Role Level SOD Reports Showing Inactive Roles

[Former Member]

Hello -

We are running SOD reports on GRC 10 and have noticed that roles deleted from SAP and set to development in BRM are still showing on the SOD role level reports.  Can someone please advise what steps we need to take in order to remove these types of roles from the SOD reports?

Thank you for your time

[Former Member]

Hello Denise,

As you have not mentioned your SP level, here you can find some fixes regarding inactive objects appearing in SOD analysis:

- 2036645

- 1947181

- 1867794

Best Regards,

Fernando

[Former Member]

I have not seen any feedback on the additional information I provided "We run GRAC_REPOSITORY_OBJECT_SYNC in full sync mode for Profile, Role & User on a daily basis for each connector."

Is there a different sync job that I should be running to remove the deleted/inactive roles from the SOD reports?

Thank you!

[Former Member]

Hi Denise,

you ran the correct job. Make sure, roles are removed from ARA also, through Role Management. then verify the same in tables GRACROLE and GRACRLCONN. Could you say, how are your SOD reports running. are they Adhoc or you are downloading from background jobs or from Reports and Analytics tab

Report and Analyitcs tab picks up data stored by job GRAC_BATCH_RISK_ANALYSIS. So, check on which date this job last ran. if the date is before the date the roles were deleted, then this job has stored RA results for those deleted roles.

Regards

Plaban

[Former Member]

Hi Denise,

could you run a Full rep. sync job, for role and profile.Ad hoc RA, will consider Role at real time, unlike SOD reports, of Report and Analytics tab. So, check the date, on which your last Batch RA run. it might be that, it had run, before roles were deleted, and therefore it still shows the old roles.

regards

Plaban

[Former Member]

Hi Plaban!

Are you referring to the GRAC_REPOSITORY_OBJECT_SYNC program or a different program?  We run GRAC_REPOSITORY_OBJECT_SYNC in full sync mode for Profile, Role & User on a daily basis for each connector.  The roles which were noted on the reports for this quarter have been deleted for a very long time.

I look forward to hearing back from you

Thank you!