Skip to Content

GRC AC 10.1: ARA - no rules were selected

Hello Experts,

I am facing once issue since 1 week I tried lot but no luck Could you please help on this ASAP.

We are configured the system GRC AC 10.1 according the configuration guides.

After done the Post installation configure We try to execute the risk analysis both in on line and offline (User Level risk and Role level and profiles level after ran the risk analysis getting below message.."no rules were selected"

Components SAP GRC AC 10.1

GRCFND_A V1100 0010 SAPK-V1110INGRCFNDA

GRCPINW V1100_731 0010 SAPK-11510INGRCPINW

Configuration steps

  1. 1.Default configuration parameters (1023,1024, 1025, 1026)
  2. 2.Adding connector to AUTH ,PROV, SUPMG,ROLMG scenario
  3. 3.We are using the SAP standard as delivered in the BC Sets. After activating them, we did generate them.
  4. 4.Assigning connectors to the logical groups
  5. 5.Generating Rules(created functions and RISK id and added function to risk id and generate the rules)
  6. 6.Running Jobs
  7. 7.GRAC_PFCG_AUTHORIZATION_SYNC
  8. 8.GRAC_REPOSITORY_OBJECT_SYNC
  9. This tables does not contain any entries found:

    GRACUSERACTVL

    GRACUSERPRMVL

    GRACUSERCONN

    GRACRLCONN

    GRACACTRULE

    Jobs executed:

    GRAC_PFCG_AUTHORIZATION_SYNC

    GRAC_REPOSITORY_OBJECT_SYNC

    GRAC_ACTION_USAGE_SYNC

    GRAC_ROLE_USAGE_SYNC

    Could you please help on this ASAP its very urgent your help must appreciate. If required more details let me know I will provide you.

    Kind Regards,

    Venkat

    capture.png (23.7 kB)
    capture1.png (52.1 kB)
    Add comment
    10|10000 characters needed characters exceeded

    • Get RSS Feed

    3 Answers

    • Mar 28 at 06:55 AM

      Hello Venkat,

      As the tables are empty, the data is not updated from plugin system to GRC. Can you please check logs for the jobs you executed it should give idea about number of records updated OR the error due to which no records are updated?

      In case of error, execute jobs again and check if GRACUSERCONN and GRACRLCONN getting updated.

      Kind regards,

      Yashasvi

      Add comment
      10|10000 characters needed characters exceeded

      • Hello Yashasvi,

        Thanks for your help..

        The jobs are executed successfully .

        Jobs executed:

        GRAC_PFCG_AUTHORIZATION_SYNC

        GRAC_REPOSITORY_OBJECT_SYNC

        GRAC_ACTION_USAGE_SYNC

        GRAC_ROLE_USAGE_SYNC

        Note: When we create new role or new user created in backend system after execute the above Jobs the newly created users and roles able to see in GRC system.(NWBC -- When we ran the risk analysis need select user/role here we can see) - when we ran the risk analysis at user level and role level giving message "no rules were selected"

        ---

        In case of error, execute jobs again and check if GRACUSERCONN and GRACRLCONN getting updated.

        I checked in above tables in GRC system its doesn't show anything.

        ---

        Note: We tried to run the risk analysis in same GRC system also giving same problem --(Here we created connector and assigned connector group etc.. all required configurations assigned to connector)..

        Kindly help me ASAP its very urgent.

        Regards,

        Venkat

    • Mar 28 at 08:46 AM

      Hello Venkat,

      * Check again if the connectors are added to correct logical groups (if you are using standard groups). In case you created new groups, you need to upload rules for these as well. As BC sets will create rules for standard logical groups (e.g SAP_R3_LG).

      * tables are not yet filled, means thereis issue with Sync jobs. ceck spool of repository object sync job. (I hope it was executed in full sync mode).

      Kind regards,

      Yashasvi

      Add comment
      10|10000 characters needed characters exceeded

    • Mar 28 at 06:33 PM


      Hi Yashasvi ,

      Still facing the same issue, Jobs are run with full sync mode and download and upload rule set .and GRACUSERCONN and GRACRLCONN tables not getting updated till now.

      We are using standard logical groups (e.g SAP_R3_LG) and assigned connector to a logical group also.

      Kindly provide me other solution

      Regards,

      Venkat

      Add comment
      10|10000 characters needed characters exceeded