Quantcast
Channel: SCN : All Content - Governance, Risk and Compliance (SAP GRC)
Viewing all 5097 articles
Browse latest View live

How to add an GRC report in role menu

$
0
0

Hi Experts,

 

In NWBC --> Reports and analytics we see many reports exits. I would like to add some of the reports in Role menu.

 

As these reports are web dynpro, Could you please advise how do i get the report name to add them into Role menu under web dynpro. Please advise.

 

Regards,

Balu


Approver is not able to approve the requests in GRC AC 10

$
0
0

Hi Gurus,

 

Please help me in resolving the issue,

 

We are on SP9. We have configured workflow with default path/ default stage  for role approval. When we click on "initiate for approval" in approval phase, request is triggering to role owner. Role status is "pending approval".

 

Role owner is able to see the requests in workplace inbox but not able to approve the requests. Approve button is not displaying.

 

This is also happening for access requests. We have configured access request workflow with one stage (role owner). All requests are stuck at approver waiting for approval.

 

Quick help is much appreciated.

 

Regards

Sasi

Report not working in background GRC10 PC

$
0
0

Hi,

 

We are generating report in background for organization and process structure under master data in process control,but user is not able to see

report in inbox.

 

Is any settings we need to do for getting report into user inbox

 

please provide your inputs

 

Thanks

GRC Admin

Ruleset is disabled on GRC 10.1, even though "Change Request Det" is tick-marked.

$
0
0

Dear All,

 

The Ruleset is coming as non-editable for an Approver, even though "Change Request Det" is tick-marked. Also, i do not find the option ' Set Current Configuration/Set configuration settings..`, in GRC 10.1, when i opened in Config mode


Regards

Palban

SAP GRC 10.1 Cant find approver

$
0
0

Hi Experts,

 

 

 

Im using grc 10.1 and im having a issue, when im trying to make a acces request all the user information that this set to come HR is correct , but the approver field request is empty.

 

 

Any suggestions  how to solve the problem ?

 

HR Structure

structure.PNG

Access Request

managerfield.PNG

Best Regards,

 

Eduardo Silva

Mitigation still required even for Rejecting Request

$
0
0

Hello All,

 

Risk owner is trying to reject request (Approval status = Reject) but still it says to mitigate risk.

 

Also tried to change approval status = Reject and re run risk analysis again in Risk violation table and submit the request. Here it shows no risk(Green) found but upon clicking submit request it says to Mitigate risk.


We have maintained below under  "Display Task Settings".

 

Approve Despite Risk = No

Approval Level - System and Role

Rejection Level - System and Role

 

I don't feel we need to mitigate risk for rejection?. Please advise.

 

Regards,

Abhi

BRF plus doesn't work on Conditions and calculations

$
0
0

Hello,

 

When you create an additional filter or condition on the business rule, it doesn't work on the ad hoc query. What is wrong with it?

Unable to select Role and System

$
0
0


Hi All,

 

We have upgraded to SP18 from SP13 yesterday.

While testing application, I found that system and roles tabs are not selecting while submitting Access Request submission.

Did any one face same issue?

 

Thanks

Mohan


Manager field is blank

$
0
0

Hello everybody!

Could anyone tell me whether the following copying procedure works as designed?

I created a user with roles (in two stages: manager - role owner)

Then I try to create one request as a copy of the previous. But in the end of copying procedure I got:

"User details have updated, as user id was modified" (message class GRAC_WF_REQUEST 834).

After the above notification the request goes to nowhere, because field with manager becomes blank.

Is it ok or no?

If I set provisioning option "Account validation check" I get message number 607 "Account Validation is ignored for system &1 due to conflicting actions."

Remark: the below screens show that I changed user's names, but even if I don't change them I get the following warning.

Some screen shots to describe the situation:

 

 

 

 

 

 

 

 

Regards,

Artem

GRC Access Request Form: Existing Assignments not chooseable

$
0
0

Hello together,

 

if we are starting an User Access Request (Change other user), then we click the button "Existing Assignments":

(We are using an CUA between GRC and target SAP ECC systems)

 

Assignments_1.jpg

 

Then we (only) see the systems and profiles of the in grey and they are not choosable, it is not possible to move them below from "Available" to "Selected". We want to see and choose the roles and Business roles, to select them for the Access Request.

