UAR - User Access Review process question

[Rich_Turnquist]

Our auditors want us to have every user in our system to be reviewed by their manager so I am testing this process. We plan to use UAR to do this with the "manager" option. Since we use composite roles (which begin with Y), I have created a load data task that "excludes" our single roles (which begin with Z) so that I only get the composite roles when I run this.

Now, to get all employee's processed, I created a "Role usage syncronization" file with every user and every composite role that they have. I have uploaded this file successfully in ERM.

The next step should be to run the UAR load, correct? When I do this I am not getting any output. The load job keeps giving me the following error after running for about 15 minutes:

Job aborted: CONNECT TO MESSAGE SERVER HOST FAILED<br>CONNECT_PM TYPE=B MSHOST=SAPSANDBOX GROUP=WCMC_COR R3NAME=COR MSSERV=SAPMSCOR PCS=1<br><br>LOCATION CPIC (TCP/IP) ON LOCAL HOST WITH UNICODE<br>ERROR SERVICE '0' IN USE<br><br>TIME TUE JAN 26 11:44:46 2010<br>RELEASE

All of my connections work. I have two questions. (1) Has anyone seen this error before? (2) Does the process I am planning to use sound like it should work? I'm wondering if I am missing anything.

Thanks,

Peggy

[Rich_Turnquist · Accepted solution]

Hello GRC community,

I was able to get past the JCo error, but now I am getting the following error during the load job:

Tue Jan 26 15:32:49 EST 2010 Job ID: 46 created

Tue Jan 26 15:32:49 EST 2010 Job Running

Tue Jan 26 15:33:03 EST 2010 Extraction from ERM started

Tue Jan 26 15:33:04 EST 2010 Systems :COR Total Number of Users :967 Total Number of Role Assignments :9550

Tue Jan 26 15:33:04 EST 2010 Extraction from ERM completed

Tue Jan 26 15:33:04 EST 2010 Request generation started

Tue Jan 26 15:33:04 EST 2010 Exception in Saving Request:EXCEPTION IN INSERTING THE VALUES

Tue Jan 26 15:33:04 EST 2010 Exception in Saving Request:EXCEPTION IN INSERTING THE VALUES

Tue Jan 26 15:33:04 EST 2010 Exception in Saving Request:EXCEPTION IN INSERTING THE VALUES

Tue Jan 26 15:33:04 EST 2010 Exception in Saving Request:EXCEPTION IN INSERTING THE VALUES

Tue Jan 26 15:33:04 EST 2010 Exception in Saving Request:EXCEPTION IN INSERTING THE VALUES

Tue Jan 26 15:33:04 EST 2010 Exception in Saving Request:EXCEPTION IN INSERTING THE VALUES

Tue Jan 26 15:33:05 EST 2010 Exception in Saving Request:EXCEPTION IN INSERTING THE VALUES

Tue Jan 26 15:33:06 EST 2010 Exception in Saving Request:EXCEPTION IN INSERTING THE VALUES

Tue Jan 26 15:33:06 EST 2010 Exception in Saving Request:EXCEPTION IN INSERTING THE VALUES

(19 pages)

The system log shows:

2010-01-26 15:33:36,926 [Thread-6651] ERROR An Exception is thrown while executing stmt*******

com.sap.sql.DuplicateKeyException: ORA-00001: unique constraint (SAPSR3DB.SYS_C00272822) violated

at com.sap.sql.jdbc.common.CommonPreparedStatement.executeUpdate(CommonPreparedStatement.java:259)

at com.sap.sql.sqlj.runtime.profile.ref.RTStatementJDBCPrepared.executeUpdate(RTStatementJDBCPrepared.java:267)

at sqlj.runtime.ExecutionContext$StatementFrame.executeUpdate(ExecutionContext.java:1124)

at sqlj.runtime.ExecutionContext.executeUpdate(ExecutionContext.java:718)

at com.virsa.ae.dao.sqlj.RequestDataUserReviewRoleDAO.insert(RequestDataUserReviewRoleDAO.sqlj:139)

