UWL Integration - Process Control & Access Control

Hello Community,
Has anyone worked on UWL integration of Access Control 5.3 & Process Control 3.0?
Is this feasible by developing UWL custom connectors? Any hints?
(NW2004s - EP7.0)
Thanks!
Dhanz

Hi
Even though you set risk analysis to be done at single in RAR , it will automatically consider following type if done from CUP
1. SOD conflict
2.Critical action
3. Critical Permission
If you want to have only SOD risk analysis ,then deactivate all critical action rules in RAR OR create a new ruleset and assign all SOD risk to it and use with CUP .
Thanks & Regards
Asheesh

Similar Messages

As a stockholder, I would like see the development of iTV with Retina display and integrating Siri control, internet access, and iTunes apps. This new product would be a large screen, thin wall mounted television, much like a oversided iPad.

As a stockholder, I would like see the development of iTV with Retina display and integrating Siri control, internet access, and iTunes apps. This new product would be a large screen, thin wall mounted television, much like a oversided iPad.
Do you think this product is possible?

In general theory, one now has the Edit button for their posts, until someone/anyone Replies to it. I've had Edit available for weeks, as opposed to the old forum's ~ 30 mins.
That, however, is in theory. I've posted, and immediately seen something that needed editing, only to find NO Replies, yet the Edit button is no longer available, only seconds later. Still, in that same thread, I'd have the Edit button from older posts, to which there had also been no Replies even after several days/weeks. Found one that had to be over a month old, and Edit was still there.
Do not know the why/how of this behavior. At first, I thought that maybe there WAS a Reply, that "ate" my Edit button, but had not Refreshed on my screen. Refresh still showed no Replies, just no Edit either. In those cases, I just Reply and mention the [Edit].
Also, it seems that the buttons get very scrambled at times, and Refresh does not always clear that up. I end up clicking where I "think" the right button should be and hope for the best. Seems that when the buttons do bunch up they can appear at random around the page, often three atop one another, and maybe one way the heck out in left-field.
While I'm on a role, it would be nice to be able to switch between Flattened and Threaded Views on the fly. Each has a use, and having to go to Options and then come back down to the thread is a very slow process. Jive is probably incapable of this, but I can dream.
Hunt

Are GRC Access Control, Process Control and Risk Management separate?

Are these 3 different modules that you have to purchase separately or are they included in one suite?

Hi Anne,
If you are refering to GRC Access Controls 5.3, Process Control 3.0 and Risk Management 3.0 - All 3 are separate.
A new version of GRC 10.0 has been launched which is currently in ramp up. This has all the above 3 in one suite.
Thanks and Best Regards,
Srihari.K

Differences between MIC and Process control

Hi
Could someone please let me know what are the major differences between MIC and process control 2.5.
I have heard that Process control 2.0 is not being used now.
So could you please let me know what the differences for MIC and Process control 2.5.
Regards
Sandhya

Hi Sandhya,
the major differences are:
- automated controls (SAP and non-SAP systems)
- UI interface based on NetWeaver Business Client (NWBC)
- flexibility on scheduling assessments and tests based on control attributes
- configurable reports and extraction to either .pdf or .xls
- possibility to se configure workflow to send reminders and escalations
- integration with Access Control 5.3, RAR component
- concept of service providers allowing controls to be referenced between different organizations (former MIC orgunit)
- assessments based on surveys (questions to be answered)
- effectiveness tests based on test plan (both tests and steps)
Regards
Andre Yuji

