Skip to Content
author's profile photo
Former Member

GRC 10.0 Migration : Missing SoD rules after rule generation

Hi Experts,

We are migrating from GRC AC 5.3 to 10.0 (SP8).

We used the migration tools and we exported all .dat files from our old system.

We imported all files using the transaction GRAC_DATA_MIGRATION.

All functions, risks, ruleset, BP are created but after the rule generation, we found that a large number of rules are not generated.

For example, for a risk related to several logical connector, all rules are well defined for a connector, partially defined for an other and totally missing for an other one...

We believe that it's not a question of maximum number of rules per risks as it works fine in 5.3 and furthermore the limit of rules related to a risk has increased (Note 1310365) in 10.0.

Have anyone an idea for us?

Best Regards,

Nicolas

Add comment
10|10000 characters needed characters exceeded

  • Follow
  • Get RSS Feed

3 Answers

  • Jul 13, 2012 at 02:01 PM

    Hi Nicolas,

    Kindly check if the authorization objects have been transported properly for the associated functions since rules are generated based on the authorization objects.

    Best Regards,

    Saksham

    Add comment
    10|10000 characters needed characters exceeded

  • author's profile photo
    Former Member
    Jul 13, 2012 at 05:08 PM

    Hi Nicolas,

    For your issue you can ref to the below SAP note

    #1716931: Entries missing in the tables GRACFUNCACT for SAP R3 Ruleset

    #1715465 - SOD RULE UPLOAD incorrect in GRACACTRULE

    And also recommend to make sure that all the data is properly exported from GRC5.3.

    If the Functions and Risks are successfully imported into the GRC10.0 release then the Rule Generation should also be correct.

    Regards,

    Shaily

    Add comment
    10|10000 characters needed characters exceeded

  • author's profile photo
    Former Member
    Jul 19, 2012 at 03:36 PM

    Hi Nicolas,

    In 5.3 it was resolved by splitting the function.
    You can consider going for logical system instead of physical systems.The change history for the risk & function will show any changes you do in them, be it addition/deletion of system,actions etc.

    Please review these sap notes for additional information.

    1729934

    1667530

    986996

    1033326

    1178372

    I hope this gives you some relevant information.

    Regards,

    Yukti

    😊

    Add comment
    10|10000 characters needed characters exceeded