at com.virsa.ae.accessrequests.bo.UserReviewRequestBO.saveUserReviewRoleDetails(UserReviewRequestBO.java:661)

at com.virsa.ae.accessrequests.bo.UserReviewRequestBO.saveNewRequest(UserReviewRequestBO.java:1030)

at com.virsa.ae.uarreview.UARReviewCreateRequestHandler.createRequest(UARReviewCreateRequestHandler.java:304)

at com.virsa.ae.uarreview.UARReviewCreateRequestHandler.createRequest(UARReviewCreateRequestHandler.java:269)

at com.virsa.ae.uarreview.UARReviewCreateRequestHandler.execute(UARReviewCreateRequestHandler.java:95)

at com.virsa.ae.uarreview.UARReviewBGTask.execute(UARReviewBGTask.java:91)

at com.virsa.ae.backgroundjobs.BackgroundTask.run(BackgroundTask.java:56)

at java.util.TimerThread.mainLoop(Timer.java:432)

at java.util.TimerThread.run(Timer.java:382)

2010-01-26 15:33:36,926 [Thread-6651] ERROR Exception in saving the request

com.virsa.ae.dao.DAOException: Exception in inserting the values

at com.virsa.ae.dao.sqlj.RequestDataUserReviewRoleDAO.insert(RequestDataUserReviewRoleDAO.sqlj:168)

at com.virsa.ae.accessrequests.bo.UserReviewRequestBO.saveUserReviewRoleDetails(UserReviewRequestBO.java:661)

at com.virsa.ae.accessrequests.bo.UserReviewRequestBO.saveNewRequest(UserReviewRequestBO.java:1030)

at com.virsa.ae.uarreview.UARReviewCreateRequestHandler.createRequest(UARReviewCreateRequestHandler.java:304)

at com.virsa.ae.uarreview.UARReviewCreateRequestHandler.createRequest(UARReviewCreateRequestHandler.java:269)

at com.virsa.ae.uarreview.UARReviewCreateRequestHandler.execute(UARReviewCreateRequestHandler.java:95)

at com.virsa.ae.uarreview.UARReviewBGTask.execute(UARReviewBGTask.java:91)

at com.virsa.ae.backgroundjobs.BackgroundTask.run(BackgroundTask.java:56)

at java.util.TimerThread.mainLoop(Timer.java:432)

at java.util.TimerThread.run(Timer.java:382)

Caused by: com.sap.sql.DuplicateKeyException: ORA-00001: unique constraint (SAPSR3DB.SYS_C00272822) violated

at com.sap.sql.jdbc.common.CommonPreparedStatement.executeUpdate(CommonPreparedStatement.java:259)

at com.sap.sql.sqlj.runtime.profile.ref.RTStatementJDBCPrepared.executeUpdate(RTStatementJDBCPrepared.java:267)

at sqlj.runtime.ExecutionContext$StatementFrame.executeUpdate(ExecutionContext.java:1124)

at sqlj.runtime.ExecutionContext.executeUpdate(ExecutionContext.java:718)

at com.virsa.ae.dao.sqlj.RequestDataUserReviewRoleDAO.insert(RequestDataUserReviewRoleDAO.sqlj:139)

... 9 more

[former_member366047 · Accepted solution]

Peggy,

Looks like the application is trying to insert a duplicate record into the database. Please open a CSS message as Support will have to look at the table(s).

Thanks!

Ankur

SAP GRC RIG

[Rich_Turnquist]

Thank you Ankur for the UAR document. My current problem is that I cannot get any data out of the first step (Execute UAR load data job). One of the reasons I created an exclude job was so I could process just one system. (We have 3 SAP systems and I only want our SAPHR system). But....with that aside, I went back to the original load job "UAR Review Load Data" and ran it. I'm still getting an error:

2010-01-26 14:29:56,167 [Thread-2459] ERROR Error in running UAR Review BGJob

com.sap.mw.jco.JCO$Exception: (102) RFC_ERROR_COMMUNICATION: Connect to message server host failed

Connect_PM TYPE=B MSHOST=sapsandbox3 GROUP=WCMC_WBS R3NAME=WBS MSSERV=sapmsWBS PCS=1

