Skip to Content
avatar image
Arun Raj

GRC 10.1 - Authorization restriction for customized transaction added as NWBC link

Nov 09, 2018 at 02:55 PM | 102 Views | Last edit Nov 09, 2018 at 02:57 PM 2 rev.

Hello All,

We have created a transaction added to the NWBC launchpad. We have got a requirement to restrict the link to a specific audience.

Is it possible to restrict the custom transaction link using authorization objects??

Regards,

Arun

SAP Access Control
UI SAP Business Client (NWBC) | sap grc | sap grc access control | sap grc 10.1
Add comment
10|10000 characters needed characters exceeded

  • Get RSS Feed

5 Answers

  • Best Answer
    avatar image
    Arun Raj
    Nov 12, 2018 at 04:05 PM

    Hello All,

    I was able to achieve the requirement by performing the below steps.

    1. Creating a new Menu Item Authorization in SM34 - GRFNVC_ITEMAUTH cluster and along with it added the authorization object and value.

    2. In LPD_CUST, against the new custom transaction application we have added additional Information "MENUITEMID = xxxx" which is under the "Advanced Parameters"

    Regards,

    Arun

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Colleen Hebbert
    Nov 28, 2018 at 01:15 AM

    Hi Arun

    GRFNVC_ITEMAUTH(Standard), GRFNVC_ITEMAUTHC(Custom)

    Generally - standard is delivered content by SAP whilst the custom version is for customers to extend/tweak the values

    If you run ST05 trace with and customer values are maintained you'll see they may get checked before or after the standard setting

    You would maintain custom so SAP doesn't remove your entries if they ever deploy new content to the standard table. More than likely the IMG pathway launches the custom.

    Add comment
    10|10000 characters needed characters exceeded

    • Arun Raj
      Nov 28, 2018 at 06:18 AM

      Hi Colleen,

      Thank you for your response,

      I tried maintaining the entry in GRFNVC_ITEMAUTHC(Custom), however I don't have an option to provide the authorization object and values to be checked in this cluster.

      Is there any other option to add the auth check for the custom menu item entries?

      Regards,

      Arun

  • avatar image
    Srinivas Kolli
    Nov 10, 2018 at 01:13 AM

    Yes this is possible, You would have to setup Work centers with the help of your Development team, and each work center can have multiple Links. Resctrictions can be setup on workcenters.

    Add comment
    10|10000 characters needed characters exceeded

    • Arun Raj
      Nov 12, 2018 at 10:03 AM

      Hi Srinivas,

      Thank you for your reply.

      Apart from having restrictions at workcenter level, can we have the restriction at the custom transaction link alone ?

      This way we can include the link within existing workcenters?

      Regards,

      Arun

  • avatar image
    Jayakanth Ramakanthan
    Nov 12, 2018 at 10:18 AM

    Hi Arun,

    You can create a custom NWBC launch screens for every set of users. The below link explains in detail on how to create custom NWBC launch screens.

    https://blogs.sap.com/2017/12/06/create-custom-nwbc-launch-screens-for-grc-10.1-sp-16/

    Regards,

    Jay

    Add comment
    10|10000 characters needed characters exceeded

    • Arun Raj
      Nov 12, 2018 at 01:49 PM

      Hi Jayakanth,

      Thank you for your reply.

      We already have multiple launchpad according to user criteria's. The current requirement is to specifically restrict the link to certain set of people so is it possible to have a restriction at the link level for the new custom entries. Is it possible?

      Regards,

      Arun

  • avatar image
    Colleen Hebbert
    Nov 09, 2018 at 11:41 PM

    Did you add the custom transaction to an existing Launchpad via LPD_CUST? How did you go about making it visible in Business Client?

    Add comment
    10|10000 characters needed characters exceeded

    • Arun Raj
      Nov 27, 2018 at 07:51 AM

      Hi Collen,

      I have one more query regarding the same topic, when we have two clusters for adding the menu item ID - GRFNVC_ITEMAUTH(Standard), GRFNVC_ITEMAUTHC(Custom). If we add to the custom one we don't have an option to map the authorization object against the menu item but we do have the same in standard one.

      So is it recommended to maintain the menu item id in the standard itself?

      Regards,

      Arun