Approver not determined process controlled workflow in SAP SRM 7.0

Hello all,
I have setup process controlled workflow in SAP SRM 7.0 EHP3 for shopping cart approval.
I have 4 approval levels.
I have used item-based Decision for entire document because for some items i want system approval.
In implementation of BADI /SAPSRM/BD_WF_RESP_RESOLVER, in the method /SAPSRM/IF_EX_WF_RESP_RESOLVER~GET_AREA_TO_ITEM_MAP, i am skipping the items for which i want system approval.
Also in method /SAPSRM/IF_EX_WF_RESP_RESOLVER~GET_APPROVERS_BY_AREA_GUID of BADI implementation class, i am keeping the approver table empty for the step which i want system approval.
For example i have 1 item in shopping cart and for 1st step, based on some accouting criteria, i want system approval for 1st level and the workitem should go directly to 2 approval step when shopping cart is ordered. This is not happening.
But if i have multiple items, and one item should have system approval based on some criteria and the 1st approval level should be system approval and other item should go to the 1st approver. This is happening and showing 'system' approver for item1 and 'appr_xyz' for item 2.
For shopping cart having only 1 item, If i approve the shopping cart in this state only, it doesn't go to any approver and is not usable.
am i missing anything in BADI /SAPSRM/BD_WF_RESP_RESOLVER??
Please let me know.
Regards,
Yayati Ekbote

Hi Adrian,
Yes it is possible to display custom workflows in the Universal Worklist, However, I am not sure what you are trying to do with a routing table. If the workitems are of type decision, you can use UserDecisionHandler (action handler) configured in the XML file to use the Approve/Reject functionality - we are talking about webflow connector here correct? R/3 connector?
Regards,
Beth Maben
EP - Senior Support Consultant II
SAP Active Global Support
Global Support Centre Ireland
**SDN Forum Moderator:
SAP Enterprise Portal: Application Integration
**SDN Universal Worklist Wiki:
http://wiki.sdn.sap.com/wiki/x/ehU

Dump on screen when configuring Process controlled workflow

Hi Experts,
I am facing 1 problem in SAP SRM 7 ehp1. I am configuring Process controlled workflow. Previous workflow settings was Application controlled workflow as its been upgraded from SRM 5. If i run a RFX (BUS2200) cycle in application controlled workflow environment, it works flawlessly.
But when i change my workflow framework to process controlled workflow for all Business Objects. I face a dump when I am creating an RFX. The dump on the portal is:
http://dl3803.ltisap.com:8040/sap/bc/webdynpro/sapsrm/wda_l_fpm_oif
DATREF_NOT_ASSIGNED
No access possible via the 'NULL' data reference
Method: PARTICIPATING_IN_ACTIVE_WF of program /SAPSRM/CL_PDO_DYN_MDA_WF_ADJ=CP
Method: EDIT_DURING_WORKFLOW of program /SAPSRM/CL_PDO_DYN_MDA_WF_ADJ=CP
Method: /SAPSRM/IF_PDO_META_CONF_BO~GET_BO_HDR_ACTION_METADATA of program /SAPSRM/CL_PDO_META_CONF_PROV=CP
Method: /SAPSRM/IF_PDO_META_CONSUMER~GET_ACTION_METADATA of program /SAPSRM/CL_PDO_META_BO_RFQ====CP
Method: /SAPSRM/IF_PDO_META_CONSUMER~GET_ACTION_METADATA of program /SAPSRM/CL_PDO_META_BO_RFQ_ADVCP
Method: /SAPSRM/IF_PDO_META_CONSUMER~GET_ACTION_METADATA of program /SAPSRM/CL_PDO_META_HANDLER===CP
Method: UPDATE_ACTIONS of program /SAPSRM/CL_CH_WD_MAP_IDENT====CP
Method: /SAPSRM/IF_CLL_MAPPER~REFRESH of program /SAPSRM/CL_CH_WD_MAP_IDENT====CP
Method: /SAPSRM/IF_CLL_MAPPER~REFRESH of program /SAPSRM/CL_CH_WD_IDEN_MAP_RFQ=CP
Method: OVERRIDE_LEAVE_INIT_SCREEN of program /SAPSRM/CL_FPM_OVRIDE_OIF=====CP
& when i check in st22. I get the dump as:
Category               ABAP Programming Error
Runtime Errors         DATREF_NOT_ASSIGNED
ABAP Program           /SAPSRM/CL_PDO_DYN_MDA_WF_ADJ=CP
Application Component SRM-EBP-PD
Date and Time          17.12.2011 15:46:56
and get dump at:
1 method PARTICIPATING_IN_ACTIVE_WF.
2   " this method returns ABAP_TRUE if the logon user has an active work item,
3   " i.e. he participates in an active approval workflow process.
4
5   DATA lv_curr_workitem_id    TYPE /sapsrm/wf_workitem_id.
6   DATA lr_process_info        TYPE ref to /SAPSRM/S_PDO_WF_PROCESS_INFO.
7
8   " the default:
9   rv_participates_in_active_wf = abap_false.
10
11   " The scenario is not valid for application-controlled workflow:
12   " Any agents who may edit the document (approver and requester)
13   " enter "Edit" mode right-away. No special handling possible.
14   lr_process_info = io_apf_md_context->get_process_info_ref( ).
>>>   IF lr_process_info->wf_version NE /sapsrm/if_wf_process_c=>GC_APF_VERSION_0200.
16     return.
17   endif.
18
19   " check if a valid workitem exists
20   lv_curr_workitem_id = io_apf_md_context->get_workitem_id( ).
21   IF lv_curr_workitem_id IS INITIAL.
22     RETURN.
23   ENDIF.
the only configuration I change in the system is I changed the workflow framework to process controlled workflow.
Kindly help.
Thanks
Anand

