Job and Roles in GRC

[Former Member]

Can anyone kindly help me with a JOB to role mapping for GRC box?

I mean if we define job as manager,role owner,controller,All GRC report access

What GRC roles these Jobs should have?

[Former Member · Accepted solution]

We implemented the note given by SAP to resolve the issue.

[nishad_showkath]

ok.

I tried in my system which is 10.1 and it works fine.

Can you please try running the sync jobs one by one.

1st Role Sync

2nd User Sync

3rd Action Usage Sync

Run once each of the jobs are completed.

In meantime, I will also search if there is any note for your SP.

With Regards,

Nishad Showkath

[Former Member]

thanks

[Former Member]

No luck sir

[nishad_showkath]

Hi Somit,

Incremental I meant, select few users like in range A* to D* users when u run the action sync.

Also run the sync job in background and show the job log.

N ishad

[Former Member]

I did,but no luck yet.

The job ran successfully.

[nishad_showkath]

Hi Somit,

Please let me know what is the current SP pack for GRC. In few SP, there are performance issues for Action usage sync job and few notes released by SAP for this.

Also try running the action usage first in full mode and then in incremental mode to see if the data is getting populate in the backend tables.

With Regards,

Nishad Showkath

[Former Member]

I don't think we have any mode separation ACTION sync.

We are at SP12.

Do you know the notes?

[krysta_osborn]

Hi Somik,

Please refer to the Security Guide for the version of GRC you are running. That will give you a breakdown of the SAP delivered roles and what access they contain as well as which users (manager, role owner, etc.) should get which role.

As a best practice, you should copy the SAP delivered roles to your own roles so that future upgrades don't affect them.

Regards,

Krysta

[Former Member]

Hi Krysta,

Thanks.

We have SAP standard roles copied.

Can you kindly tell me which guide you are referring to as we are into GRC10,SP12?

[former_member197694]

Hello Somik,

As mentioned by Krysta Osborn

you will get the complete details from SAP GRC10 Security guide

Refer Security Guide document from the below SAP Service market place link

https://websmp104.sap-ag.de/~form/sapnet?_SHORTKEY=01100035870000735769&_SCENARIO=011000358700000002...

Regards

Baithi

[Former Member]

Thanks Baithi.

I had assigned the user the standard SAP GRC report role,but the user is not able to see any report in ACTION USAGE report.

I had run the sync jobs as well, but no luck.

Can you kindly guide?

[former_member197694]

Hello Somik,

Not able to see means,

Screen is not opening or not getting any result when executing ACTION USAGE  report

To get the Action usage reports,we need to run synchronization jobs for action usages(I assume),

if not please run the jobs

if it is authorization issue

check authorization object GRAC_REP for user access

Regards

Baithi

[Former Member]

The user has SAP_GRAC_REPORTS role

The sync job ran,but no data displayed on the report