Uploading mitigating controls - UAT to production system

Dear gurus
Before i place the issue i would like to give some background: In the Production system of Complaince calibrator we have 3 systems assigned Production, UAT and Develeopment. We are the implementation team and are not authorised to assign the mitigating controls for users in production system , therefore before going live we have assigned the mitigating controls to same set of users in UAT system in the production system of compliance calibrator. Now the region has gone live and the same set of mitigating controls needs to be assigned to same set of users with same risks to production system users.
Issue: Now there are over 100 users and its not feasible for us to manually once again assign the same mitigating controls to the users. is there a posiibility to automate this assignment or will we have to do it manually. In case we can automate then how? in case we have to manually do it what is the best way to cover the users faster.
Thanks in advance
Vani

Thanks Frank, Would you advise which would be the better editor?
Hi Alpesh,
If i understand correct, you mean to say that its the same table, since its the same RAR production system, but currently while adding the mitigations I would have chosen the users as mentioned in UAT system that is attached to RAR production, but how do I make it as production system? If i go by what you say, I should add the user ids as per the production backend system in the same tabel and then it will automatically pick it while running reports for production users, is that correct?

Similar Messages

Error while uploading mitigation controls

Dear All,
While uploading the mitigation controls i am facing with the below error. Can you please help me in resolving this error.
Error in table dataVIRSA_CC_MITUSER
SQL:=>Insert into VIRSA_CC_MITMON(MITREFNO,MONITORID) Values(?,?)
Record::Line Number :21 : D VIRSA_CC_MITMON TESTC1 TEST1
Below is the text file which i am uploading into the RAR for test purposes
M     VIRSA_CC_ADMIN     USERID     NAME     EMAILID     ROLEID
D     VIRSA_CC_ADMIN     TEST1     TEST1     test     M
M     VIRSA_CC_BUSUNIT     BUSID
D     VIRSA_CC_BUSUNIT     TH
M     VIRSA_CC_BUSUNITT     BUSID     LANG     DESCN
D     VIRSA_CC_BUSUNITT     TH     EN     Thailand
M     VIRSA_CC_BUAPPVR     BUSID     APPROVERID
D     VIRSA_CC_BUAPPVR     TH     TEST1
M     VIRSA_CC_BUMONITOR     BUSID     MONITORID
D     VIRSA_CC_BUMONITOR     TH     TEST1
M     VIRSA_CC_MITREF     MITREFNO     BUSID     APPROVERID
D     VIRSA_CC_MITREF     TESTC1     TH     TEST1
M     VIRSA_CC_MITREFT     MITREFNO     LANG     DESCN
D     VIRSA_CC_MITREFT     TESTC1     EN     Test mitigation control
M     VIRSA_CC_MITRISK     MITREFNO     RISKID
D     VIRSA_CC_MITRISK     TESTC1     F006*
M     VIRSA_CC_MITMON     MITREFNO     MONITORID
D     VIRSA_CC_MITMON     TESTC1     TEST1
M     VIRSA_CC_MITRPT     MITREFNO     ACTIONS     VSYSKEY     MONITORID     FREQUENCY
M     VIRSA_CC_MITUSER     MITREFNO     RISKID     USERID     VALIDFROM     VALIDTO     MONITORID     STATUS
M     VIRSA_CC_MITROLE     MITREFNO     RISKID     ROLEID     VALIDFROM     VALIDTO     MONITORID     STATUS
D     VIRSA_CC_MITROLE     TESTC1     F006*     Z1.*.ASST-SC-FINC-MGR     6/9/2010     7/25/2010     TEST1     0
M     VIRSA_CC_MITHROBJ     MITREFNO     RISKID     HROBJ     HROBJTYP     VALIDFROM     VALIDTO     MONITORID     STATUS
M     VIRSA_CC_MITPROF     MITREFNO     RISKID     PROFILE     VALIDFROM     VALIDTO     MONITORID     STATUS
M     VIRSA_CC_MITUSRORG     MITREFNO     RISKID     USERID     ORGRULEID     VALIDFROM     VALIDTO     MONITORID     STATUS
M     VIRSA_CC_DETDESC     OBJECT_TYPE     OBJECT_ID     LANG     DETAIL_DESCN
D     VIRSA_CC_DETDESC     MIT     TESTC1     EN     Test Mitigation control
We are not mitigating users now. Only roles are getting mitigated and hence we have not provided any values to the MIT USER table.
Thanks and Best Regard,
Srihari.K

