GRC AC 10.1: ARA - no rules were selected

[svreddy86]

Hello Experts,

I am facing once issue since 1 week I tried lot but no luck Could you please help on this ASAP.

We are configured the system GRC AC 10.1 according the configuration guides.

After done the Post installation configure We try to execute the risk analysis both in on line and offline (User Level risk and Role level and profiles level after ran the risk analysis getting below message.."no rules were selected"

Components SAP GRC AC 10.1

GRCFND_A V1100 0010 SAPK-V1110INGRCFNDA

GRCPINW V1100_731 0010 SAPK-11510INGRCPINW

Configuration steps

1.Default configuration parameters (1023,1024, 1025, 1026)

2.Adding connector to AUTH ,PROV, SUPMG,ROLMG scenario

3.We are using the SAP standard as delivered in the BC Sets. After activating them, we did generate them.

4.Assigning connectors to the logical groups

5.Generating Rules(created functions and RISK id and added function to risk id and generate the rules)

6.Running Jobs

7.GRAC_PFCG_AUTHORIZATION_SYNC

8.GRAC_REPOSITORY_OBJECT_SYNC

This tables does not contain any entries found:

GRACUSERACTVL

GRACUSERPRMVL

GRACUSERCONN

GRACRLCONN

GRACACTRULE

Jobs executed:

GRAC_PFCG_AUTHORIZATION_SYNC

GRAC_REPOSITORY_OBJECT_SYNC

GRAC_ACTION_USAGE_SYNC

GRAC_ROLE_USAGE_SYNC

Could you please help on this ASAP its very urgent your help must appreciate. If required more details let me know I will provide you.

Kind Regards,

Venkat

[svreddy86]

Hi Yashasvi ,

Still facing the same issue, Jobs are run with full sync mode and download and upload rule set .and GRACUSERCONN and GRACRLCONN tables not getting updated till now.

We are using standard logical groups (e.g SAP_R3_LG) and assigned connector to a logical group also.

Kindly provide me other solution

Regards,

Venkat

[former_member226273]

Hello Venkat,

* Check again if the connectors are added to correct logical groups (if you are using standard groups). In case you created new groups, you need to upload rules for these as well. As BC sets will create rules for standard logical groups (e.g SAP_R3_LG).

* tables are not yet filled, means thereis issue with Sync jobs. ceck spool of repository object sync job. (I hope it was executed in full sync mode).

Kind regards,

Yashasvi

[former_member226273]

Hello Venkat,

As the tables are empty, the data is not updated from plugin system to GRC. Can you please check logs for the jobs you executed it should give idea about number of records updated OR the error due to which no records are updated?

In case of error, execute jobs again and check if GRACUSERCONN and GRACRLCONN getting updated.

Kind regards,

Yashasvi

[svreddy86]

Hello Yashasvi,

Thanks for your help..

The jobs are executed successfully .

Jobs executed:

GRAC_PFCG_AUTHORIZATION_SYNC

GRAC_REPOSITORY_OBJECT_SYNC

GRAC_ACTION_USAGE_SYNC

GRAC_ROLE_USAGE_SYNC

Note: When we create new role or new user created in backend system after execute the above Jobs the newly created users and roles able to see in GRC system.(NWBC -- When we ran the risk analysis need select user/role here we can see) - when we ran the risk analysis at user level and role level giving message "no rules were selected"

---

In case of error, execute jobs again and check if GRACUSERCONN and GRACRLCONN getting updated.

I checked in above tables in GRC system its doesn't show anything.

---

Note: We tried to run the risk analysis in same GRC system also giving same problem --(Here we created connector and assigned connector group etc.. all required configurations assigned to connector)..

Kindly help me ASAP its very urgent.

Regards,

Venkat