Error generating role XXX for system XXX: Unable to interpret * as a number

[Former Member]

Hi team

Thanks for your continuous support.

While i schedule a background job in ERM 5.3 for Role Generation;I am getting this error.

*Error generating role XXX for system XXX: Unable to interpret * as a number*

Pleae suggest.

Best regards,

Charukesh

[hkaur · Accepted solution]

Hi Charu,

There is no need to create all roles through ERM again. You can sync all the roles to RAR, peform risk analysis for roles on them and mitigate them if required. The new roles can surely be generated through ERM from now on.

Hope it helps.

Regards

Harleen

[crg_grc · Accepted solution]

Hi Team

I have implemented the Master Derive Relationshilp for Some similar Roles across the Geos.

I am able to add authorization objects manually into derieved Roles ( as well as Master Roles) in backend by using PFCG.

But there is no such option in ERM for derieve roles.(but only for master Roles).For derieve Roles i can only enable/ disable the existing values.

Any suggestions.

Best regards,

Charukesh

[hkaur]

Hello Charu,

Please refer the following thread :

https://forums.sdn.sap.com/click.jspa?searchID=-1&messageID=7239800

It may help answering your queries on derived roles.

Regards

Harleen

SAP GRC RIG

[hkaur]

Hi Charu,

Please assign the necessary RFC authorizations to the user to be able to create the role in backend. You will find all the required authorizations to be assigned in the Security guide of Access Controls.

Once you assign the necessary authorizations to the user, you should be able to generate roles.

Regards

Harleen

[crg_grc]

Hi Harleen

Thanks for your reply.

I am able to generate the Roles now.

The Virsa Roles for ERM in Backend was attached to the user.

Hi Team

1]There are many more Virsa Roles in the SAP ECC6.

Should i attach all of them to the user?

Is there any Best practice to manage this virsa Roles.

2]I understand the ERM functinality for Risk Analysis.But i am not comfortable with PFCG and Master Derieve Roles.I want to optimise our investments and want to utilise all the new functionalities of V5.3.

Can anyone share briefly how they have used this concept to add value?

Best regards,

Charukesh

[Former Member]

Hi Charu,

Please find below response to your concerns.

1]There are many more Virsa Roles in the SAP ECC6.

Should i attach all of them to the user?

Is there any Best practice to manage this virsa Roles.

You can find explanation about each and every role in the Security guide of AC 5.3. It is available on Service marketplace.

2]I understand the ERM functinality for Risk Analysis.But i am not comfortable with PFCG and Master Derieve Roles.I want to optimise our investments and want to utilise all the new functionalities of V5.3.

Do you understand concept of PFCG and Master-derive roles in general. If not then you should take ADM940 course. As all AC 5.3 modules are for compliance and SOX purpose so you need to know SAP security.

Regards,

Alpesh

[crg_grc]

Thanks Alpesh.

One more query.

I have already imported all the Roles and have performed Risk Analysis.

Now should i use ERM for getting clean or staying clean?

Do i need to create each role through ERM once again or the NEW roles created henceforth should be created using ERM.

Please suggest.

Best regards,

Charukesh