on 01-09-2009 2:32 AM
Does anyone knows how many roles could be created/imported in GRC 5.3 CUP (Access Enforcer) and ERM (Role Expert).
Is there a limit of role creation?
Regards.
Omar Sáenz
Yes, Omar. I am sure you will see performance issues. Please follow the sizing guide for Access Control at https://websmp108.sap-ag.de/form/sapnet?_SHORTKEY=00200797470000071612& to size the server properly. You can open the guide directly at https://websmp108.sap-ag.de/sapdownload/011000358700000435122007E/GRCACSizing.pdf.
Make sure that nobody tries to search for user without providing any filtering or search criteria.
Regards,
Alpesh
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hello all,
I have a quite similar problem, however, my problem has already happened, because we have nearly 65.000 roles.
With the first 15.000 roles it takes about 1 second to analyze each role. But after that, it takes 3, 10 and so on seconds, so the system returns an error.
Some of the roles are not yet asigned to any user.
Does anybody know how we could improve the GRC analysis? Is there any way to avoid those roles that are not yet assigned? Some people in the Company doesn´t want to delete them athough not used.
Kind regards,
Javier
Thank you Alpesh,
Just one final question since I am doing sizing work. We have federeted Enterprise Portal (EP) with roles and groups that we need to import in AE and RE.
However, EP role objects use a long path definition because of the structure of the portal roles. I have reviewed the maximum characters that AE and RE support for ID and it seems that only 255 characters could be used.
EP roles admins are defining roles larger than 255. Is there a workaround, field resizing process or any other solution you can suggest?
Thanks.
Hi Omar,
That is correct. In CUP(AE), SAP has limited the size of role name to 255 characters. I have not found any work around yet. We should open CSS message with SAP and try to get this fixed.
Note: I am going to research on this and if I find a solution, I will let you know.
Regards,
Alpesh
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hi Omar,
As far as I know, there is no limitation on number of roles in CUP or ERM from SAP GRC side. I have seen customers having around 50,000 roles in CUP. Do you have any specific number?
Regards,
Alpesh
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
We are calculating that we will use more than 15,000 roles, but it seems that you have configured even greater number of roles. I will take that experience as a reference, however, I would really like to know if you have any performance or user management issue because of the number of roles you are administrating.
Regards.
Hello Omar,
Is there any particular range or number of roles that you have in mind, for which specifically you need to know this? In my opinion, it would solely depend on your memory config , how many roles you can ask the application to handle.
Regards,
Hersh.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.