Virsa 5.1 issue

All,
I am running the Risk Analysis at User level but
when I click on the User fields on the screen
and put "*" value only 53 users shows up.
I ran the user synchronization background job also but
still not ALL the users are showing up when I click on the
user field and try to put the User ID or * vaule in User level
Risk Analysis.
Please let me know.
From,
Pranav Thaker
8457

Have you limited your reports to DIALOG users only.
I suggest that you perform a FULL USER Synchronisation and check that the number of users downloaded matches your expectations.
I also suggest that you change to the latest version AC 5.2

Similar Messages

ECC5 New Transactions

Hello,
A couple of years ago, we set up VIRSA rules for critical transactions. The auditors are now asking if we can provide a list of new transactions that have been added to SAP since the VIRSA rules were created.
I have spent several minutes looking over the Security forum trying to find out how to obtain a list of new transactions that are delivered with an upgrade, support packs, etc. I have not been able to find this information.
I saw several references to SU25 and table USOBT_C, but these only show transactions that were "changed" during a time period. Is there a way to find out what "new" transactions exist?
Thank you and regards,
Janice Derting

Janice,
I apologyze I should have read the question better. Here is something I would try and let me know if it works.
Virsa has table /VIRSA/ZCTRAN - which is the critical transactions table that is in Virsa. This table should be in the ECC environment that you monitor. ECC should have table AGR_TCODES which should contain a list of all of your TCODES. I would extract both of these tables and just run a comparison of TCODES that do not match and you will have a list of TCODES that are not in Virsa. One issue with this not all of those TCODES will be critical, but you will have a list of TCODES that are not in Virsa. Let me know your thoughts, I have been trying to do this myself.

4.6C to ECC 6.0 upgrade - Issue with Virsa Compliance Calibrator

The issue is that phase IS_SELECT during the PREPARE is not detecting VIRSA as an add-on. This of course will result in VIRSA not being upgraded and the system will be unstable ( note 989368 ). Also, I can't choose to delete the add-on either.
We installed the compliance calibrator before SAP purchased VIRSA. So, the tool was installed through transports, not SAINT. I assume this is why phase IS_SELECT is not seeing the tool.
Any ideas?
-Scott

Received a reply from SAP. Since VIRSA was installed through STMS the IS_SELECT phase will not see the add-on. I had to do the ECC 6 upgrade as normal and then install VIRSA 4.0 for SAP 700 systems through SAINT.
I had to clear SPDD and SPAU as much as possible for /VIRSA/* objects. However, there were six objects I could not clear. This did not cause any issues.
Notes 1006083 and 985617 are needed for this procedure.
Thanks for all the suggestions.
-Scott

Performance Issue in Program /VIRSA/ZVRAT_U03

Hi,
The Program /VIRSA/ZVRAT_U03(eport the user SOD voilations and the correspocnding user access) is giving performance issue ,
Ideally it gives Time out error after some time.
As this program is a Standard program from : VIRSA SYSTEMS INC., and there are no available OSS notes available.
I would like to know , how to proceed in this screnario.
Thanks is Advance.
Cheers
Irfan

Hi Irfan,
run the program in background mode to avoid the timeout.
If the runtime is not acceptable open a message with details: (runtime, variant, objects processed, ...).
Kind regards,
Hermann

Virsa CC 5.1: Issue with Background Job

Dear All,
I almost finished configuration of our new Compliance Calibrator dashboard (Java stack of NW'04). But, unfortunately, have an issue with SoD analysis now.
Using SAP Best Practice recommendations, we have uploaded all functions, business processes and risks into CC database, and then successfully generated new rules (there are about 190 active ones in our Analysis Engine).
I also configured JCo to R/3 backend and was able to extract the full list of our users, roles and profiles. But somehow background analysis job fails.
In job history table I see the following message: "Error while executing the Job:null", and in job log there is an entry, saying that "Daemon idle time longer than RFC time out, terminating daemon 0". But it's quite strange, as we use default values: RFC Time Out = 30 min, and daemons are invoked every 60 seconds.
Please, advise whether you had similar issues in your SAP environment and, if yes, how you resolved them.
Thanks,
Laziz

Hi Laziz
I am now just doing the first part of CC. May I know your details in how to configured Jco To R/3 Backend? Do you need to create any SM59 for connection T in R/3? If yes, I am lacking of the details to do that if you could help? Thank you.
Regards
Florence

Error while opening the file in Background job in Virsa.

