Skip to Content
avatar image
Former Member

AC10 - Post Installation Questions

Hello Experts,

Im trying to finish the post-installations steps for AC10 only environment. So far, I've done the following:

- I have installed a NW AS ABAP 7.02 (SPS12) with GRCFND_A V1000 addon (SP09).
- I have installed an ERP 6.0 EhP5 with GRCPIERP and GRCPINW addons (SP09).

- I have done the "Activating the Applications in Clients" step in SPRO (GRC-AC only).

- I have checked the SAP ICF services (/sap/public, /sap/bc and /sap/grc).

Now I have to activate to BC Sets, however, I dont know which ones are mandatory. Where can I find more documentation about them? I have checked the "Access Control BC Sets Table" in the Installation Guide but there's no more information about them. So far, I have activated the "GRAC_RA_RULESET_COMMON" and I also try to activate the "GRAC_RA_RULESET_SAP_R3" but ended with warnings. The warning message are like:

"View V_GRFNCONNTYPE: View cluster VC_GRFN_CCI_TS_CONNECTOR does not contain data at all levels", Is this normal or I have to change something and repeat the activation?. Another question, can the bc sets be deactivated?

What is next? I've seen the "AC 10.0 Post-Installation" presentation and there's a step in SPRO: Access Control/Mantain Configuration Settings. Do I need to change something there?

Thank for your help,

cK.

Add comment
10|10000 characters needed characters exceeded

  • Follow
  • Get RSS Feed

2 Answers

  • Best Answer
    Sep 17, 2012 at 12:31 PM

    CK:

    You can find a document on SMP that is in the same place as all of the installation guides called Maintaining Configuration Settings Guide - SAP AC 10.0. This document describes all of the configuration parameters.

    For the BC sets, I usually state to activate all BC sets initially EXCEPT the ones with "Ruleset" in their name. There is no harm in activating all the NON RULESET BC sets initially.

    The appropriate ruleset BC sets should be activated only after you have determined which rulesets you are going to use in your AC10 environment. The installation guide give you the list of BC sets available. Please note that the R3 rule set will place all the rules in the same connector group vs splitting out the Basis / HR / R3 core rules into logical groupings.

    There are documents listed in SDN that gives information for each functionality that goes past the initial GRC10 Post installation. For example, for access risk analysis, the document is titled,

    AC 10.0 Pre-Implementation - From Post-Installation to First Risk Analysis.

    Regarding the error message, please review Note 1576444 - GRC 10.0 Error while activating the BC Set.

    It is my understanding that you cannot 'deactivate' a BC set once activated, you would just need to make the necessary configuration changes.

    thanks

    Kevin

    Add comment
    10|10000 characters needed characters exceeded

    • Former Member Kevin Tucholke

      Hello Kevin,

      Yes, I was talking about the section "Activate Common Workflow", is this step mandatory for AC only enviroment? If yes, is this part of the post-installation? because is not mentioned in the installation guide but only in the "GRC 10 Post Installation".

      Best regards,

      cK.

  • avatar image
    Former Member
    Sep 17, 2012 at 09:16 AM

    Yes, you should go through each config parameter and maintain it according to your need.. also follow the "GRC 10.0 - Post-Installation" guide to activate the workflows (SWU3 etc..)

    Add comment
    10|10000 characters needed characters exceeded