 

Assignments_2.jpg

 

What is here the error? Why we can´t choose roles?

 

Thanks for some help.

 

Best regards

René

SAP GRC PC 10.0 - Attachements do not appear in reports

$
0
0

Hi gurus,

 

I am trying to customize a report to be able to display the attached documents to a test control effectiveness.

 

In the SPRO following the path Governance Risk and Compliance, Reporting, Maintain report configuration is it possible tu change the columns shown in a report but I caanot find the field that I should add in the report's column.

 

Any help will be appreciated.

 

Thank you.

 

Regards.

Table Maintenance

$
0
0

Hi ,

 

Is there a way that we can leverage GRC AC for updating a table with user name apart from Role Provisioning.

 

We have requirement where besides role provisioning, user id need to be mapped in one table for specific aceess.

 

Any suggestion is appreciated.

 

 

Thanks,

Mamoon

Connector GRC to HANA

$
0
0

Hi gurus,

 

I need to connect GRC 10.1 to a HANA plug-in system, is it possible to create a connector directly form SM59 to connect to a HANA plug-in system?

 

Is it necessary to do something else?

 

Thanks,

 

Kind regards,

Change url text in notifications for Access Request

$
0
0

Hello

 

I wanted to know if there's a way to change the url text that's displayed in the link variables (LINK_GET_APPROVERS, etc) so the email doesn't have that really long url and instead it says something like click here, or something customized.

 

The %Provisioning% variable has it setup this way, when it shows a link to get the password (at least that's how it's shown in the guide).

 

Thanks and regards

Maria Alejandra Piedra

SAP Basis/Security

Agent Rule in UAR

$
0
0

Hi Experts,

 

I am looking to create an Agent Rule (BRF+/ BRF+ Flat) for the UAR MSMP Process. The purpose is that, the users will be notified via email when any role is removed from their IDs. Appreciate your help in achieving this.

 

Thanks,

Sajib.


i need to create work flow for new account

$
0
0

we need to create workflow as below         

 

new account -->approve (if approver approve request) --> request will create in ticketing toll automatically --> if request closed in ticketing tool then workflow will closed automatically in ARM

 

is it possible in MSMP workflow or not?

 

Thank in advance

 

kumar

GRC AC ARA v10 SP13 - Org Rule Org Level Missing

$
0
0

Hi Experts!

 

Testing ARA Organization Rules soon and have noticed that one of my key Org Levels, $BUKRS, is missing. I have not yet used this functionality on this system. I am already doing the following:

  • running the authorization sync job daily (we are in the middle of multiple project builds)
  • checked the target systems USORG table for Org Level $BUKRS entry.
  • active ruleset function has that Org Level $BUKRS entry and it appears on the Risk Analysis reports

 

All other Org Levels are available to use except for this one. Any ideas!

 

Thanks in advance.

 

-john

File Template for Role Usage sync.

$
0
0

In GRC 5.3, we had a utility to update role usage sync by directly uploading the data using a provided template. This information could be used for UAR. In GRC 10.1, is there a similar template to upload the role usage? This is needed as we need data for role usage from a non-SAP connector during UAR. Other data regarding roles, actions & permissions can be uploaded using the templates provided by SAP.

Firefighter ID force closer after completion of activity

$
0
0

Hello All,

 

 

We are implementing the GRC Access Control 10.1

We have a requirement in EAM, as below.

 

Example:

 

We have provided one day validity for FF id, Firefighter has completed

his activity in one hour, after that firefighter OR security team has to close the FF

access forcefully.


security team is not intrested to keep the FF access for full one day (after completion of work).



Kindly let us know, this functionality is avaiable in GRC access

control

10.1. or not.

 

Thanks in advance.

 

Regards,

Karunakar

How to add just the password to new request notifications?

$
0
0

Hello

 

I wanted to know if there was notification variable that contained a user's password so a notfication text could be maintained with this variable.

Our requirement is to not display all the roles that are in the %PROVISIONING% variable which is the one that contains the password for a new request notification, hence we need to use another variable to be able to display the password for the user.

 

Regards

Maria Alejandra Piedra

Viewing all 5097 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>