ERM - MASS ROLE UPLOAD

[yudittzruya]

Hi All,

when using the Mass role upload from SAP backend systems, i expect that all roles will be uploaded to the final stage in the role methodology inthe ERM and that they will be already generated.

After all, those roles already exists in the systems.

well, i see that this is not the case and i have to go through the different stages with every role.

is this indeed the system behavior or did we do somthing wrong ?

thanks

[Former Member]

If you are on GRC 5.3 SP11 or higher the role template come with additional column "Set Role Methodology? [ Alphanumeric(50) ]"

if you set it's value to "Yes", it make all the methodology steps as complete.

For SP11, when you generate the files on ABAP, you won't get this column, but you can add it by yourself in template as functionality is already coded.

Note: This will work for Parent and Single roles; if you have Child roles all stages will mark complete except Generate. you have to go to parent role and generate it's child.

we tried and it worked for us, you can try your luck

[Former Member]

Hi,

same situation here. After mass role import there´s all of the defined methodology steps to be done.

Is there a workaround for this?

Reg,

Ulrich

[Former Member]

Before uploading keep the methodology to contain only one step (last step). This will make sure that the roles are in right stage. After the upload is done, turn on the right methdology.

Alpesh

[yudittzruya]

Dear Alpesh,

thanks for the replay.

just a few questions:

1. even if we have one stage, assuming CUP integration is configured, will WF process be intiated ?

2. do we still have to do Mass Generation ? if yes, how can we avoid it ?

thanks

Yudit

[Former Member]

Here is my response:

1. even if we have one stage, assuming CUP integration is configured, will WF process be intiated ? Yes

2. do we still have to do Mass Generation ? if yes, how can we avoid it ? Create only one stage and make sure it is test stage. This stage is after generation so you won't need to generate the roles.

Alpesh

[Former Member]

Hi

We did as you suggested but configured the approval stage in the methodology since the role is already approved and is in ECC PROD.

Now we encountered a situation where we need to update the role in ERM as part of continuos maintainance (after upload) but we don't have the authorization option to enter and change it but only the "save" and "change history" push buttons.

We changed bach the methodology to the relevant one with all the stages but still we can't maintain the uploaded role. the change in the methodology did not effect the role already uploaded.

Do you have any suggestions regarding how we can fix this issue?

Thank you