VirsaCC5.1 (Rule Architect- Organization Rules)?

Hi All,
We are working on Virsa CC5.1 for quite some time now. It is successfully working.
There is one option in Rule Architect Tab:
Rule Artichect->Organization Rules
Anybody any idea what this option is used for? Since, all the rules provided by SAP are already uploaded. Also, There are 3 columns i have doubt for:
1) Org. Level
2) From
3) To
Any functional Infomation would be a great help
Thanks in advance
Regards,
Faisal
Edited by: Faisal Khan on Mar 31, 2008 12:33 PM

There is a guide available in the GRC How to section for Organisational rules
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/805a8744-42ab-2a10-5194-b45be2704722
That would be my starting point

Similar Messages

Business unit in mitigation control and business process in rule architect

Dear Friends
Can any one please tell me the difference between business unit configuration in mitigation control and business process in rule architect.
If they are same, why we are configuring the same two times.
full points awarded for good answer.
Thanks and Regards
A.Rama Krishna.
Edited by: Ramakrishna Ailanani on Nov 25, 2008 10:02 AM

Hello Ailanani,
The use for these entities solely depends on the business and has to be decided between the implementors and the BPOs. This can vary a lot from organization to organization and thus cant be generally stated.
Also, as this would be an integral part of the implementation, would advice you to be sure and clear once you define them or take help from some GRC AC consultants who can guide you on the same. Without a clear definition of the BPs and the BU's you may end up putting a lot of time, money and resource for a thing which probably you might have to reverse later.
Regards,
Hersh.

RAR Organizational Rules not showing/working on RAR 5.3_13.3

Hello Guys,
We are facing some problems during RAR Organizational Rules implementation. After creating our risk matrix (along with all functions) we start refining it with Org. Rules, accordingly to our company needs.
Unfortunatelly, after doing some tests, we found out that all created organizational rules are not working. They simply do not show on our reports (Risk Analysis > Organizational Level section). Any advice on that? I already went through the "How-To Guides" and a few SAP Notes (987031) without succeed.
As a business example, we have the need of certifying that a critical access (already mapped in a Critical Action Risk Type) is not a False Positive, checking also the organizational level for that specific activity (Company Code values) so, we are doing the following:
1) In a given Auth. Obj, we are activating BUKRS field, with $BUKRS value;
2) Created an Organization Rules. (e.g Org. Rule Company01 with BUKRS = COMP, and tagged RISK ID RK01*)
3) Re-generate/Update all risk rules
4) Ran Organizational User Mapping Job
5) Executed an Risk Analysis (Risk Analysis > Organizational Level section).
The results of report are the same as a regular risk analysis. No Organizational Rule were found in our result (in Org. Rule Description columm) but just all users with ANY risk.
Besides , the Org. Rule report ran the Risk analysis for ALL RISKS of our Matrix, not only for those mapped in our Org. Rule (RK01). Is this working properly? The organizational report should not only run a report for previously mapped risks ??? (in our business example, an report result with only users with Critical Access risk RK01 and with any Auth Obj with BUKRS Field value COMP!?)
Can anyone help us on the error above?
Thank you,
Best Regards,
Adam

Hi Natasha,
Reviewed the situation and suggest a work around. Just try whether the same is working or not.
As mentioned the roles are assigned to HR positions of the users and not to user ids. In that case in RAR under configuration tab go to 'user mappings' where you can map user id with the organisation position for the respective users in the particular system.
I suggest you can test it for one user and if works fine you can replicate for other users.
regards,
Jwalant

What are the two different rules for organizational data determination

What are the two different rules for organizational data determination???

