GRC 10: User/Role Risk Analysis shows no results after implementation of SP8

[Former Member]

Hi GRC Experts,

We have upgraded from GRC 10- SP07 to SP8 and now when we run user/roles violation report it returns with only the username ID or Role Name.

There is no Risk Description - Action etc.

Result: In the action column - No rules were selected.

Please Note:

This worked before when we were on SP7.

We have have generated the rules & ran a full sync

GRC Plugin's per target system are also upgraded to 08

Have any of you experienced this problem.

Your Help will be appreciated.

Kind Regards

Kailash

[Former Member · Accepted solution]

Have you got a custom filter/report format on? i.e. are any columns within the results hidden?

[Former Member · Accepted solution]

We are not using any filters or report format.

[Former Member · Accepted solution]

Hi Kailash,

This was a bug which was fixed in the SP 8, before SP8 the user/role/profile Risk violation report  under the Reports and Anaytics section used to show real-time risk violations and not considering the offline data where as all the other reports under Reports and Analytics section considers the offline data.

This code fix is mentioned in the SAP note no: 1675758

So now in SP 8 if you run the analysis the data is fetched from the offline data.So i would request you to run the batch risk analysis and then perform the analysis.

Regards

Japneet 

[Former Member · Accepted solution]

I was trying to run "USER RISK VOILATION REPORT "

In this case ,it always takes offline data from the system if you want to get the real time data you have to run "batch risk analysis job" and the offline data parameter inside configuration setting must be "yes" (SPRO)

In this case if you want to see real time data, run the ad hoc risk analysis (inside access management tab ->access risk analysis->role level )this will take real time data from the system
and will provide the results with full description .

This was a bug in SP 07 That even"USER RISK VOILATION REPORT" taking real time data which is wrong and fixed in SP08 Pack ."

Thanks Everyone.

[Former Member]

Hi Kailash,

Kindly implement the below SAP Note also.

#1712446: Action text descriptions are missing in functions

Regards

Shaily

[Former Member]

Hi Shaily:

we apply the notes 1675758, 1675760 and 1712446, but the problem persists.

shows the following message "no rule were selected" in "User /role / profile risk violation reports"

hope someone help me solve this problem 

Best regards

[Former Member]

Hi kailash,

Seems you have done all the config right.

Can you re-check below:

1. Connector assgined to logical systems ?

2. Does rule library shows generated rules info ?

Regards,

Ajesh.

[Former Member]

Hi Ajesh,

Can you re-check below:

1. Connector assgined to logical systems ? - Yes

2. Does rule library shows generated rules info ? - It Shows.

Any other points please??

[Former Member]

Do the management reports update as intended?

Also try running the risk analysis as a background job. If all else fails, it may be worthwhile to open up a SAP support message.

All the best.