LOCATION CPIC (TCP/IP) on local host with Unicode

ERROR service '0' in use

TIME Tue Jan 26 14:29:56 2010

RELEASE 701

COMPONENT NI (network interface)

VERSION 38

RC -4

MODULE nixxi.cpp

LINE 2835

DETAIL NiICheckPendConnection

SYSTEM CALL select, getsockopt

ERRNO 10048

ERRNO TEXT WSAEADDRINUSE: Address already in use

COUNTER 1

at com.sap.mw.jco.MiddlewareJRfc.generateJCoException(MiddlewareJRfc.java:518)

at com.sap.mw.jco.MiddlewareJRfc$Client.connect(MiddlewareJRfc.java:1086)

at com.sap.mw.jco.JCO$Client.connect(JCO.java:3256)

at com.sap.mw.jco.JCO$Pool.getClient(JCO.java:5417)

at com.sap.mw.jco.JCO$PoolManager.getClient(JCO.java:6186)

at com.sap.mw.jco.JCO$PoolManager.getClient(JCO.java:6136)

at com.sap.mw.jco.JCO.getClient(JCO.java:8804)

at com.sap.tc.webdynpro.serverimpl.core.sl.AbstractJCOClientConnection.getClient(AbstractJCOClientConnection.java:445)

at com.virsa.ae.service.conn.SAPConnectorUtils.getClientFromSLD(SAPConnectorUtils.java:285)

at com.virsa.ae.service.conn.SAPConnectorUtils.getClient(SAPConnectorUtils.java:253)

at com.virsa.ae.service.sap.BaseSAPDAO.getClient(BaseSAPDAO.java:65)

at com.virsa.ae.service.sap.SAPR3UserDAO.findUser(SAPR3UserDAO.java:258)

at com.virsa.ae.service.sap.SAPR3UserDAO.getUserDetails(SAPR3UserDAO.java:79)

at com.virsa.ae.service.umi.sap.SAPUserDetailsProvider.getUser(SAPUserDetailsProvider.java:56)

at com.virsa.ae.service.cache.AECacheUtil.getEndUserDetails(AECacheUtil.java:489)

at com.virsa.ae.service.cache.AECacheUtil.getEndUserManagerId(AECacheUtil.java:883)

at com.virsa.ae.uarreview.UARReviewUserRoleHandler.getReviewerCoordinators(UARReviewUserRoleHandler.java:134)

at com.virsa.ae.uarreview.UARReviewUserRoleHandler.insertReviewerCoordinators(UARReviewUserRoleHandler.java:85)

at com.virsa.ae.uarreview.UARReviewUserRoleHandler.execute(UARReviewUserRoleHandler.java:73)

at com.virsa.ae.uarreview.UARReviewBGTask.execute(UARReviewBGTask.java:95)

at com.virsa.ae.backgroundjobs.BackgroundTask.run(BackgroundTask.java:56)

at java.util.TimerThread.mainLoop(Timer.java:432)

at java.util.TimerThread.run(Timer.java:382)

Thank you all in advance for your help.

Peggy

[Former Member]

Hello Richard

How did you resolve the JCo error (service '0' in use) - I am facing similar situation!

[Rich_Turnquist]

We did not continue further with UAR in GRC.  Due to time, we implemented a simple custom program directly in our ECC system.

[former_member366047]

Peggy,

First, you do not have to create a Load Data task if you are performing a UAR from a spreadsheet in your case. If I read your post correctly, you only have composite roles in the spreadsheet, right?

Second, yes, your next step after uploading the spreadsheet would be to run the UAR load data job.

And third, the UAR load data job pulls data from tables directly and does not access the back end, which your error suggests.

Please make sure, you have configured your UAR correctly. You can refer to this guide for guidance.

http://www.sdn.sap.com/irj/bpx/index?rid=/library/uuid/b05010a3-ed45-2c10-79b2-96df60a6bf2b

If you have any specific questions, feel free to send me an e-mail.

Thanks!

Ankur

SAP GRC RIG