Hi
1) Rule type Responsibilities
want to determine organizational data for individual responsibilities
have not created an organizational model but want to create one
have a lot of organizational units and must only assign a few attributes
2) Rule type Organizational Model
You would use rule resolution using organizational model if you
have created an organizational model or have distributed a plan to SAP CRM and also want to use this for determining organizational data
assign a lot of attributes to the organizational units and these are to be evaluated
Regards
Manohar

AC 5.3 RAR and Organizational rules

Hi all,
we are implementing risks based on organizational rules. It is not clear in my mind how the system manages actions that do not have authorizations objects activated (at permission levels) or have authorization object activated but without organizational fileds.
In other words: I have a SOD risk containing the function called FN99. In this function there are the actions TCD01 and TCD02. For TCD01 there are not permission linked and active (just tcode), for TCD02 there is only the authorization object M_BEST_BSA. So, this function does not have any authorization objects with organizational fields (BUKRS, WERKS and so on).
If we use the RAR organzational rules, the 2 actions TCD01 and TCD02 are managed or are not considered at all since they do not have organizational fields.
Thanks in advance.
Andrea Cavalleri

Andrea,
Within RAR you can run either risk analysis at transaction level or at permission level.
Transaction level: Just S_TCODE || TCD authorization objects will be checked
Permission level: S_TCODE and any other authorization object included within the SoD matrix will be checked
Risk Analysis at organizational level is a further level of permission risk analysis taken into account authorization objects that include ORG fields (BUKRS, EKORG, WERKS etc.) and verifying specific values you have defined within the organizational rules.
The goal of running risk analysis at organizational level is to eliminate false positives that might be detected when you run risk analysis at permission level without taken organizational authorizations into account.
Under an organizational Rule approach, you will be detecting conflicts JUST if user U1 is able to execute transaction T1 and T2 (assuming this pair of transaction define a conflict) within the same organizational level (for example the same Company Code).
Please, check the documents have been pointed out in this post.
Hope it helps. Regards,
Imanol

Moving documents to other document library using content organizer rule

Hi Team,<o:p></o:p>
I have created a content organizer rule to move documents from one document library to another.<o:p></o:p>
I have two document libraries say Doc A and Doc B, where Doc A is a source library (where I will upload the documents) and a folder Fol 1 in Doc B is a target destination (where document should
be moved). I got to know from one of the other posts is, Doc A should be involved in any of the content organizer rules to be able to move documents to Doc B.<o:p></o:p>
Right now, I have not created any content organizer rule to involve Doc A. And, a folder Fol1 in Doc B is a target destination for my content organizer rule.<o:p></o:p>
1. I have uploaded a document in Doc A and by using "Send To" command, I have send it to Doc B. This document properties fulfills content organizer rule condition. But still it stays
inside Doc B only, and not moved to folder Fol1 automatically (which is expected, I hope so)<o:p></o:p>
2. Now if I again update the properties of the document, it will still be inside Doc B only and not moved inside Fol1 <o:p></o:p>
3. I have opened Doc B in File explorer using "Open with Explorer" command and copied a document inside Doc B. Now after refreshing Doc B, even though the newly added document fulfills
the content organizer rule condition, it is not moved inside Fol1 automatically (which it should, I suppose)<o:p></o:p>
Can you please help me with the queries above?<o:p></o:p>
Many thanks up-front for your help and support.<o:p></o:p>
Just for an FYI: The rule which I created is to check whether the document title is not Empty. If it is
not, condition will be true.<o:p></o:p>
Thanks,
Vikas Mishra
Vikas Mishra

try these link:
https://support.office.com/en-us/article/Configure-the-Content-Organizer-to-route-documents-b0875658-69bc-4f48-addb-e3c5f01f2d9a?ui=en-US&rs=en-001&ad=US
http://www.boostsolutions.com/blog/how-to-create-content-organizer-rules-in-sharepoint-2010/
http://community.office365.com/en-us/f/154/t/255043.aspx
http://community.office365.com/en-us/f/176/t/252790.aspx
https://support.office.com/en-in/article/Create-Content-Organizer-rules-to-route-documents-1e4d37a3-635d-4764-b0fc-f7c5356c1900

Incoming email settings for a dropoff library & content organizer rules in SharePoint 2013

