GRC dashboard is not showing drill down data when clicking past months Graphs

[gaurav_234]

Hello Gurus,
Just wanted to check if anyone has got a way-out to get data when we click on past months graph in GRC Access Management Dashboard ->User Analysis. I believe that the drill down base table for user analysis is GRACMGRISKD which doesn't store data month wise i.e. for a user it stores only the updated risks associated with user not the past month data. But want to double check if some one has any idea by which we can compare what risks users have in past with current month. (Not count but the actual record e.g. a user has A,B, C risks in JUL17 but in SEP17 the user has X,Y,A,B risks).
Apologies if I have confused you 🙂

[alessandr0]

Dear Gaurav,

I recommend to check the "Violations Comparison" report that stores similar data. Search for User analysis type and drill down into the old months. You will be able to see the risks and its corresponding number of violations. In the number of violations you will then see the users. It's an approach from the other end, but at the end of the day you will get the data you are looking for.

Also, since I am not sure if the behavior you are facing is related to an issue, check the following SAP note: https://launchpad.support.sap.com/#/notes/2461018

In addition, I suggest to open an OSS message to see what SAP has to say.

Hope that helps.

Regards, Alessandro

[gaurav_234]

Hi Alessandro,

Thanks for your reply!

The behavior of this report is also same as "User Analysis" i.e. we get difference in count as it fetches data from table "GRACUSERMGVCOUNT" which stores data month wise (depends on Batch Risk analysis job). However, drill down only shows the updated users list not what was in past. E.g. I had one user who had one risk last month but for this month user's access has been changed which results risk removal.

In "Violation Comparison" report, I clicked on 'no. of violation' for that particular risk for this month and didn't find the user which is good.

th,I selected last month (September) clicked on graph and than clicked on 'No. of Violation' again I din't find the user which is incorrect because I know that the user was having that risk last month.

This report is also using GRACMGRISKD table to get user's information and as said this table only stores the updated data.

Please let me know if I have missed something and came on some wrong conclusion :P.

Regards,

Guarav