Skip to Content
avatar image
Former Member

Duplicate Entries in User Risk Analysis

Hi Team,

We have run User Risk Analysis on the below selection criteria :

I get a duplicate entries when i see the result output :

Access Risk ID : Y331 is populated twice and similarly even other Access Risk ID.

I have a second question either :

When i extract the report , i see the Last Executed on is not filled for each row of the risk id. Only few rows are filled with Last Executed on. Is it normal does the Last executed on is not populated for every row.

.Please assist and help me with required information.

6ktoi.png (16.8 kB)
1dhod.png (26.1 kB)
Add comment
10|10000 characters needed characters exceeded

  • Former Member

    Hi Team,

    Request you to share any inuputs or your trouble shoot experience to resolve the issue.

    Thanks

    Chiranjeevi K

  • Get RSS Feed

6 Answers

  • Jan 17, 2017 at 05:07 PM

    Hello Chiranjeevi,

    For your Question 1, you are seeing risk id twice because it is a SOD Risk.

    For your question 2, Last Executed on is not available When the t-code is not used.

    For further clarity, go through this archived discussion.

    https://archive.sap.com/discussions/thread/3556455

    Hope this helps.

    Regards,

    Rakesh Ram M

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Jan 18, 2017 at 11:21 AM

    Hi ,

    Thank you for the information.

    Can you please elaborate - 'you are seeing risk id twice because it is a SOD Risk'. I see the Access Risk ID, Rule id, Action Group remain the same with out any other change and thus creating a duplicate entry. Is this correct?. Can you let me know how to avoid this.

    Regarding my Second question - 'Last Executed on is not available When the t-code is not used' - Additional to my observation i see the duplicate entry is occurring with the first row entry filled with Last Executed on and the remaining entries does not have the Last Executed on. If i avoid the blank Last executed on appear in the report, then report will be accurate.

    Please share your thoughts and thank you in advance.

    Add comment
    10|10000 characters needed characters exceeded

  • Mar 03, 2017 at 11:56 AM

    Hello, Chiranjeevi.

    The info about your Y331 risk is not duplicated. Maybe it's not the clearest way for showing this, but as a SoD risk it's composed by the a conflict between two or more actions/permissions, these two lines are there to show you that, in this case, it's a conflict between transactions AS01 and KAH2.

    About your secont question, 'Last Executed' info come from GRACACTUSAGE table, which is populated by the GRAC_ACTION_USAGE_SYNC job.

    Regards,

    Marcelo

    Add comment
    10|10000 characters needed characters exceeded

  • Mar 22, 2017 at 08:33 AM

    Hello Chiranjeevi,

    About your Y331 risk , because it is for two entries for different actions for the same risk id and this is like intra level.

    Regards,

    Babu

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Mar 23, 2017 at 12:09 PM

    Hi Team,

    i could not get the exact solution in resolving this issue.

    And i have identified and tried to post the correct screen shot which will help understand better :

    error-duplicate.png

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Sep 14, 2017 at 10:05 AM

    Hi Chiranjeevi,

    Please check if this KBA : 2499222 is helpful.

    https://launchpad.support.sap.com/#/notes/0002499222

    Regards,

    KJ

    Add comment
    10|10000 characters needed characters exceeded