cancel
Showing results for 
Search instead for 
Did you mean: 

Maximum number of roles allowed on GRC 5.3 CUP(AE) and ERM(RE)

Former Member
0 Kudos

Does anyone knows how many roles could be created/imported in GRC 5.3 CUP (Access Enforcer) and ERM (Role Expert).

Is there a limit of role creation?

Regards.

Omar Sáenz

Accepted Solutions (1)

Accepted Solutions (1)

Former Member
0 Kudos

Yes, Omar. I am sure you will see performance issues. Please follow the sizing guide for Access Control at https://websmp108.sap-ag.de/form/sapnet?_SHORTKEY=00200797470000071612& to size the server properly. You can open the guide directly at https://websmp108.sap-ag.de/sapdownload/011000358700000435122007E/GRCACSizing.pdf.

Make sure that nobody tries to search for user without providing any filtering or search criteria.

Regards,

Alpesh

Former Member
0 Kudos

Hello all,

I have a quite similar problem, however, my problem has already happened, because we have nearly 65.000 roles.

With the first 15.000 roles it takes about 1 second to analyze each role. But after that, it takes 3, 10 and so on seconds, so the system returns an error.

Some of the roles are not yet asigned to any user.

Does anybody know how we could improve the GRC analysis? Is there any way to avoid those roles that are not yet assigned? Some people in the Company doesn´t want to delete them athough not used.

Kind regards,

Javier

Former Member
0 Kudos

Thank you Alpesh,

Just one final question since I am doing sizing work. We have federeted Enterprise Portal (EP) with roles and groups that we need to import in AE and RE.

However, EP role objects use a long path definition because of the structure of the portal roles. I have reviewed the maximum characters that AE and RE support for ID and it seems that only 255 characters could be used.

EP roles admins are defining roles larger than 255. Is there a workaround, field resizing process or any other solution you can suggest?

Thanks.

Answers (3)

Answers (3)

Former Member
0 Kudos

Hi Omar,

That is correct. In CUP(AE), SAP has limited the size of role name to 255 characters. I have not found any work around yet. We should open CSS message with SAP and try to get this fixed.

Note: I am going to research on this and if I find a solution, I will let you know.

Regards,

Alpesh

Former Member
0 Kudos

Hi Omar,

As far as I know, there is no limitation on number of roles in CUP or ERM from SAP GRC side. I have seen customers having around 50,000 roles in CUP. Do you have any specific number?

Regards,

Alpesh

Former Member
0 Kudos

We are calculating that we will use more than 15,000 roles, but it seems that you have configured even greater number of roles. I will take that experience as a reference, however, I would really like to know if you have any performance or user management issue because of the number of roles you are administrating.

Regards.

Former Member
0 Kudos

Hello Omar,

Is there any particular range or number of roles that you have in mind, for which specifically you need to know this? In my opinion, it would solely depend on your memory config , how many roles you can ask the application to handle.

Regards,

Hersh.