Use of Risk Analysis Webservice without installing CUP

1)Can we use Risk Analysis (SAPGRC_AC_IDM_RISKANALYSIS) webservice without installing CUP.
2)This webservice requires request id , which we will not have untlil we create a request in CUP.Besides request id, it has user id and system id as input field.
Is there a way or any other web service available, which accepts some other fields like role (particularly), analsysis type,etc, and then return us analysis data.

I have written a lengthy piece on why it is a good idea to use CUP here:
Re: Integrating inbuilt Access Management application with RAR
Frank.

Similar Messages

How to find Software version using a copy of software without installing

How to find Software version using a copy of software without installing

How to find Software version using a copy of software without installing
See answer given by Ahmed
Right click on setup file and select properties and then details tab.
http://social.msdn.microsoft.com/forums/sqlserver/en-US/c5424ffa-ce98-4899-ac0d-97cbcac10029/how-to-get-versionbuild-from-sql-install-media
You can also open Mediainfo.xml to see information from Installation file
Please mark this reply as answer if it solved your issue or vote as helpful if it helped so that other forum members can benefit from it.
My TechNet Wiki Articles

Can I use OLAP kind of functionality without installing OLAP ( using materialized views etc)

Hi,
Can OLAP cube be implemented without having ORACLE OLAP installed? As per my understanding, cubes are something which keeps aggregate data. So can I just use materialized view functionality ( which is already there in Oracle)?
Which other Oracle object can I use without installing ORACLE OLAP ( Dimension etc?)
Thanks a lot.
Nitin

If you mean by implementing an OLAP cube, you mean setting up reports for various summary level data analysis, it is possible to query materialized views to get the same data in some cases. A position paper that describes the advantages of the OLAP Cube v. among other things standard materialized views may be found at this URL: http://www.oracle.com/technetwork/database/options/olap/olap-wp-12c-1896136.pdf?ssSourceSiteId=ocomen
I also would recommend posting this question on the general database forum (General Database Discussions) as well.
Hope this helps,
Ken Chin

Risk analysis after approval in CUP

Hi,
Can it be possible? CUP to do automatic risk analysis after the request is approved by the role approvers. If there are no risks, roles will get provisioned. If risks exist based on the risk ID to have the request forwarded to the risk owner where the mitigation control, monitor details are entered.
Please provide your inputs.
Thanks
R R

Not a good idea, generally.
What you can do is have the risk analysis performed automatically on request submission. The approvers would see the risks, but you can allow them to ignore them and have a detour on the last approval step.
This has a few quirks:
- if your last approval is a role approver, i.e. there may be a split approval to several people, the detour is tricky.
- if one of the approvers changes something in the request, the risk analysis is invalid.
I would also question the general idea - usually in case of risks, one of the approvers should also take action. If all they do is approve, get them out of the way.
Unfortunately there is no step that says "automatic risk analysis, no manual approval required". That's an enhancement I would also welcome.
Frank.

Is it possible to use iPod as external disk without installing iTunes?

I was wondering this because I would like to be able to use my iPod as an external hard drive at school. I cant install iTunes on their computers without administrator rights. I just want to know if I can connect it without having to go through iTunes to saftly disconnect.

Assuming you can use the iPod with iTunes at home, connect it to iTunes and change the setting to manual transfer. This automatically enables disk use.
Your iPod should then show up on any other computer as a hard disk without the need to install iTunes.
You can eject the iPod after use with the “safely remove hardware” icon in the system tray next to the clock (looks like a grey rectangle with a green arrow above it). Click on this then select your iPod. Or through Windows, select start/my computer, right click on the iPod, select eject.

Can I use icloud on a pc without installing it?

I use icloud on my devices at home - al mac. The problem is, at work we use pc, and only the administrator can install new software. Most of them run windows 7 or windows vista. Can I still access icloud from them? (When I try, it asks me to install the icloud panel, but I just can't). Can you no longer use it online, as before?
Thanks.