Dear Varun,
Thanks for your reply. It helped me a lot. But however i am facing the following issue while uploading the mitigation controls
After exporting the mitigation file from RAR, we opened the text file in a spreadsheet format and added few lines to the file and saved in the same text format or in UTF-8 format also
After uploading the same into RAR again after changes we are facing similar errors mentioned in above query.
But when we add lines directly in the wordpad and upload the file then it is successful.
We have to add so many mitigation controls and roles to be assigned for which excel would be easy way to dump.
Is there anything wrong we are doing here in editing and converting the files.
Thanks and Best Regards,
Srihari.K

Mitigation controls assignation to users in RAR

Hi,
While assigning mitigation control to the users (RAR>Mitigation> Mitigated Users-->Add), it is only possible to assign 1 user at a time...Would it be possible to assign more than 1 user through multiple selection
Thanks
Abhijeet

Abhijeet,
From that path, you cannot assign multiple users at once however, if authorised, you can upload mitigation controls and within the upload files, you can upload users assigned to them.
Simon

Transport of mitigation controls from GRC Dev to GRC Production in 10.0

Hi All,
Is there an option to transport mitigation controls from Dev to Prod in 10.0. Where is that option available. We could not find even download or upload option unlike 5.3 in 10.0
Thanks and Best Regards,
Srihari.K

Hi
I can see that this question is marked as answered . Could you please update what steps were taken for transporting mitigation controls? Thanks
Best Regards
Srilakshmi S

LSMW UPLOAD IT 0655 in Production System

Hi,
Firiends while uploading data in IT 0655 in Production System, for few personnel numbers I am getting this error
*Missing secondary record for infotype 0002 for particular date for particular PERNR
But i can see in the system that this record is existing.

If you check the MP065500 screen 2000 there is a validation for infotype 2 while creating the 0655 record.
if psyst-first eq yes and cprel-endda lt high_date.
*   I105(RP): Gültigkeitsende muß gleich & sein
    p0002-endda = high_date.                               "VLDN212840_2
    cprel-endda = high_date.                               "VLDN212840_2
    message e105(rp) with high_date.
endif.
if psyst-ioper eq modify.
    if cprel-endda lt high_date and pskey-endda eq high_date.
      p0002-endda = high_date.                             "VLDN212840_2
      cprel-endda = high_date.                             "VLDN212840_2
      message e105(rp) with high_date.
    endif.
endif.
From what i understand the end date of your 0655 record will have the be equal to infotype 2. Not sure why this is done this way but still it's "hard-coded" so it isn't a customization thing.

How to make JOB CONTROL setting for delta extraction in Production system .

Hello All,
We are in the process to transport our development to PD server in BI . We have transported the data sources to ECC production and now we are filling the setup table for " SD BILLING BW " . After filling Setup table data in full mode through infoPackage we have to load data in delta mode .
How we can set our Update mode(LBWE setting) in PD server ?
Is LBWE T.Code authorisation required in ECC PD server to make the setting of Update mode or We have to set all Job Control Paramater in Dev System at the time of transport the datasource request to ECC production . Is our time which is set in job control of ECC development will be reflected in ECC production ?
can any body tell me about how to make setting for delta extraction in Production system .
Thanks ...

Hi,
How do you load the data in the development system?
- you set up the update mode in the infopackage. There you must customize "Initialization"
- you have to filled the setup table in the production system without laoding the data in the BW? then this step was for nothing. Filling the setup table and do the INIT in the BW, this must be together - during no changing will be done in your R/3 SD.
Sven

RAR 5.3 - Mitigating Control Mass Upload

Hi Everyone,
My client wants to perfrom a mass upload of Mitigating Controls, but I can't find the format of the tables that are needed.
I have tried creating a control manually, exporting it and then changing the file and uploading but it always throws an error.
I know that there is a SAP Note about this but it is Internal Only.
Can anyone help? I guess I am looking for standard upload file format or something of that nature.
regards
Simon

Hi Frank
as always you are the man who knows the answer!!
You were correct Excel 2007 had converted 2010-10-11 to 11/10/2010, during the importation process, even though I had told it to keep all fields as text.
Additionally, on almost every row of the export file after having made the changes in excel, it had added several "TAB" characters as well, so I had to go down every line of the upload file to remove the extra "TABS".
After that it worked perfectly.
Now I will attempt world domination, after all it must be easier than trying to configure Access Controls 5.3
Simon
Edited by: Simon Carty on Nov 26, 2010 10:05 AM
Edited by: Simon Carty on Nov 26, 2010 10:05 AM

RFC / FM to upload images to Production system

Hi Everyone,
I want to change my logo on my SAP Easy access..but I don't want to open my production system.
Is there any RFC / FM to upload the logo ?
Thank you!