Hello Anand,
As per standard SAP recommendations the application-controlled workflow framework is only intended to be used if you are upgrading from SAP SRM 5.0 or earlier and you need to continue using your existing work-flows.
The default workflow framework setting is the process-controlled workflow from SRM 6.0 on-wards and the user will be provided a option to switch to the application-controlled workflow framework. The option to switch to process-controlled workflows is available only after you have once switched to application-controlled work flows but there will be a big caution that " If you switch from the application-controlled workflow framework to the process-controlled workflow framework; once a process-controlled workflow has been run, it is not supported that you switch back to application-controlled work-flows".
As per the details given i got a feel that we have tried executing the scenario by switching between application and process controlled workflow and hence the system have become inconsistent and its dumping.
I suggest you to raise a OSS ticket to SAP to resolve the issue.
Best Regards,
Rahul

Complexity of using N-step BADI in SRM 7using Process controlled Workflow.

Hi,
Just as a big thought,
I have a Shopping Cart requirement, Here i am asked to develop a Custom workflow for SRM 7.0.
And the client is looking for us to use Process Control Workflows i.e(BRF integrated one).
I need to understand the complexity of using a N-step BADI.
How would be the complexity level if I use a N step BADI( ie Multiple approval levels on Line Item Based).
Kindly tell me the complexity of Using it and if any one has come across some requirement like this, then explain me that how did you face the situation.
Expecting an Earliest Response.
Thanks,
Shanky

Hi,
Is your project SRM 7.0 implementation project then you have to go for Process Controlled Workflow and if your project is upgrade then you can still go with Application Controlled Workflow but down line this has to switch to Process Controlled Workflow.
Best Regards,
Saravanan

Document Management in GRC 10.0 Process Control 10.0

Hi - Our Company is looking to implement GRC 10.0 Process Control 10.0. We have a bit of a challenge for which document management services to go with . Currently there is no integration between GRC 10.0 and OpenText or Sharepoint. I was wondering what solutions others have for Document Management in GRC 10.0
Thanks

Hi Sabita,
Did you check this article on Content Life Cycle Mngt supports all SAP GRC products. Check the link for detailed article and I hope this would be right direction for your company to go.
http://www.sdn.sap.com/irj/bpx/go/portal/prtroot/docs/library/uuid/e0431d8f-2298-2e10-5fb0-87840e285f4c
warm regards,
Asok Christian