We are using Virsa 5.2
I click on the result tab to view the job results.(informer->Background job) I am getting this message.
Mar 3, 2008 1:49:15 PM com.virsa.cc.comp.GenericRAReportView wdDoModifyView
WARNING: .\virsa\bgJobSpool\16.i (The system cannot find the file specified)java.io.FileNotFoundException: .\virsa\bgJobSpool\16.i (The system cannot find the file specified)
Can you please let me know?
Nothing has been changed including my user profile.
From,
PT.

Hi,
Here are number of notes that I have listed out to sort some issues on SAP GRC 5.2 .
There is a note for background daemon issue as well
Installation
Note 1009509 - VIRSANH 5.2 Support Packages for BASIS 700
Note 1022187 - Compliance Calibrator 5.2 Support Pack
Post Installation
Note 1022187 - Compliance Calibrator 5.2 Support Pack
Note 1008500 - VIRSA 4.0 Support Packages for Basis 700
Note 1060673 - Configuration of SAP Adapter in CC 5.2
Note 709140 - Recommended JDK and VM Settings for the WebAS630/640/7.0
Note 1044173 - Recomended Netweaver Setting for Access Control 5.x
Note 1044174 - Recommendation for CC 5.x running on Oracle 10G Database
Note 1121978 - Recommended settings to improve peformance in CC 5x analysis
Note 978536 - Language Configuration for Virsa Compliance Calibrator 5.2
Issues
Note 1008500 - VIRSA 4.0 Support Packages for Basis 700
Note 999785 - CC Background Daemon will not Start
Note 987386 - Graphics Rendering Issue in SAP Compliance Calibrator
Note 1009267 - System ID is not available in drop down menu-CC5.1
Note 1052455 - Error-No relevant language message available in database
Note 1062037 - java.lang.NullPointerException error in Adapter activation
Note 1088378 - CC 5.2 - Undeployment of ccappcomp from SDM fails
Thanks,
Uday

CUP Issue in workflow - Approver not found after SP13

Dear All,
We are facing an issue after upgrade to SP13 in CUP. The request is not getting saved and throwing an error - Approver not Found.
We uploaded the xml files also of SP13 after upgrade has completed.
We have not changed the workflow after upgrade and verified all the attributes of Initiator, CAD and approver is already available in CAD - but still we are receiving the error "Approver Not Found"
The same workflow is working succesfully in Production system which is under SP9.
Is this an issue with SP13. If any body has encountered please let us know how to resolve.
Thanks and Best Regards,
Srihari.K

Dear Chinmaya,
Below is the error log
Log :
2011-05-09 08:13:17,375 [SAPEngine_Application_Thread[impl:3]_25] ERROR NoApproverFoundException in Save request
com.virsa.ae.workflow.NoApproverFoundException: No approvers found for req no : 135, for reqPathId, 209, for path, CHNG_ANZ_Z6 and approver determinator : ANZ_LAC
Also, we tried with simple workflow as well with just 2 attribute logic. Still we received the same error
Thanks and Best Regards,
Srihari.K

Error "Only edit objects from package /VIRSA/ZVIR in local requests"

Hey, SAP gurus,
After I applied OSS note 1149445 in our Dev box to fix the bug in program /VIRSA/ZVFAT, I had problem to realease the transport. I got the error u201COnly edit objects from package /VIRSA/ZVIR in local requestsu201D.
u201CObjects in package /VIRSA/ZVIR cannot be edited in transportable Workbench requests in the current Dev system. The transport routes are configured such that objects from package /VIRSA/ZVIR can only be edited in local Workbench requests.u201D
What can I do to release the transport and move it to our QA box?
Thanks in advance!
Fisher Li