Hi sarada,
you should be able to import logo in SMW0 directly in production system and transport entry in SM30, table SSM_CUST.
regards,
Edgar

Data Uploading in Production system

In Production system
In OX09, for a Plant/Sloc combination, In the Addresses of storage locations ,we need to update some text(For example- test) in the SORT1 field (Search Term 1/2 Field) ,
This we need to update for about 50-60 Sloc's in Production system,Kindly suggest what is the best way to achieve this without affecting other customization settings
The SORT1 Field is in ADRC Table, We need to link this by passing the Plant in TWLAD table,get the Sloc and Address number field and Pass the address number field in ADRC Table and check the SORT1 field.
Regards
Amuthan M
Edited by: Amuthan M on Nov 18, 2008 10:45 AM

Since its a customization data updation , normally for transactional data or any material master extension we use LSMW, in this case is LSMW is the best way to do that through Flat file
Any more inputs Please,We need to finalise the approach ASAP
Regards
Amuthan M

Error while uploading roles from quality to production

Dear friends,
I have to upload roles from quality to production.
I have downloaded it from qualtiy but while uploading to production it is giving me an error "File does not contain valid data".
Can anybody tell me what could be the problem and how to resolve it.
Thanks in advance
regards
Nirgun

HI matore,
the best way is to transport the roles from DEV to QA and then to production as julius suggested
are you trying for mass down load are single role
Mass download
go to PFCG >> utilities>> Mass download>> select all the roles which you want to move it to production
and execute save it on desktop
now go to production system>> go to PFCG>>in menu click on roles>>click on upload>>select the file which is saved in desktop and click ok
mass generation of roles
in the menu click on utilities>>mass generation>>give the role names with you have uploaded and click on execute select all click on genetate button
download a single role
go to PFCG>>in the menu click on role>>click on down load and save it on desktop
now go to production system>> go to PFCG>>in menu click on roles>>click on upload>>select the file and click ok
now you needs to manully generate the role
do the user comparison
hope this helps
thanks
kishore

Delete COPA value fields in a productive system

Does anyone have practical experience with deleting COPA value fields in a productive system?
The issue is that old, no longer used value fields should be deleted from a productive system to allow creating new ones, as the maximun number of value fields is reached.
An alternative would be to delete the prior transaction data captured on these no longer to be used value fields and rename them for their new use (to avoid that different kind of old and new data is reported on the same value field).
I am refering to the documentation on transaction KEA0 (or OSS note 160892 up to release 4.5), where it is mentioned that deleting value fields should only be done for operating concerns that have not yet been used productively. Did anyone do this already in a productive system?
Cheers, Peter

To delete characteristics or value fields, you should perform the following
activities:
1. Delete the corresponding characteristics and value fields from
Customizing in all clients (this includes forms, reports, planning
layouts, and so forth). To locate characteristics and value fields, use
the appropriate where-used list in the Customizing Monitor. You can
access it by choosing Tools -> Analysis -> Check Customizing Settings
(TA KECM).
You can jump directly from the where-used list to the relevant
Customizing transaction and then delete the appropriate field there.
2. Switch to the screen for maintaining the data structure of an
operating concern (Maintain operating concern).
3. If you need to effect other changes to the datastucture for the
operating concern before making any deletions, effect those changes and
save the data structure.
4. In order to be able to select the fields of the data structure,
choose Extras -> Characteristics (or Value fields) -> Unlock.
5. Select the characteristics and value fields to be deleted and remove
them from the data structure with the "Reset fields" function.
6. Reactivate the operating concern. The system starts by checking
whether the operating concern contains any data and whether the fields
to be deleted are still being used in any Customizing settings.
7. If none of the fields are still in use, the system then starts the
re-activation. If the operating concern does not contain any data or
does not require the database system to be converted, the tables are
activated. You are then able to activate the environment for the
operating concern. In this case, the following activities no longer
apply.
If the operating concern already contains data, a system message tells
you that the database needs to be converted. If you proceed, an
activation log appears (at the top of the list).
8. Analyze the activation log. If it only contains error messages
telling you to convert the tables, proceed with the next activity.
You must otherwise remove the cause of the errors before the tables can
be converted. In this case, you should answer "No" to the next prompt,
which asks whether the conversion transaction should start.
9. If you still only receive error messages telling you to convert the
tables, choose "Back" and start the conversion.
10. Plan a job for the conversion. A list of the tables to be converted
is shown for this. If the tables only contain a small amount of data
(less than 10 000 records), then all the tables can be converted in one
job. In that case, you can select all the tables.
For larger tables, conversion should take place in several jobs.
However, you should ensure that table CE4xxxx (where xxxx = operating
concern) is the last table to be converted.
Warning. No other changes can be made to the operating concern during
the conversion.
A copy of the table is generated during the conversion. The database
system should have sufficient memory available for this copy.
To schedule conversion as a job, use the "Schedule selections" function.
You can display the current status of the conversion by selecting the
"Refresh" icon. Tables disappear from the list once they have been
converted sucessfully. If a conversion is taking a while, it is also
possible to leave the transaction. You can then continue the conversion
using DB requests -> Mass processing in one of the following ways:
With the job overview. You access this by choosing System -> Services ->
Jobs.
Using the database utility transaction. You access this by choosing
Utilities -> Database Utility in the ABAP Dictionary menu.
You can use the status function to call up the status of the operating
concern during operating concern maintenance. You need to activate all
tables after conversion.
11. To analyze errors that have occurred during the conversion, you can
use the database utility transaction by choosing Extras -> Logs. The log
has the same name as the conversion job: TBATG-date. You can also
restart the conversion with this transaction.
For more information on the database utility, choose Help -> Application
help while still in the above transaction.
12. Once you have activated all the tables in the operating concern,
generate the operating concern environment from within operating concern
maintenance.
You can then use the operating concern again.
Please, refer to the IMG documentation under Controlling ->
Profitability Analysis -> Structures -> Define operating concern
-> Maintain operating concern, for further details.
Hope it helps

