Standard AC Roles in SAP GRC AC 5.3

[Former Member]

Hello,

Can anyone list the STANDARD AC ROLES in SAP GRC AC 5.3 Suite for

1- RAR,

2- SPM,

3- CUP,

4- RT,

5- ERM,

6- GRC PC 2.5

7- GTS,

8- GRC Repository.

I know that the Standard AC Roles that are delivered for CUP are

1- AEADMIN,

2- AESecurity &

3-AEApprover.

Each role comes with different actions in them.

I need similar type of standard AC roles for the above listed modules.

Thanks!!!

[hkaur · Accepted solution]

Hi Abdul,

Access Control 5.3 is not integrated in portal by default; you will have to do the integration by creating iViews in Portal for AC 5.3(as mentioned by Varun). Then you can assign the roles corresponding to the users of AC.

I am not able to access this help page. Can you please paste the content here?

Harleen

SAP GRC RIG

[Former Member · Accepted solution]

Hello Abdul,

SAP GRC AC 5.3 is not integrated with SAP Portal by default.

If you would like to integrate AC with Portal, for eg. Risk Management (RM), in your case, then it is possible to integrate Risk Management (RM) with SAP Portal, provided the following steps, seen below, are followed.

1- The Netweaver Portal role called com.sap.grc.rm.Role_All, must be accessed and activated

2- The above role enables you to configure the portal navigation structures and menu tabs. This role should be assigned to all Risk Management users directly.

3- The above role is assigned via a group in the portal.

4- The Superuser must ensure that the portal interface can be accessed with the correct level of authorization by all other users.

If the above 4 steps are followed, then subsequently the user can access the Risk Management work centers in the SAP Portal.

I hope that answers to your query.

Thanks,

Mohi

[Former Member]

Hi Abdul,

Following are the standard roles for AC applications.

1. RAR: VIRSA_CC_ADMINISTRATOR, VIRSA_CC_REPORT, VIRSA_CC_SECURITY_ADMIN, VIRSA_CC_BUSINESS_OWNER

2. CUP: AEADMIN, AESecurity, AEApprover

3. SPM: There is no predefined role delivered in Java side. You need to create your own role by seleting all actions which have FF value.

4. ERM: READMIN, REBusinessUser, RERoleDesigner, RESecurity, RESuperUser, REConfigurator

Apart from the in SAP back-end system you can find all the roles in PFCG and it starts from /VIRSA/*.

Regards,

Shweta

[Former Member]

Hello,

Can anyone provide me the list of portal roles for the following

GRC AC 5.3 Suite

RAR module

SUP module

CUP module

ERM module.

I know that the RT (Risk Management) module in GRC has the following portal role , which is called com.sap.grc.rm.Role_All. I need similar kind of Netweaver Portal roles for entire GRC AC Suite and the information, on how to query them in portal.

Thanks !!!

[Former Member]

Hi Abdul,

We do not have any pre-delivered portal roles for AC applications. Only role which are pre-delivered are already provided in above replies.

Regards,

Shweta

[Former Member]

Hello Abdul,

There are no portal roles for AC5.3 as such. There is portal role for RM which you have already found. To access AC5.3 applications from portal you would have to create IViews etc.

Regards,

Varun

[Former Member]

Hello Varun,

Below are answers to your statements.

1- There are no portal roles for AC5.3 as such. There is portal role for RM which you have already found.

**ANSWER 1: *There are portal roles for AC 5.3. Kindly see the link http://help.sap.com/saphelp_grcpc30/helpdata/en/27/c67fe32e684e4c85125645dc5918ee/frameset.htm.***

*The role I found in from the above link.*

2- To access AC5.3 applications from portal you would have to create IViews etc.

ANSWER 2 Since SAP provides the predelivered roles, as seen in HELP.SAP.COM in above link, we need not create iViews. The custom IViews are required for custom roles, not the standard roles**

Thanks!!!

Edited by: abdul haleem on Jul 21, 2009 9:44 AM

[Former Member]

Hello Abdul,

The link is taking me to information for Risk Management & Process Control applications help. It is not pointing towards AC5.3 documentation. Can you kindly let me know the exact page or section which lists the roles for AC5.3?

Regards,

Varun