My co-worker and I followed SAP instruction on this one and solve the issue.
We created a "transport of copies" by using Transaction SE01. Go to the request overview and choose Request/task -> Object list -> Include objects to include the "child transport number of my transport" in this "transport of copies". Add the target system and release the change request.
Thanks!
Fisher Li

Migration from VIRSA 4.0 to GRC 10.0 (ARA)

Hi Guys,
We've just migrated from VIRSA 4.0 to GRC 10.0. We have only two connectors configured ECC and Finace System.
Rules have been generated and we're using the standard "global" ruleset. The rules seem to be generated successfully ( I've checked in the NWBC that the permissions appear after the risk generation and also I've checked some tables like GRACSYSRULE and GRACACTRULE and risks appear there).
When running a risk analysis report at user level in both the system VIRSA 4.0 and GRC 10.0 the no. of conflicts matches where as no. of mitigation doesnot match.Due to this mis-match we are not in a position to go 100% LIVE with GRC and decommisioning VIRSA. We use concept of mitigated roles and not users. Raised the concern with SAP too 2 weeks back and no luck yet.
Does anyone faced a similar issue? can you give me some light in order to solve the issue?
Many Thanks!
Ratan Roy

Hi Andrzej,
Thanks for the reply.
I have one more simple question: how can I change the Violation or Mitigation counts to any RISK Ids?
Say for example:I wanted to make changes in violation and mitigation counts in below mentioned risk.
Access Risk ID
Risk Description
No. of Conflict
No. of Mitigation
SOD Object
F020
Open closed periods previously enter incoming payments
72
45

Migration CC and FF data from Virsa 4.0 to GRC 10.1 Data Inconsistency

Hello Guru's
We have done Migration from VIRSA 4.0 Compliance Calibrator (CC) and Firefighter (FF) data from to GRCAC 10.1 system.
After Migration, data inconsistency is coming while validation.
Followed standard sap migration guide virsa 4.0 to 10.0
Patch level - GRC AC 10.1 system
SAP_BASIS
740
0008
SAPKB74008
0000
@6H\QAchieved with Support Package@
SAP Basis Component
SAP_ABA
740
0008
SAPKA74008
0000
@6H\QAchieved with Support Package@
Cross-Application Component
SAP_GWFND
740
0008
SAPK-74008INSAPGWFND
0000
@6H\QAchieved with Support Package@
SAP Gateway Foundation 7.40
SAP_UI
740
0010
SAPK-74010INSAPUI
0000
@6H\QAchieved with Support Package@
User Interface Technology 7.40
PI_BASIS
740
0008
SAPK-74008INPIBASIS
0000
@6H\QAchieved with Support Package@
Basis Plug-In
ST-PI
740
0000
0000
SAP Solution Tools Plug-In
SAP_BW
740
0008
SAPKW74008
0000
@6H\QAchieved with Support Package@
SAP Business Warehouse
GRCFND_A
V1100
0006
SAPK-V1106INGRCFNDA
0000
@6H\QAchieved with Support Package@
GRC Foundation ABAP
GRCPINW
V1100_731
0006
SAPK-11506INGRCPINW
0000
@6H\QAchieved with Support Package@
SAP GRC NetWeaver Plug-In
IW_FNDGC
100
0002
SAPK-10002INIWFNDGC
0000
@6H\QAchieved with Support Package@
SAP IW FNDGC 100
WEBCUIF
747
0005
SAPK-74705INWEBCUIF
0000
@6H\QAchieved with Support Package@
SAP Web UI Framework
IW_CBS
200
0009
SAPK-20009INIWCBS
0000
@6H\QAchieved with Support Package@
SAP IW CBS 200
IW_CNT
200
0009
SAPK-20009INIWCNT
0000
@6H\QAchieved with Support Package@
SAP IW CNT 200
IW_SCS
200
0009
SAPK-20009INIWSCS
0000
@6H\QAchieved with Support Package@
Screen Scraping
POASBC
100_731
0001
SAPK-10201INPOASBC
0000
@6H\QAchieved with Support Package@
POA Shared Business Components
Patch level VIRSA 4.0 system
GRCPINW
V1100_731
0008
SAPK-11508INGRCPINW
SAP GRC NetWeaver Plug-In
Kindly let us know after migration, any sap notes need to install.
Regards,
karunakar