I have configured an incoming email setting for a drop off library,I need to save original email also.Following are the issues:
1)Two attachments are getting uploaded for an email , Email(.eml file) as well as the attached file .I just want to save the email part as it is already containing the attachment
2)In Mozilla i can see the popup for for opening the .eml file while in IE it is directly opening in browser ,is it possible to show popup in IE?
3)I want to write content organizer rules depending upon the email subject,but i m not able to find that column

1)Two attachments are getting uploaded for an email , Email as well as the attachment.I just want to save the email part as it is already containing attachment
Inder: When you set the incoming email, you get option to save only email and not attachment. check the incoming email settings on that library.
2)In Mozilla I can see the following popup when i click on the email,I want to have this functionality on internet explorer.
Inder : You can do that
http://office.microsoft.com/en-in/sharepoint-server-help/change-how-to-open-a-document-in-a-library-with-one-click-HA101729873.aspx
Also enable below feature
lick the gear icon to open Settings, and then click Site settings.
Click Site collection features.
Note If the Site collection features option isn't present, you must first click
Go to top level site settings.
Locate the Open Documents in Client Applications by Default feature in the list, and then click
Activate.
3)I want to write content organizer rules depending upon the email subject,but i m not able to find that column
I assume, Email subject should by default become title of that document. Try title
If this helped you resolve your issue, please mark it Answered

Content Organizer rule for incoming email in sharepoint 2013?

I have create a content organizer rule for the drop off library for the column "Name" and it is working fine except for incoming emails.The content organizer rule is not firing even after matching the subject with the "Name" of
incoming email,Is this the limitation of content organizer rule?

http://www.coretekservices.com/2012/01/26/sharepoint-content-organizer-%25e2%2580%2593-emailing-your-drop-off-library-and-getting-it-to-work
Central Administration > Monitoring > Review Job Definitions (under Timer Jobs) > Content Organizer Processing
Also check below:
http://tutorial.programming4.us/windows_server/SharePoint-2010---Content-Organizer-as-a-Document-Routing-Tool.aspx
If this helped you resolve your issue, please mark it Answered

Need information on the new RAR Rule Architect/Rule Set functions

Does anyone have any information on the new 5.3 functions listed under Rule Architect/Rule Sets, specifically the Compare function?
My 5.3 Config manual mentions this area but doesn't describe anything about it. I have a request from our user group and need to determine if this can fit that request.
What they are looking for is an easy way to compare our RAR Rule Set with the latest SAP version (Q2 2010 is the most recent I believe). Just from the screen shots, it looks like we could maybe use the Rule Sets functions for that. Load the new SAP one into RAR as a separate ruleset and then run this Compare function. However I haven't been able to find any documentation on this function, so I don't know if it really does what we are looking for.
Thanks.

Hi,
the error 'NullPointerException ' is very common error in GRC.
kindly search, you will find lots of threads and notes on thi.
check you permission TXT file. It contain null value some where.
especially check SD01 & SD02 tcodes.
Also open permission file in word and check all TAB's and ENTER's in technical view.
Regards,
Surpreet

Drop Off Library and Content Organizer Rules allow bypassing of destination permissions

I had a test scenario where
User Betty didn’t have permissions to a destination library (only I had permissions to it)
Via the Content Organizer rule and the Drop Off library, Betty could send a document to a library where she didn’t have access.
Anyone addressing this issue and how? We just don't want people to be able to send things to a destination where they don't have access, but looks like the Content Organizer Rules impersonate some part of the move.
What's odd is you can see the "CreatedBy" as Betty, but she can't go to the library and even see the moved document...permission is denied.

Hi Bubberz1,
This is the known and documented behavior of the content organizer. To prevent someone from using the content organizer in this way, you'd need to prevent them from having access to add documents in the drop off library in the first place, or else
use some other process, such as workflows, to move the documents using the creator's permissions.