Process control inheritence to child org units - GRC 10.0

Hi All,
We created few process controls in Parent Org Unit - X. We assigned mitigation control ID and access risks to these controls along with control owners. These process controls are being used as Standard Global Controls
We created another Child Org Unit - Y and copied the sub-process and then selected only 1 or 2 controls which are applicable to the Child Org Unit. This will allow us to use few Global controls and create local controls if required.
Now the issue we observed that the Child Org Unit does not carry the Mit. Ctrl ID & Access Risks & Owners from the same control of Parent Org Unit. When we tried to provide the same Mit. Ctrl ID it is stating Mit. Ctrl is not UNIQUE.
Our requirement is we would like to have the same Mit. Ctrl ID for Global Controls both at Parent & Child Org Unit and different Mit. ID for local controls at Child org unit. This will be easy to identify controls which are from Global & Local for testing and other reporting purposes.
We understood that since we are copying the sub-process to Child Unit it is taking only Process control details, not the access control information as it is provided in Org Unit
Can somebody please guide how to acheive the above requirement. How to inherit all the controls from Parent to Child Org unit reflecting Mit. Ctrl ID, Access Risks and Owners
We are on PC 10.0 - SP07
Thanks and Best Regards,
Srihari.K

Hi Sabita,
Did you check this article on Content Life Cycle Mngt supports all SAP GRC products. Check the link for detailed article and I hope this would be right direction for your company to go.
http://www.sdn.sap.com/irj/bpx/go/portal/prtroot/docs/library/uuid/e0431d8f-2298-2e10-5fb0-87840e285f4c
warm regards,
Asok Christian

Trying to use Process Control in session bean

Hi,
In Workshop, I have a session bean that is <i>trying</i> to call a method on a business process control. (The control was created in a process project and then moved to a control project to make it visible.)
The problem, in the example below, is that 'myControl' never gets set. So how do we access controls in EJBs? (I thought there was some Workshop magic that would implement this initialization.)
Thanks for any help!!
- Rob
// Event.ejb
* @common:control
private controls.getEventsPControl myControl;
* @ejbgen:remote-method
public String getEvent() {
return myControl.getEvent();
}

We're running SP4. Here's the session bean code snippet in a readable format. Again, 'myControl' is null. How do I set it?
Thanks for any ideas..
- Rob
// Event.ejb
* @common:control
private controls.getEventsPControl myControl;
* @ejbgen:remote-method
public String getEvent() {
return myControl.getEvent();
}

Can we rename ABAP roles in GRC Process Control to adhere to naming convntn

Hello,
We are working on a new implementation of the GRC Process Control 2.5 product. It comes with 11 standard roles. I wanted to change the names to adhere to our company's role naming conventions. Will this adversely affect any functionality. I know that in PC, there is a additional level of security that is maintained thru the NWBC. How will that be affected? And is it typical to have a non-sap security team maintain the roles/user thru the NWBC and have SAP Security maintain the ABAP users/roles?
Thanks in advance.

Hi Arvind:
We copied the standard delivered ABAP roles to our namespace, made a few additional changes and are using them no problem. We also copied the NWBC roles to our namespace. We have the default roles as reference. We did this for consistency, but also because ABAP roles and App roles can change as the App roles did in SP04. This way we compare the app roles before and after a SP to make sure we agree with any role changes introduced to default roles. This way, we don't unknowingly introduce changes to our roles based on the changes SAP introduces to their roles at any given point.
As far as the tester role goes, it is at the Process level. If you aren't sure go into the app under User Access => Roles and their tasks like you will assign it and restrict the selection to "proces". You will see it is at the Process level. As far as the rest goes, you seem pretty well versed in the security guide so I'm sure you know this, but as long as the level of the role is equal to or greater than the task you can assign it. Ex: You can assign a control level task to a Corporate level role but not a Corporate level task to a control level role.
I hope this helps.
Matt

GRC AC 5.3 and GRC Process Control on the same server

Hello,
Can we install SAP GRC AC 5.3 and GRC Process Control 3.0 and GRC Risk Management 3.0 on the same box/ same server.
Is there a OSS Note, which talks about having the above 3 components on one box?
Thanks,
Imran