Workaround for non-SAP mitigating control reminders

Dear all,
Our business users would like to document mitigating controls in RAR 5.3 regardless of whether they are connected with an SAP report. They would also like to receive email reminders for those controls.
Unfortunately, the frequency of the control can only be defined per connected SAP report and reminders will only be sent for controls if the SAP report has not been executed.
Have you been exposed with a similar requirement? It seems like a natural thing to ask from a business perspective. RAR 5.3, however, is not designed in that way.
Have you come up with any feasible workarounds for this?
My current approach would be to create a dummy Z-report per SAP system (such as Z_MANUAL_MITCTRL) that control monitors have to call once to confirm the execution of their control.
Cheers and best regards
Patrick

Hello,
Regarding your question, in fact this is dependant on how your UME (User Management Engine) is configured on your WAS (Web Application Server). If the UME is connected to your R/3 back-end then the user need to have a R/3 account to connect to CC, otherwise if your UME is "independant" then you just need to create an account in the UME.
Regards,
Jérôme.

How to change the worklist in schedule manager in production system

we are using schedule manager (SCMA) to arrange the daily process in SAP system. but we have to config the worklist and transport it to the production system every time cause in production system if we press edit worklist there would be a message called " TK430 The system administrator has set your logon client to the 'not modifiable' status.Client-specific objects can not be changed in this client."
Is there any way that I can directly change the worklist in production system?
Thanks.
Jiajia

Hi SUN,
Take a look at 11g Grid Control: Steps for Migrating the 11g Grid Control Repository from One Database to Another [ID 1302281.1]. Step 4.7
and
http://gavinsoorma.com/2010/10/11g-grid-control-how-to-change-the-oms-repository-database-listener-port-or-hostname/
ps Stop the OMS first.
Eric

2.DMS uploading from Development server to Production server[GO LIVE]

Hi All
Is it all document type [dms] which r created in development server, these will transefer from development to production server by [uploading]transport request.
Or is It needs Basiss Help.
Rgds
Ben.

hi,
I think for moving customization request to production, u dont need help of basis, if u have authorization then u can transport the request.
Before moving first identify which are the request number u want to transport and release them using t code SE10 in development server.
Go to production server, execute STMS t code for importing the request from devp server.
Once ur request moved to production successfully then all customization will be available in production system except number ranges and class and characterstics.
If ur using classification system, then create class and characterstics in production system it self.
award points if useful
regards
Sham

DMS uploading from Development server to Production server[GO LIVE].

Hi, All,
I have configured DMS at client palce. Here they don't have quality server.
What we configured will be tested in development it self. So in the unit test there is no errors at all and
uploaded some documents in the development also.
So i want to know how i could tranfer request and full DMS configuration to production server[Go Live].
1.Wheather I could need Basiss Help.
2.What are all precautions i could take before and after 'go live'
3.What are all requirement needs to 'go live'.
plz give procedure i details
Rgds
Ben

hi,
there no mandatory of quality server to test , if ur confident, u can directly transport to production
For request transporattion its better to have basis person, if u know the procedure, u can also import from production server.
Before that release all transport request in devp server.
After transporting to prod server check wheather all customising setting imported or not, wherever necessary u create master data in production system it self(Class and characterstics, and number ranges).
For going live u need to create all roles and autorization and need to assign to respective user ids.
award points if useful
regards
sham

Uploading mitigating controls - UAT to production system

Similar Messages

Maybe you are looking for