GRC 10: Alert Notification body change in ARA???

[former_member184114]

Hi All,

Business wants to have the body of "Alert Notification" mail in Access Risk Analysis (ARA) for critical transactions executed in SAP system changed as per some custom standards. Any idea if this is possible?

If possible, then what is the document to be mofied for the same?

Waiting for your replies!

Regards,

Faisal

[Former Member · Accepted solution]

Hi Faisal,

For your customized mail, please follow the steps:

1) SPRO -> Governance, Risk and Compliance -> Access Control -> Workflow for Access Control -> Maintain Text for Custom Notification Messages

Then after creating the customized mail add the same in the following step:

2) SPRO -> Governance, Risk and Compliance -> Access Control -> Workflow for Access Control ->Maintain Custom Notification Messages

Thanks and Regards

Ankit sharma

[former_member184114 · Accepted solution]

Ankit,

Thanks for your reply.

I have followed this way of defining custom documents for ARQ. Do you think that for using customized document for alert notification, this is how this needs to be configured?

Regards,

Faisal

[former_member184114 · Accepted solution]

Any update on this?

[former_member184114 · Accepted solution]

I am looking for some update here. Is it possible for any one?

Regards,

Faisal

[Colleen · Accepted solution]

Hi Faisal

I've tried to track through the code to help you out but I wonder if SAP anticipated clients would have the need to modify contents withing %VARIABLE%. This custom notification seems more related to MSMP notifications.

The program GRAC_ALERT_GENERATION calls the method cl_grac_ac_util=>send_email_notification

SE24 Class CL_GRAC_AC_UTIL contains the methods relating to the Alert Notifications for Methods SEND_EMAIL_NOTIFICATIONS and SEND

Within the send, a check is performed to see if there is customer entries in "Maintain Custom Notification Messages" - as per feedback from Ankit

Method SEND_EMAIL_NOTIFICATION

There is a check from table gracnotifymsg to check for the class:

• 0AC_SOD_ALERTS - SOD Alerts
• 0AC_CONTROL_ALERTS - Mitigating Control Alerts

These two values have to match for the Maintain Custom Notifications Messages

DATA:lt_variable        TYPE grac_t_msg_variable (which is Table Type for Line Type GRAC_S_MSG_VARIABLE containing 15 fields)

TRY.
           CALL METHOD cl_grac_ac_util=>send
             EXPORTING
               iv_message_class   = lv_message_class
               iv_message_no      = lv_message_no
              it_variable        = lt_variable
               it_recipient_user  = lt_recipient_user
               it_recipient_email = lt_recipient_email
               iv_sender          = lv_sender
               iv_language        = sy-langu.

there is a loop in the code to populate ls_variable (example screen shot below) but think this is only for '0AC_CONTROL_ASSIGN'

Method SEND

the %VARIABLE% is defined (I think derived in the send_email_notification when this method calls SEND it passes it through)

In here there is a big concatenation for all the fields - this may be the bit that contains the data you want to modify

________________

Unless someone else on the SCN can assist, It might be worth getting a developer colleague to debug this code and possibly look at enhancement, etc for the FIELD1 to FIELD15

There is a comment in the code for FIELD15 referring to note 1764148 which added STATUS to mitigating role assignment

You will need to be careful for what else this method uses - possibly copy it and alter and then enhance the program GRAC_ALERT_GENERATION to call the copied method instead.

Sorry I can't be of much more assistance than this.

[former_member184114 · Accepted solution]

Colleen,

I do not have words to thank you

It seems I can get a break through from your reply.

I once again thank you for sparing so much time assisting me. I will check this with my developer and do the necessary. I will update this post one I am done.

However, may I know how do I maintain variables in the system?

Regards,

Faisal

[Colleen]

Transaction SE61 allows you to change message content

I think the SOD Alert Notification is Document Class General Message for "GRAC_SOD_ALERT_NOTIFICATION"

[former_member184114]

Hi Colleen,

Thanks for your reply.

I could find the document. However, it is maksing  use of only one variable "%VARIABLE%", which pulls all the information and placed in the body of the mail. This contains some information which is jargon to business.

Is there anyway by which I can breakup this information and format it according to business requirements (business friendly) using separate variables of my own?

Please suggest.

Regards,

Faisal