Hello Imran,
1- My 3 question ARE do I need a separate JAVA Stack for GRC Process Control and seperate JAVA Stack for GRC Access Control
-> No, you can have them installed on save Java stack.
OR
Can I use the same JAVA Stack for GRC Process Control & GRC Access Control?
-> Yes, you can. You have to make sure that you are on SP10 or above for Access Control as only then it will support NW Java 7.01.
2- Can I use EP 7.0.1 installed on same server for both GRC PC 3.0 and GRC AC 5.3?
-> Yes, you can.
3- Can 1 single AS JAVA Database contain both GRC Access Control VIRSA Tables and GRC Process control tables at the same time?
-> For process Control the tables reside on the backend SAP as it is webdynpro ABAP application and for access control the tables reside on the Java database as it is java and webdynpro JAVA application.
Regards, Varun

GRC Process Control

Hi All,
Can anybody have knowledge on GRC, can you explain me why this is used and what are the processess involved in this.
Ragards
Raka

Hi,
Q:what are the prerequisites for such implementation?
You should have an orgn.Structure with well defined roles.
If GRC has to be implemented in an IT Landscape,then you have to have a well contrieved IT system supported by competent IT staff.
Q:Is GRc process control only for SOX compliance or does it take care of other countries compliance requirements.
The GRc process control is intended to help the management in bringing about a good governance at the enterprise level,identify and mitigate the risks and to bring about a meaningful controls [ access and proess controls].[ all at the enterprise level]
Thus the purpose of GRC is to add value to the enterprise beginning with by properly aligning the IT with the business,bring about a good governance by implementing the best practices and constantly monitoring and controlling them.Besides a constant endevour is made to improve the maturity of the various components of controls to afford a great comfort level to the stake holders. This is the ultimate goal of GRC.
The GRC helps complying with regulatory measures [like Basel 2 etc] across countries other than SOX as well- as the focus is about good governance and not about a particular act such as sOX.
Regards.
Ramesh.

Applying Business View format of ARA into Job Monitoring of Process Control

Hi Gurus,
I have an issue regarding with the Job Result of when using SOD sub-scenario in Process Control. We have integrated AC and PC and the controls that have been set for automation, however, the fields (User ID, Name, Group, Risk Description, etc.) are not showing on the PC Job result like the ARA can do. Below information are given:
1. In ARA --> User Level --> Simulate the risk analysis with Business View format --> Result --> choosing Management Summary --> above mentioned fields are shown.
2. In Automated Monitoring --> Choosing Management Summary --> onlyfields of technical view format are the only ones that can be shown (User ID,Risk ID and Control ID).
Thus with this, is there any possibility that the Result of the Job Monitoring of the PC can be manipulated? If yes, can you provide some steps?
Hope you can help me on this.
Kindly refer on the attached file for more info.
Thanks!
Mackoy

Christopher,
Re-generating the transfer structure does not need InfoPacks to be re-created. if you are still getting the old error, two possibilities:
1) You created a new DataSource with new transfer structure, etc. but the InfoPack in the process chain still points to the old trsnfer structure.
2) The data in the table has some records as MM/YYYY and some as YYYYMM.
You don't need to re-create the InfoPacks if your transfer structure is re-generated. They should work off the latest definition always.
Cheers
Aneesh

Process Control Error in Workspace

Hello Gurus,
Please Help me in this ASAP.
we have stopped our Production servers and in the process of up and running Disaster recovery servers.
completed the following tasks.
system configurationis successful
registered the application successfully
when we are trying to access the process control in data tasks getting the follwing error message.
ERROR 1B6 Object doesn't support this property or method
please anyone advise what the problem exactly and ASAP.
Regards,

Thank you for your reply Varun.
if i am not mistaken ru taking about configuration? i have completed all the configuration.
can u guide me how to set the metadata setting and ur taking about windows client or web?
please advise i need ur help urgently.
thanks...

UWL Integration - Process Control & Access Control

Similar Messages

Maybe you are looking for