Thanks for your answer. Unfortunately, that's not the case. I know the IT department has not blocked it, but when I enter my username and password it requires me to intall and set something on the pc (in fact, it also asked me to set it on my home computer, which is a macbook, but there I had no problem).
I think this really a problem, as it would effectively stop people using icloud in any shared computer...

Use of java on computer without install

Is it possible to run an application from a removable flash drive that has a copy of the jre. I am running an application on computers that have had the install run from flash disks but can not run on machines where the installation hasn't been done.

Yep, I had to do the same hackery when I was in school. Just install the JDK on another machine and then copy it to your flashdrive. You'll probably have to do some manual setup to comfortably use it though, such as manually adding the bin directory to the system's PATH so you can easily run java and javac. Something like
set PATH=%PATH%;f:\java\bin
or whatever the path to Java on your flashdrive is.
Of course when you don't do a proper install you cannot run jar's by double clicking on them, you have no browser plugins and thus can't run applets or webstart things through a browser.

Is it available to add document editing feature in our own OA system using Office Web Apps Server without installing SharePoint?

It seems we need to license OWA server with SharePoint to enable editing feature. Can I call OWA to
edit file outside SharePoint?

You can edit documents via Outlook Web App (Exchange). You can also build your own interface to do so.
Trevor Seward
Follow or contact me at...
&nbsp&nbsp
This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

ERM & CUP: Risk Analysis Error

Hello everyone,
Will someone please urgently help us with this issue? Any suggestions are greatly appreciated! : )
We are on AC v5.3 SP 8. In RAR, we are able to run a Risk Analysis both in the foreground and background across all users and roles. However, when we try to run a Risk Analysis in ERM or CUP, we get an error saying that the "Risk Analysis Failed". The other strange thing is that the error does occur for every role in ERM--just most of them. Also, the ERM management dashboard reflects the correct number of roles in the SAP back-end system, but it says that there are 0 risk violations, which is incorrect.
I have checked that the connectors into RAR successfully connect. I have confirmed the servers. I have re-run all of the background jobs in RAR, ERM and CUP, but nothing seems to be working.
Is there anybody that can please help us?
Thank you!
Johonna