Hello Prasant,
We have migrated VIRSA 4 0 to GRC 10.1 system, after migration we have below issues.
1. In table GRACSODRISK (not able to see the medium risk, but in NWBC screen (Access Risks) we are seeing the medium risks.
2. In Function Permission.txt file ( only AND is coming for all, but some OR is avaiable in VIRSA 4 0 system.
And for gap (it automatically taken AND
Example:
AM02
FB02
F_BKPF_BED
ACTVT
2
AND
0
AM02
FB02
F_BKPF_BED
ACTVT
3
AND
1
AM02
FB02
F_BKPF_BED
BRGRU
AND
1
AM02
FB02
F_BKPF_BEK
ACTVT
2
AND
0
AM02
FB02
F_BKPF_BEK
ACTVT
3
AND
1
AM02
FB02
F_BKPF_BEK
BRGRU
AND
1
kindly suggest.
Regards,
Karunakar

We have migrated data from virsa 4.0 to grc 10.1, all virsa mitigation approvers and controllers got migrated but we are not able to map new mitigation approver and controller to the mitigation ids.

Hello All,
We have migrated data from virsa 4.0 to grc 10.1, all virsa mitigation
approvers and controllers got migrated but we are not able to map new
mitigation approver and controller to the mitigation ids.
The steps we have done below.
1. We have created user id in su01 with necessary authorizations
2. we have declared this user id in Access control owners as a
mitigation approver and assigned to the organization unit
Now we are trying to map to newly created mitigation approver to the
mitigation id but we are not able to find that approver id for the mitigation ids. (only old mitigation ids came from VIRSA only we are able to see, not able to add new mitigation approvers / controllers to the mitigation ids)
Kindly check this issue, this is very critical for us.
Thanks in advance.
Regards,
Karunakar

Hi Karunakar,
- Assign Owners to Organization unit
- Make these owners as Mitigation Approver and Monitor
- Create Mitigation Id in this Org. unit
Regards
plaban

Port issue with j2ee engine, http service provider

hi gurus,
on two of our standalone j2ee servers, the j2ee engine is up and running fine. from the mmc everything shows green including messager server.
but when i connect to the j2ee page using browser either from the client machine or on the server it never gives me an error message but the status bar keeps processing. never throws any sort of dispatcher or 500 error messages.
There were some GRC-Virsa components deployed over the weekend not sure if that had changed something.
After intial research the port information in the HTTP service provider showed 80 for http and 443 for ssl (https)so i had manually changed it to 50000 and 50001 from config tool respectively , restarted the server.
After the restart the j2ee page came up and the very second http request it goes to the loop again with no error message, whats the reason behind this sort of behavior. i have made the port changes over the whole cluster and restarted.
surprising it works only for the first time after restart, the very second http request never accepted by dispatcher/server process , no error message though.
environment, nw04s with plain j2ee, windows 2003, sql2008
please assist.
-durga

thanks sean for responding, infact the issue is resolved yesterday.
Reason due to insufficient application threads and make sure the right port defined in HTTP service provider. So fixing these two things resolved the issue
Thanks,
Durga

GRC AC 5.3 Application Issue

Hi everybody,
i hope you can help me,
I have a DL360 HP Server in which it is installed the components for GRC AC 5.3 with Win2003 server.
The issue is that the server not respond after 1 day approximately. I try to use capacities (ERM, RAR, etc...) and they not respond, i mean, first i can work normally, but passed approximatelly 1 day, it´s dead, the web pages don´t respond.
I see the event viewer and performance but they not show any problem, just some warnings, therefore is not server or OS problem.
When i see the SAPMMC console, in the corresponding tree of instance currentstatus/<SID>:
/kernel/Application threads pool/Minimumthreadpoolsize module is in red color.
/kernel/Application threads pool/WaitingtaskQueueoverflow is in yellow color.
/services/JMX Adpater/ObjectNameCache/MaxEntries is in red color.
/servides/JMX Adpater/ReplacedEntries is in red color,
¿What is the problem?
¿Do you know how and where look the log files to see the application problem?
Regards,

