GRC 10 Business role question

[Former Member]

Dear Experts ,

I have couple of question regarding business role in GRC 10

1. If I update Business role in GRC (adding one more techincal role ) will all user who areassigned with role will be updated.

2.Can I see my user report on basis of business role .As i cant see any option and i think its still on comp or single role .

Thans & Regards

Asheesh

[former_member136769]

Hi Asheesh, let us know if this is answered and resolved?

[Former Member]

Luciana,

We had the same requirement and went to the OSS with this. We had maintained the ABAP class as CL_GRAC_BROLE_BG and they asked us to change it to CL_GRAC_ERM_BROLE_BG. This is what you stated before.

So I can vouch for your steps. It does work!

[former_member136769]

Thanks Nicholas! 🙂

[former_member136769]

If you can rate the answer, it would be great, thanks!

[mamoonr]

Hi Experts,

My update assignment button is working fine but scheduled background job is getting cancelled.

My GRC  system is on SP12. And SAP Note 1665863   can not be implemented.

Can anyone suggest on this.

Thanks,

Mamoon

[Former Member]

Hi Mamoon,

Did the steps mentioned in thread not work ?

Maintain plan usage GRAC_BRLP with ABAP CLASS value as CL_GRAC_BROLE_BG and save it.

App-componet is GRC-AC.

Sometimes namespace error will come which will go through while hitting the enter. On Enter, the field willbecome editable .

[mamoonr]

Hi Anil,

Thanks for reply.I already applied the step as you mentioned.But scheduled job is getting failed.

Thanks,

Mamoon

[former_member225453]

Hi Mamoon,

Please check SE54 for the Job which is triggered on update assignment.

GRFNVC_PLUSG - Edit view Clusture  > Plan activity for AC

GRAC_BRLP should have been configured, without which click on Update assignment will not work or trigger the job.

Also, implement the below Note in your system.

1837416

Hope this Information would be helpful!

Best Regards,

Shreya Gupta

[former_member136769]

Hi Asheesh

Please change the ABAP class name which has been maintained in the attached snapshot to CL_GRAC_ERM_BROLE_BG. This class is maintained in the view/cluster GRFNVC_PLUSG in transaction SE54. Follow below steps to edit the cluster:

1. Go to transaction code SE54

2. Enter the Table/View as #GRFNVC_PLUSG#

3. Click on the button #Edit view Cluster#

4. Click on #Test# button

5. Select the Node #Plan Activity for Access Management# from the left

side window under Dialogue structure

6. Select Plan Usage GRAC_BRLP and double click on it

7. Enter ABAP class as CL_GRAC_ERM_BROLE_BG.

this should resolve!

[Former Member]

Hi Asheesh,

1. Yes, it will update. You need to update assignment aftger updating the Business role.

You might want to check the following notes, if you are facing some problems doing this:

Note 1668386 - UAM: update assignment from BRM is not correct

Note 1665863 - RUGRCAC: update assignment problem

Note 1671232 - RUGRCAC: update assignment problem (2)

2. User & Role reports, should be listing the business roles. I can not confirm this now as I dont have business roles in my system as of now.For this business role type should be activated and exist in the system. If you need custom reports you can always create one.

Regards,

Ajesh.

[Former Member]

Hello Ajesh,

I'm also facing the same problem. I'm not seeing the update assignment button to make the changes to effect.

Any input will be highly helpful.

Regards,

Anil

[Former Member]

Hi Anil,

In BRM, when you open the business role, there is a button "Initiate

update to users", this will do all the deletion/insertion to all the

users. The change will be pushed to those users who have that business

role.

Hope this information helps.

Best Regards,

Nandita

[Former Member]

Thanks Nandita for the reply.

Can you please tell in which stage is this button ?

[Former Member]

Any one has suggestions?

[Former Member]

Hello anil

If you go to role methodology you can see steps .There if you will notice there are 8 steps but only 7 are name ,

Missing one is provisioning . Name it and add it to your methodology and you shuld get the option ,

Thanks & Regards

Asheesh

[Former Member]

Hi Asheesh, Anil,

For your information, there is also a parameter under SPRO for Param Group 'Access Request Business Role' paramenetr 4011 (Delete the techincal roles if it is part of the business roles) after setting this paramenetr to YES, shared Technical Roles will get removed when Business Role is removed via Access Request.

Regards,

Shaily

[Former Member]

Hello Asheesh,

That really helped. I'm able to find the button now.

But I'm getting run time error now when clicking on that.

Message : sap/bc/webdynpro/SAP/GRAC_OIF_ERM_ROLE was terminated because of an error.