Hello Amol,
Thank you for your suggestions. I have confirmed that the connectors, etc. are correct. Here are some of the error logs u2026 any ideas?
Thank you!
Johonna
95     12/15/09 12:20:51 PM     Running     Risk anaysis for role ZAU:FF_VFAT_ADMINISTRATOR failed
95     12/15/09 12:21:21 PM     Running     Risk anaysis for role ZAU:FF_VFAT_ROLE_ADMINISTRATOR failed
95     12/15/09 12:21:43 PM     Running     Risk anaysis for role ZAU:FF_VFAT_ROLE_CONTROLLER failed
95     12/15/09 12:23:13 PM     Running     Risk anaysis for role ZAU:FI_AA_CLERK_AGN failed
95     12/15/09 12:26:07 PM     Running     Risk anaysis for role ZAU:FI_AA_CLERK_GFA successful
2009-12-15 14:36:17,889 [Thread-7999] ERROR Risk Analysis failed
java.lang.Throwable: Risk Analysis failed at com.virsa.re.bo.impl.RiskAnalysisBO.performObjLvlRiskAnalysis(RiskAnalysisBO.java:733)
     at com.virsa.re.bo.impl.RiskAnalysisBO.performRiskAnalysis(RiskAnalysisBO.java:234)
     at com.virsa.re.backgroundjobs.RiskAnalysis.execute(RiskAnalysis.java:73)
     at com.virsa.service.backgroundjobs.BackgroundTask.run(BackgroundTask.java:53)
     at java.util.TimerThread.mainLoop(Timer.java:432)
     at java.util.TimerThread.run(Timer.java:382)
2009-12-15 14:36:24,811 [Thread-7999] ERROR Risk Analysis failed for sytem: 'PRD'; Return Message: 'Risk Analysis failed'
2009-12-15 14:36:24,811 [Thread-7999] ERROR com.virsa.core.service.ServiceException: Risk Analysis failed
java.lang.Throwable: Risk Analysis failed
     at com.virsa.re.service.sap.dao.RiskAnalysisEJBDAO.getTranViolations(RiskAnalysisEJBDAO.java:331)
     at com.virsa.re.service.sap.dao.RiskAnalysisEJBDAO.getConflictingTransactions(RiskAnalysisEJBDAO.java:171)
     at com.virsa.re.service.sap.dao.RiskAnalysisEJBDAO.getConflictingTransactions(RiskAnalysisEJBDAO.java:205)
     at com.virsa.re.bo.impl.RiskAnalysisBO.performTranLvlRiskAnalysis(RiskAnalysisBO.java:483)
     at com.virsa.re.bo.impl.RiskAnalysisBO.performRiskAnalysis(RiskAnalysisBO.java:229)
     at com.virsa.re.backgroundjobs.RiskAnalysis.execute(RiskAnalysis.java:73)
     at com.virsa.service.backgroundjobs.BackgroundTask.run(BackgroundTask.java:53)
     at java.util.TimerThread.mainLoop(Timer.java:432)
     at java.util.TimerThread.run(Timer.java:382)
2009-12-15 14:36:34,561 [Thread-7999] ERROR Risk Analysis failed for sytem: 'PRD'; Return Message: 'Risk Analysis failed'
2009-12-15 14:36:34,561 [Thread-7999] ERROR com.virsa.core.service.ServiceException: Risk Analysis failed
java.lang.Throwable: Risk Analysis failed
     at com.virsa.re.service.sap.dao.RiskAnalysisEJBDAO.getObjViolations(RiskAnalysisEJBDAO.java:812)
     at com.virsa.re.service.sap.dao.RiskAnalysisEJBDAO.getConflictingObjects(RiskAnalysisEJBDAO.java:596)
     at com.virsa.re.service.sap.dao.RiskAnalysisEJBDAO.getConflictingObjects(RiskAnalysisEJBDAO.java:633)
     at com.virsa.re.bo.impl.RiskAnalysisBO.performObjLvlRiskAnalysis(RiskAnalysisBO.java:693)
     at com.virsa.re.bo.impl.RiskAnalysisBO.performRiskAnalysis(RiskAnalysisBO.java:234)
     at com.virsa.re.backgroundjobs.RiskAnalysis.execute(RiskAnalysis.java:73)
     at com.virsa.service.backgroundjobs.BackgroundTask.run(BackgroundTask.java:53)
     at java.util.TimerThread.mainLoop(Timer.java:432)
     at java.util.TimerThread.run(Timer.java:382)
2009-12-15 14:36:34,561 [Thread-7999] ERROR Risk Analysis failed
java.lang.Throwable: Risk Analysis failed
     at com.virsa.re.bo.impl.RiskAnalysisBO.performObjLvlRiskAnalysis(RiskAnalysisBO.java:733)
     at com.virsa.re.bo.impl.RiskAnalysisBO.performRiskAnalysis(RiskAnalysisBO.java:234)
     at com.virsa.re.backgroundjobs.RiskAnalysis.execute(RiskAnalysis.java:73)
     at com.virsa.service.backgroundjobs.BackgroundTask.run(BackgroundTask.java:53)
     at java.util.TimerThread.mainLoop(Timer.java:432)
     at java.util.TimerThread.run(Timer.java:382)
2009-12-15 14:36:42,218 [Thread-7999] ERROR Risk Analysis failed for sytem: 'PRD'; Return Message: 'Risk Analysis failed'
2009-12-15 14:36:42,218 [Thread-7999] ERROR com.virsa.core.service.ServiceException: Risk Analysis failed
java.lang.Throwable: Risk Analysis failed
     at com.virsa.re.service.sap.dao.RiskAnalysisEJBDAO.getTranViolations(RiskAnalysisEJBDAO.java:331)
     at com.virsa.re.service.sap.dao.RiskAnalysisEJBDAO.getConflictingTransactions(RiskAnalysisEJBDAO.java:171)
     at com.virsa.re.service.sap.dao.RiskAnalysisEJBDAO.getConflictingTransactions(RiskAnalysisEJBDAO.java:205)
     at com.virsa.re.bo.impl.RiskAnalysisBO.performTranLvlRiskAnalysis(RiskAnalysisBO.java:483)
     at com.virsa.re.bo.impl.RiskAnalysisBO.performRiskAnalysis(RiskAnalysisBO.java:229)
     at com.virsa.re.backgroundjobs.RiskAnalysis.execute(RiskAnalysis.java:73)
     at com.virsa.service.backgroundjobs.BackgroundTask.run(BackgroundTask.java:53)
     at java.util.TimerThread.mainLoop(Timer.java:432)
     at java.util.TimerThread.run(Timer.java:382)