Hi Ricardo,
If you are running in a 64-bit environment - increase heap size to min 2GB.
Note 1121978 - Recommended settings to improve peformance risk analysis
Verify settings in J2EE Config Tool per SAP Note 723909.
Verify Settings in Visual Administrator:
> Server Node
> Services
> JDBC Connector
> Properties
Datasource name should = SAP<SID>DB (J2EE schema)sysDS.maximum connections should be 50
In Risk Analysis and Remediation go to WebDynpro > Content Administrator
> Maintain JCo Connectors
o Check Virsa Metadata and Model for all connectors.
Verify that max pool is set to 50.
Verify that max connection is set to 100.
Verify time out is seconds is 10. (msecs = 10,000)
Verify wait time in seconds is 30. (msecs = 30,000)
In Risk Analysis and Remediation Configuration > Performance Tuning
Batch size for users should be 1,000
RFC Time out should be 1441
Web Service worker: 5
Job worker: 3
//vit

Virsa application components not found in Visual Admin tool (GRC AC 5.3)

Hi experts,
I have this weird issue. I was trying to run the background job to synch the backend roles, users and profiles in CC. But when I checked the background job deamon through this link
http://209.207.245.71:50000/sap/CCADStatus.jsp , the screen was blink.
I searched and found this note #999785.
When I looked for the " virsa/ccxsysbgear application" through the Visual Administrator, I could not find any of the Virsa components application in our GRC server under this path:
Visual Admin --> cluster tab --> deploy folder --> virsa/* (all components)
We have AE, FF configured and running in our development server. Now I am configuring the CC and found all the virsa application services are missing.
We are implemented GRC Access control 5.3 . Any ideas how to get these components deployed and running in the Visual Admin tool??
Some of the sample deployed components are
1. virsa/ccxsysbgear application '
2. virsa/ccume
3. virsa/AEume
4. virsa/ccxsysbher etc
Greatly appreciate your help!
Thanks
Siri

I found these files with the new name.. There is no virsa tag for these files.

Problem in Virsa 4.0 in Mitigate Users

Hi ...
We have patched Virsa 4.0( 400_620) on our production server. After patching, we are facing problem with Mitigate Users.
After logging in CC4.0, under the Mitigation Tab, Mitigation Control ->Mitigate Users -> New Entries.
Here when we add or Mitigate a User under this New Entries, filled required data and SAVE, it prompts "INVALID RISK ID" on the status bar.
We have all the RISK IDs in the CC4.0, when searched for RISK ID and MITIGATING CONTTROL ID, we can see all data in CC4.0.
Due to this SOX team is not able to MITIGATE USERS.
Please advice and suggest how we can fix this problem.
Thanks,
Regards,
Narender

Hi Kathy,
I am facing the same issue here. The patch update from 400_640 to 400_700. Originally the 'user mitigated' table had a major flaw within it, whereby it would accept any value, ie you could potentially mitigate a user against a series of risks that did not exist in the system or were not associated with the control id.
The patch has somewhat filled this flaw. Since then all risk appear to be invalid when you mitigate (whether mass way or within the control ID). To resolve this, there is a table called /VIRSA/RISKS (Rule Architect>Risks) which needs to have the risk ID defined. For example DP02 (Create outbound delivery with order ref). This was not needed to be maintained before or there was no check in the code previously.
If your rule matrix has this risk split into various org risks like ours such as DP02ES (spain) you will be able to associate that risk to a control ID or mitigate a user with that risk (via the mass option), as long as the DP02 is defined in the risks table.
The good thing with these checks is 1) the system now checks if the risk is first defined in the system (Rule Architect>Risks- /VIRSA/RISKS) and 2) you will not be able to mitigate user via the mass option if the risk being used is not associated within the mitigation control ID your using.
Hope that helps
Amar

Virsa 5.1 issue

Similar Messages

Maybe you are looking for