Content Organizer Rule - route new doc to auto created folder

I have set up a content organizer rule and used the "Automatically create a folder for each unique value of a property:" Check box. The folders are created properly but I now want to set up a rule that will route documents
to folders that have been automatically created.
E.g. I have uploaded a document with a serial number of 100-150 and a folder has been automatically created.
Now the user uploads a document and identifies the serial number the document as 100-150, I would like to route this new document to the folder that has already been created.
Note: There will be numerous folders created as users upload new documents with new serial numbers, so creating a rule for everyone would not work.

Hi,
In edit Content Organizer rule page, I see there is an option as Automatically create a folder for each unique value of a property:
However, unlike the drop down used in the property based filters above, this drop down *only* contains properties that are required by your content type.
This is done to prevent adding folders that have no values for a property.
If you need to put similar documents to the same folder, you could consider making use of this feature.
Regards,
Rebecca Tu
TechNet Community Support

"Organizational Rules"

HI:
I am looking for anyone who has experience in developing the "Organizational Rules" in Compliance Calibrator 4.0 or 5.3.
We have the basic rule set loaded, with some custom functions and risks. However, we are the parent company of many subsidiaries, and while the one rule set analysis access from tcode and object perspective, we would like to add the extra layer of organizational rules in order to reduce false positives where access is combined, but for different org values.
I am looking for "how to"....there doesn't seem to be a lot of information out there on this functionality.
Thanks,
Margaret

HI:
My original question was answered....however upon implementation of this (we are on version 4.0)....we have updated our functions, and updated the org rules table...and generally the analysis works. The SoD report when you just run a user analysis is no longer showing a false positive.
However, when we use the populate the Org Rules field with our Org Rule that we want to analyze against, we get a "No users match the selection criteria" error popup.
Is there any fix out there for this? User is valid...it only happens when you populate the Org Rules field in the analysis screen. I couldn't find anything on OSS.
Thanks,
Margaret

SAP GRC AC: Organizational rules at Batch risks analysis and Dashboards

Dear All.
I would like to know GRC AC is able to consider the organizational rules defined (for example: risk only affected to Company, BUKRS 0001) at the Batch risks analysis and at the Dashboard. I already know that for the ad-hoc reporting you can filter by the Org.rules created but i would like to know if this filter is also able for the Batch risks analysis.
Thanks and regards.

Dear all.
As per my knowledge this parameter only sets the flag of Consider Org.Rules at the filters. This is what the guide indicates:
"Setting the value to YES automatically selects the Consider Org Rule checkbox on the Risk Violations tab of the Access Request and
Role Maintenance screens."
So how are you so sure about that indicating this flag to YES will take into consideration the org rules at the Dashboards?
Regards

How to setup a routing rule for a specific file type for the content organizer?

Hello,
how can I set a routing rule for a specific file type, for example for "pdf" or for "docx", for my content organizer?
As standard I can only choose for the rules the content type, name and title of the file uploaded.
Thank you in advance!
JohnyG

Hi Johny,
Based on your description, my understanding is that you want to create a routing rule for a specific file type.
I recommend to create rules with the conditions as the image below shows for the Document content type(for example: .docx files):
Best regards.
Thanks
Victoria Xia
TechNet Community Support

Organizational Model Determination Rule

Hello !
I am looking for an organizational model determination rule which is looking for the Org Unit of the given employee responsible. Could anybody help?
Maybe a little more explanation. I created a partner determination procedure which looks for the employee responsible via the business partner. The system should then look for the organizational unit in the org model, which belongs to the employee responsible. Therefore I need an organizational model determination rule.
Thanks a lot!
Astrid

Hi Prajit ,
We want to determine Org based on employee responsible but not on basis of USER.
Employee responsible will be assigned to a particular position in Organization .
We want to determine Organization unit where Employee is assigned to that particular position.
When employee resposnsible is changed Org unit (Service ) should be changes .
Please suggest solution.
Thanks & Regards,
Anup Reche

VirsaCC5.1 (Rule Architect- Organization Rules)?

Similar Messages

Maybe you are looking for