How to use only for scanning without installing printer cartridge

I have an old all in one and want to use it only for scanning without installing printer cartridge. I get the red signal of no i9nk and "E" msg in copy no button. If I give scanning request from HP solutions centre I get an error message " An error occured while communicating with thescanning device"

Hello , Welcome to the HP Community! I understand that you are trying to scan on your HP Deskjet F380 All-in-One Printer without having cartridges installed. I'd like to shed a little light on this for you. Some HP printers are able to scan without ink installed, but most do not. If the cartridge lights on the product are blinking and there is an "E" in the copies window, then the printer is in an error state and will not function until cartridges are installed. If the printer is in an error state, that would describe the message you are getting that "An error occured while communicating with the scanning device", as the printer would not respond when prompted by the software. You can check the blinking light combination on the printer and follow the steps in this document to resolve the error state and continue using the device.Blinking Lights on the HP Deskjet F300 All-in-One Printer Series Hope this helps!Thanks so much for posting.

GRC AC 10.0 Mass risk analysis vs. Role level analysis

Hello GRC experts,
I urgently need your advice on the issue with deactivated permission objects which are identified as risks in the mass role analysis.
For example, in one role we have deactivated the permission object: S_ARCHIVE, and there are No activities maintained.
But in the mass role risk analysis and in the CUP request this object S_ARCHIVE with the ACTVT 01 is displayed as risk. As you can see in the screenshot, there are no activites maintained at all. We have created the MSMP workflow where all CUP requests with risks should go the the Security Stage. Now we have the situation that even though our roles are clean, they are forwared to the Security stage. It is a huge problem, because our security stage has no even more to to, than before using GRC! Because the dectivated objects are identified as risks.
Please advise me, how to solve the problem. Did I missed some config parameters or is it a well known problem?
We are on SP14, AC 10.0.
At the single role level there are no risks displayed.
Thanks in advance,
regards
Sabrina

Hi Sabrina,
check note
http://service.sap.com/sap/support/notes/2036645
Please let me know if it works.
Regards,
Alessandro

Risk Analysis thru Web Service

I'm trying to get Risk Analysis (SoD violaions) for roles using web service. Current approach we are using is to first use web service SubmitRequest to create service and then use web service RiskAnalysis for SoD checks for that request. However, is there any web service which gives Risk analysis directly without creating request in GRC? If i give 2 conflicting roles then can i get risk analysis without actually creating request in GRC?
Thanks,

Hi Alpesh, Ankur,
Thaks for your answer. As you said, the web service which you mentioned works for existing users with assigned roles/profiles. I was more looking for web service which will give me Risk Analysis before i assign Roles/Profiles.
I found one service VirsaCCRiskAnalysisService which allows me to do risk analysis before assigning any roles/profiles. Of course, the condition is that User should exist in back-end system.
Thanks,
Sanjay shah

Mass role risk analysis issue

Hello GRC Community,
I have a following issue:
When I use mass risk analysis the deactivated authorization objects in the role are displayed as result. At the same time, when I use Role Level Risk Analysis the role with deactivated critical authorization objects doesnt appear.
Does anybody know how to solve this issue? Is there any configuration parameter to be adjusted?
thanks
best regards
Sabrina

Prasant,
here are the screenshots of the Job result:
1. Mass role Risk Analysis
2. Risk Analysis on the (Single) Role Level
Im Backend you can see that the role contains lots of deactivated autorization objects.
I have run all sync Jobs, but seemingly it doesnt help.
Thanks,
Sabrina

AC 5.3 RAR - combined risk analysis reports for regular auth. and SPM auth.

