAP query or for a customized transaction.
Thanks in advance.
Mick

Thanks Anil.
In TSTC, the filed for program name is blank. Therefore I would have to go to each and every transaction (I have around 250 Y_* TCodes with me) and then to environment->status to get the program name and then check whether it is A......
Is there any easier way to know whether a TCode refers to an SAP query or a custom developed transactions/program.
Mick

Tcodes SPRO for sap pm

Hi Experts, Can anybody provide what are the TCODEs used by SPRO in sap pm module. Best Regrs Rajeev

Hi,
Kindly refer below blogs once :
How to find out the transaction code for a SPRO node?
How to find out T-code in different ways in SPRO
Thanks.

Activate Switches in tcode SFW1 for SAP ECC 6.0

Hello!
Does anyone know how to activate switch FI-CA Core and FI-CA Extended in tcode SFW1?
I have problem to do this, because the global status is still off.
Should may be the SAP system be restarted?
Thank you ver much!
Regards
Thom
P.S. My problem is I cannot execute tcodes FP05, etc...

Hi,
Please follow the official installation documentation at http://service.sap.com/instguides -> Business Suite Apps -> SAP ERP.
The installation is performed by tool called SAPInst. This can be started from the Installation Master DVD. But ofcourse the Installation Master DVD would be specific to you Operating Syste/Database.
Description of other required installation media (Kernel, Export, RDBMS etc) is mentioned in the installation document.
Suggest you to go through it completely.
Regards,
Srikishan

SAP GRC - ERM - Role update issue - Business Process and Subprocess

Hello Friends:
We are NOT currently maintaining Business processes or sub processes in GRC 5.3 for all roles. We don't want to maintain them in GRC 10 when we upload the roles. These 2 fields are Mandatory in GRC 10.0 - Can we make them NOT mandatory and leave them blank?? Currently we are facing some issues in uploading the roles
Please advise.
Regards
Ashish

Dear Ameet:
I just dislike the idea where SAP has made options for Business Process and Subprocess columns mandatory in uploading the roles as well from backend.
I am NOT using BRM, but still need to upload the roles for SAP to recognize them to be assigned to the users in GRC 10.0
I was facing the issues in uploading the roles initially, but now i have made it simple - just assign all the roles without the information of being FI or SD or Mm - to IT00 business process and sub process. So, all the roles are now uploaded to the system. I was just curious to know if they can me made Non-mandatory field by any settings.
But anyways, thanks for your input.
Regards
Ashish Desai

SAP GRC for Enterprise Architecture - Synergies and Gaps

Hi to all the Experts out there , I am a Freshie, Just Certified in TERP10 (Business Process Integration(, am doing Masters at Brunel University and the Dissertation topic I am working on is "SAP GRC for Enterprise Architecture - Synergies and Gaps ", and it involves unbiased exploration of SAP Solution for Governance Risk and Compliance for Enterprise Architecture, I request you all to contribute any related Information and or documentation for "SAP GRC" which can help me establish synergies for an Enterprise Architects perspective and gaps if any found.

Hi
You can find the basic documentation and whitepapers on GRC @
http://www.sap.com/solutions/sapbusinessobjects/large/governance-risk-compliance/index.epx
Which may help you in your study.
Regards
Swarna

Mitigating Control creation and application in SAP GRC 10

Hi Expert,
We have SAP GRC Access Control 10 being implemenmted for our client. While trying to create Mitigating Control, we just realized that Before creating mitigating controls you need to create a Root Org entry, this replaces the Business Units in previous AC versions which is visible only when we activate the GRC-PC Application.
My queries are:
1. Is it that Mitigation control can only be created if PC is enable.
2. What about Licencing if GRC-PC Application is used for Mitigating Control Creation.
Thanking you i advance.
Thanks & Regards,
Abhimanu Kumar Singh

HI,
Thank you for the response, I just checked and could find that I can create Mitigating control without PC application. It is just that PC relevant fields are not displayed.
However can anybody answer as to what happens if I use PC to create Mitigating Control, Do I have to purchase the license for SAP GRC PC or it is ok for shared resources.
Thanks again.
Thanks & Regards,
Abhimanu Kumar Singh

Migrate SAP GRC AC 5.3 SP13 (System A - System B)

Hello all,
currently we have setup 2 SAP GRC AC 5.3 SP13 SAP instances (DEV / PRD) for the customer's SAP ERP system landscape. Those systems also contain some customer business functionality.
Because of business requirements the PRD Java Instance needs to be deleted and built up again from scratch with another WebAS Java Release Version (same SID, same Hardware, etc.).
Our plan is now to setup a dedicated Java instance which will contain the PRD installation of SAP GRC AC (new SID, different hardware, etc.) to avoid similar problems in the future. Therefore we have to migrate all of the RAR data from the "old" Java instance to the newly setup Java system. We especially need to migrate all of the RAR analysis data (e.g. SoD violation analyses of previous months, etc.), otherwise we would loose all of this information when the "old" installation is deleted and built up again.
I have checked all of the SAP documentation for SAP GRC AC 5.3 and only found these clues:
In document "SAP GRC AC 5.3 Configuration Guide v3.16 - Chapter Utilities -> Export Utility / Import Utility" it only says
something about exporting / importing rule sets, mititgating controls, etc. Can these tools also be used to export / import
analysis data too ?
In document "SAP GRC AC 5.3 Installation Guide v2.2 - Chapter Post-System Copy Configuration" it only says something about
steps to be executed if the SAP GRC AC installation was done via system copy. But there is no information about migrating RAR analysis data.
In document "SAP GRC AC 5.3 Operations Guide v2.1 - 7.2 Backup strategies" it says that in order to restore the system "you need to back up all tables with the following prefixes: VIRSA and VT". Can we simply do a backup of all of those tables, import
them into the database of the new system and the use the export/import utility to move all of the configuration etc. from the old system to the new one ?
Regards,
Benjamin
Edited by: Benjamin Schlotz on Jun 30, 2011 11:57 AM

Hello Sunny, hello Frank,
thanks for the quick replies.
I did know about the SNOTE regarding the post migration steps, but the To-Do's Frank posted had some additional info in them.
One question remains still open though:
How to actually migrate all the GRC AC RAR data (incl. old analysis data) from System A to System B
Our intended course of action would be:
1. Deploy SAP GRC AC on System B (same Version, SP-level etc. as in System A)
2. Export all VIRSA* and VT* tables from DB of System A, import them all in DB of system B
3. Export all configuration, etc. from System A, import it into System B (using the export / import functionality within RAR)
4. Do all the post-migration tasks described by you
Would you agree with that course of action / know any pitfalls, etc ? We need to have all the "old" RAR analysis data from System A in System B after the migration because System A will be shutdown and deleted.
Regards,
Benjamin

Tcodes & Roles for SAP GRC AC 5.3 SPM in R/3

Similar Messages

Maybe you are looking for