• The following error occurred in systemXXX : Parameter has invalid value: Parameter SYST_DATE/SYST_TIME has invalid value 00000000/000000

Our system has a valid date and time set. Any thoughts on this ?

[Former Member]

Hello shaily,

I have already maintained this parameter.

[Former Member]

Hi anil

the error message coming because of different time zone setting.Check if ur   System Time Zone is set to CET y going t code stzac . If u have maintained two time zone i.e UT or CET it will not work ,

Is  should be same ,

Thanks & Regards

Asheesh

[Former Member]

Hi Asheesh,

I checked that from table TTZCU and value is CST in our GRC system and R/3 system.

Any note has to be applied ?

[Former Member]

Hi Anil

Are you able to solve this problem . if yes can you please let me know what extra steps you performed .

Thanks & Regards

Asheesh

[Former Member]

Hello asheesh,

I have not resolved this issue. SAP is looking into the issue and sent for further analysis.

I will keep you posted regarding this.

Regards,

Anil

[Former Member]

Hello Asheesh,

Problem is solved now. Define plan usage setting was changed in SPRO and we are not getting dump now and update assignment is working perfectly. We were unable to edit the entry and SAP did it for us.

Regards,

Anil

[Former Member]

Hi Anil,

Can you tell me which plan usage setting was modified?

I am getting also your error:

Message : sap/bc/webdynpro/SAP/GRAC_OIF_ERM_ROLE was terminated because of an error.

• The following error occurred in systemXXX : Parameter has invalid value: Parameter SYST_DATE/SYST_TIME has invalid value 00000000/000000

Thanks and regards,

Johan

[Former Member]

Hi Johan,

Maintain plan usage GRAC_BRLP with ABAP CLASS value as CL_GRAC_BROLE_BG and save it.

App-componet is GRC-AC.

Sometimes namespace error will come which will go through while hitting the enter. On Enter, the field will become editable .

Thanks.

[Former Member]

Thanks! It works now.

You were faster than OSS message support

regards,

Johan

[Former Member]

Hi Anil/John,

Could you please let me know how i can maitain the Plan usage in SPRO?.

I tried to do it GRC->General setting->WF->Change event type linkage, but i couldnt find the ABAP class for it. Is there any prerequiste before maintaing this?

Appreciate your help in this.

Thanks,

Ravi

[Former Member]

Hello Ravi,

Plan usage is maintained from below path.

GRC>Common component settings>Planning and Scheduling>Define Plan usage.

Hope it helps.

Regards,

Anil

[Former Member]

Hi Anil,

Thanks a lot for the detailed information.

The error is resolved by defining the plan usage in the SPRO, but when i trigger the change for a business role via Update assignment button in BR screen the triggered job is failing with the ABAP

Programming error in background stating

An exception occurred that is explained in detail below.

The exception, which is assigned to class 'CX_SY_DYN_CALL_ILLEGAL_CLASS'

not caught in

procedure "EXECUTE" "(METHOD)", nor was it propagated by a RAISING claus

Since the caller of the procedure could not have anticipated that the

exception would occur, the current program is terminated.

The reason for the exception is:

At dynamic class method call, the class "CL_GRAC_BROLE_BG" was specified

could

not be found.

I guess there is a manual note to be applied to maintain the class "CL_GRAC_BROLE_BG" in the GRC system, do recall that you have applied any such note in the past

Appreciate your help in this.

Thanks,

Ravi

[Former Member]

Hello Ravi,

Can you try this one 1837416 - Update assignment error for Business role maintenance ??

Let me know if it worked.

[Former Member]

Hi Ravi,

Did you already find the solution?

I have created an OSS message for this error as I have exactly the same one.

regards,

Johan

[Former Member]

Hi Anil,

Thanks for the Note.

But the SAP Note you have suggested will point to the same area where we will define the Plan usage and define the ABAP class using SPRO.

@John: I am still not able to find a solution for this, did you heared back from SAP via OSS message for this issue?

Thanks,

Ravi

[former_member59416]

This message was moderated.

[former_member59416]

Hello,

I have updated the methodology to include the Provisioning step in SPRO, but still don't see this step under Role Maintenance or the "Initiate update to users" button. Any ideas?

Thank you in advance,

Annika

[former_member59416]

Hello,

I have updated the methodology to include the Provisioning step in SPRO, but still don't see this step under Role Maintenance or the "Initiate update to users" button. Any ideas?

Thank you in advance,

Annika

[Former Member]

I am under the impression that the button appears only if there are users assigned to the role.

[Former Member]

Still waiting for valuable feedback ...