Dear All,
we have users that have regular day-today authorization and also FF authorization.
Does the Batch Risk Analysis takes into account both authorizations when doing the risk analysis for those users ? will we see it in the reports ?
Thanks
Yudit

ok, so basically the answer is no, in the RAR components we do not have risk analysis for the combinations of the roles assigned to the user and to his FF ID.
in that case, at what stage does the system checks for those combined risks ?
is it checked when we manage the risk analysis phase in the CUP request that is asking to assign the FF ID to the user ?
thanks
Yudit

Risk Analysis not performed when using IDM WS

Hi ,
We are using the SAP delivered IDM WebService for submitting Access requests to CUP 5.3 SP8 Patch1.
We have defined the properties:
1. Perform Risk Analysis on Request Submission - YES
2. Risk Analysis Mandatory (approval stage) - YES, When Access Changed
3. Approve Request Despite Risks - NO
(This setting will enable the approver to approve the access request without performing a Risk Analysis, if the initial risk analysis doesn't identify any risk with the access request. But if there are risks, the approver need to mitigate the same before he can approve it.)
But we have found out that when submitting a request through the SAP Delivered IDM WS -'SAPGRC_AC_IDM_SUBMITREQUEST', the system DOESN'T perform RA during request submission. But when the request is submitted directly in CUP, it does.
We've referred the Note:1168508 where it's mentioned that this issue is being fixed with SP7 Patch 1. But we are already on SP8.
The Note says:
"The following issues are resolved as part of Support Package 7 Patch 1:"
and the last bullet point states that:
"While submitting a CUP Request from web service, if the flag for Risk Analysis on submission is set not performing the Risk Analysis on submission."
This feature was not working before and hence thought SAP has fixed it as mentioned in the Note. Has anybody suceeeded in getting this feature working???
Thanks & Regards,
Anil

Yes Dries, we have tried both and we happen to see some exceptions on request submission thru WS.
But the request is still getting created. I've an open tkt with SAP to follow it up..I'll update once i get this fixed.
Exception Details:
Exception during EJB call, Ignoring and trying Webservice Call  [EXCEPTION] com.virsa.ae.service.ServiceException: Exception in getting the results from the EJB service : com/virsa/cc/xsys/ejb/RiskAnalysis.execRiskAnalysis(Lcom/virsa/cc/xsys/webservices/dto/WSRAInputParamDTO;)Lcom/virsa/cc/xsys/w...
Full Message Text
Exception during EJB call, Ignoring and trying Webservice Call
com.virsa.ae.service.ServiceException: Exception in getting the results from the EJB service : com/virsa/cc/xsys/ejb/RiskAnalysis.execRiskAnalysis(Lcom/virsa/cc/xsys/webservices/dto/WSRAInputParamDTO;)Lcom/virsa/cc/xsys/webservices/dto/RAResultDTO;
at com.virsa.ae.service.sap.RiskAnalysisEJB53DAO.getViolations(RiskAnalysisEJB53DAO.java:294)
at com.virsa.ae.service.sap.RiskAnalysisEJB53DAO.getViolations(RiskAnalysisEJB53DAO.java:418)....
at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:176)
Caused by: java.lang.VerifyError: com/virsa/cc/xsys/ejb/RiskAnalysis.execRiskAnalysis(Lcom/virsa/cc/xsys/webservices/dto/WSRAInputParamDTO;)Lcom/virsa/cc/xsys/webservices/dto/RAResultDTO;
at com.virsa.ae.service.sap.RiskAnalysisEJB53DAO.execRiskAnalysis(RiskAnalysisEJB53DAO.java:304)
at com.virsa.ae.service.sap.RiskAnalysisEJB53DAO.getViolations(RiskAnalysisEJB53DAO.java:276)
... 44 more
Thx,
Anil

Use of Risk Analysis Webservice without installing CUP

Similar Messages

Maybe you are looking for