T-code Not assigned to Role-But popping up in Risk analysis Report.

[ganesh_srini]

Hi Experts

I have a scenario where there are 2 T-codes not available in a role.

But in a real time risk analysis,those T-codes are popping up against the same role as risk violation.

I have already checked in PFCG,AGR_1251 and SUIM-->Executable transactions.

Those T-codes are not assigned to this role.

Is there a problem with GRC or with SAP Security roles?

Regards

Ganesh

[former_member820581]

Hi Ganesh,

Were you able to find a solution for this issue. If so, please comment.

I also face the same error where tcodes like SM30 and SM31 that are not added in the role are getting picked in risk analysis report.

[former_member197694]

Hello,

Please refer the below Note

2176659 - Tcode not in role still the risk violation with respect to that tcode is being displayed

Regards

Baithi

[ganesh_srini]

Hi Baithi

Thanks for the suggestion.

But in my case,the auth object is s_tcode and this Tcode is not available with any other roles of the users. So,merging of objects will not work in this case I suppose.

Let me know if you have any other suggestions.

Regards

Ganesh

[former_member185447]

Hello Ganesh,

Please try to Schedule the authorization sync job for the specific connector and re-run risk analysis

Follow the below steps to schedule this job:-

GRC Box ==> Tcode 'SPRO' / IMG ==> Governance Risk and Compliance ==> Access Control ==> Synchronization Jobs ==> 'Authorization Synch'.

Regards,

Rakesh Ram M

[ganesh_srini]

Hello Rakesh

Thanks for your quick suggestions.

I have already run the job in GRC and the end result after that remains the same.

Regards

Ganesh

[alessandr0]

Ganesh,

please share some screenshots so that we can see the Detail analysis screen as well as AGR_1251.

Regards,

Alessandro

[ganesh_srini]

Hi Alex

This role consists of more than 1000 T-codes,I believe sharing screenshots is not possible.

Regards

Ganesh

[alessandr0]

Difficult to help if we do not see anything or have more details (you also missed to provide the minimum information as Gretchen mentioned).. and I'm tired of guessing.

Cheers,

Alessandro

[Former Member]

Ganesh,

Please add the missing information, per the Minimum Information required for discussions in this space. We all have day jobs here; these minimum requirements were set so that members here have enough detailed information to help you.

Thanks!

Gretchen Lindquist

Space Moderator