VIRSA Tables after Rules Upload

[Former Member]

Hello,

While uploading rules and mitigations, I see in the log file that several VIRSA Tables get updated and populated.

Is there a way to run SQL Query in Debug mode, to see which columns of VIRSA Tables have been updated by uploading ruleset and mitigations?

Thanks,

Imran

[Former Member · Accepted solution]

Hello Imran,

If you do not have access to Debugger of RAR then go to the following URL:

http://<SERVER>:<PORT>/webdynpro/dispatcher/sap.com/grc~ccappcomp/CCDebugger

Here put in the query like following

select * from virsa_cc_busprc

this will return the data from business process table. Here is the list of some of the tables which get populated while rules upload

virsa_cc_busprc, virsa_cc_busprct, virsa_cc_func, virsa_cc_funct, virsa_cc_funcact, virsa_cc_risk, virsa_cc_riskrs, virsa_cc_riskt, virsa_cc_mituser, virsa_cc_mitrole, virsa_cc_mitgen

Hope this helps.

Regards, Varun

[Former Member · Accepted solution]

Hi Varun,

Thank you very much. I have the following 4 queries.

 If you do not have access to Debugger of RAR 

1- I have the administrator password with full access to RAR, so is there a seperate Debugger of RAR, which I can access, other than the below URL that you have provided?

  then go to the following URL
http://<SERVER>:<PORT>/webdynpro/dispatcher/sap.com/grc~ccappcomp/CCDebugger
Here put in the query like following
select * from virsa_cc_busprc
this will return the data from business process table.  

2a- So should I first (1) put the query like select * from virsa_cc_busprc and then (2) and then execute rules export, and then (3) mitigation export etc?

2b- Is there a way to make debugger on and off, just like you can make SQL Trace on and off?

  Here is the list of some of the tables which get populated while rules upload
virsa_cc_busprc, virsa_cc_busprct, virsa_cc_func, virsa_cc_funct, virsa_cc_funcact, virsa_cc_risk, virsa_cc_riskrs, virsa_cc_riskt, virsa_cc_mituser, virsa_cc_mitrole, virsa_cc_mitgen 

3- Is there any OSS Note or SDN Guide or URL, which provides the list of VIRSA tables and their significance?

4- The reason for asking this question 3, is I am trying to extract rules & mitigation from GRC AC 5.2 system through export of rules, mitigations etc., and then by using the GRC/ RAR Debugger, I want to format the data in the tables according to 5.3 tables requirements and then upload it into a different GRC AC 5.3 system).

Thank you very much in advance.

Thanks & Regards,

Imran

[Former Member · Accepted solution]

Hello Imran,

1- I have the administrator password with full access to RAR, so is there a seperate Debugger of RAR, which I can access, other than the below URL that you have provided?

-> This is the only URL for Debugger available in RAR and you can use it to VIEW information only from the RAR tables. You would not be able to use update, insert and delete queries from here. This is for VIEW purpose only.

2a- So should I first (1) put the query like select * from virsa_cc_busprc and then (2) and then execute rules export, and then (3) mitigation export etc?

-> Debugger is for VIEW purpose only and has no significance other than that. You will carry out the rules export separately and then can use the debugger to view the data in the tables.

2b- Is there a way to make debugger on and off, just like you can make SQL Trace on and off?

-> There is no way to turn on or off the debugger. Anyone who is having access to this URL and have UME permission will be able to use it.

3- Is there any OSS Note or SDN Guide or URL, which provides the list of VIRSA tables and their significance?

-> There would be no OSS note for this but you might request by raising a message from SAP GRC Support.

4- The reason for asking this question 3, is I am trying to extract rules & mitigation from GRC AC 5.2 system through export of rules, mitigations etc., and then by using the GRC/ RAR Debugger, I want to format the data in the tables according to 5.3 tables requirements and then upload it into a different GRC AC 5.3 system).

-> Debugger is for VIEW purpose only and can not be used to modify the data in tables. You carry out this from actual database only.

Regards, Varun

[Former Member · Accepted solution]

Thanks Varun.

I contacted SAP Support to provide me a way to export data from GRC AC 5.2 to GRC AC 5.3.

SAP Support adviced me the following.

1- There is no documented procedure to export data (our company own rules, mitigations etc) from GRC AC 5.2 to GRC AC 5.3. The only procedure provided by SAP, which guarantees SAP Support is follow upgrade path of first uninstalling GRC AC 5.2 and installing GRC AC 5.3.

2- SAP does not provide support for exporting GRC AC 5.2 data to GRC AC 5.3 systems, since GRC AC 5.2 does not have the option to export mitigations. This is a new feature is SAP GRC AC 5.3

2b- Since our bussiness requires GRC AC 5.2 and GRC AC 5.3 systems at the same time and just wants to extract rules, mitigations *from 5.2 and import it in GRC AC 5.3, then this is purely consulting and I should do the following seen below*

3- I should use the Debugger and trace the tables changes, the changes to the columns of those tables etc, happened during export of GRC AC 5.2 data (rules, mitigations etc) and then format the rules, mitigations in AC 5.3 format and then import the rules and mitigations text file into GRC AC 5.3.

Based on above 3 SAP Recommendations,

1- I understand that I need a Debugger to trace the SQL Statements of GRC AC 5.2 rules and mitigations export & import into GRC AC 5.2. Then since this data is in AC 5.2 format, I need to format the data as per the AC 5.3 format and then import the same (1) rules.txt and (2) mitigation.txt into GRC AC 5.3 (earlier used for GRC AC 5.2 system and tracing done using the Debugger).

2- My query is can I use the Debugger to trace all the SQL Statements executed, after exporting & importing rules.txt and mitigations.txt from GRC AC 5.2 system?

3- My query also is to find out the columns, that are changed in those VIRSA Tables during export and import of rules.txt and mitigations.txt

Thanks & Regards,

Imran

[Former Member · Accepted solution]

Hello Imran,

2- My query is can I use the Debugger to trace all the SQL Statements executed, after exporting & importing rules.txt and mitigations.txt from GRC AC 5.2 system?

-> No, this will not be possible through debugger. You would have to use SQL trace tool for the same. RAR debugger is basically only for viewing of data in the tables.

3- My query also is to find out the columns, that are changed in those VIRSA Tables during export and import of rules.txt and mitigations.txt

-> SQL TRace tool should be helpfull in that. You can not use RAR debugger for the same.

Regards, Varun

[Former Member · Accepted solution]

Hello Varun,

1- How can I access the SQL Trace or SQL Debugger tool for the export/ import activities of rules.txt and mitigation.txt?

2- Is there a URL for SQL Trace/ SQL Debugger tool just like we have a URL http://<SERVER>:<PORT>/webdynpro/dispatcher/sap.com/grc~ccappcomp/CCDebugger for the RAR Debugger tool?

Thanks,

Imran

[Former Member · Accepted solution]

Hello Imran,

Normally SQL trace is available from the URL similar to given below

http://<SERVER>:<PORT>/SQLTrace

You can take help of your NW administrator if you do not have access to it. Also, to see how to run this tool you can search the forum for guides on how to run sql trace.

Regards, Varun