Is Batch Risk Analysis mandatory?

[SubbuIyer]

Hello Everyone,

We recently had an issue in our GRC development system where are the risk analysis tables(GRACUSERPRMVL) got filled up and we had to delete the table using SE14 as per suggestions provided in a SAP note because the GRAC_DELETE_ACCESS_RULES_ALL was failing and resulted in ABAP dumps. The root cause was that we had scheduled incremental Batch Risk Analysis and had not maintained the parameter to ignore critical profiles and roles.

The question is whether Batch Risk Analysis is really needed. We are not using the SoD review workflow, the management reports or BI for GRC. I read on the community that it impacts the UAR workflow. Is that true? Will UAR requests not get generated if we don't run Batch Risk Analysis? What are the other impacts on GRC for not running Batch Risk Analysis?

Thanks in advance for your answers.

Regards,

Subbu Iyer

[alessandr0]

Hi Subbu,

I believe UAR should also work without the batch risk analysis. Generally, the batch risk analysis populates multiple tables that are used by dashboards and various reports. If you don't need those reports, you can safely ignore the batch risk analysis. In certain scenarios, like the SOD Risk Review workflow, it is mandatory and you need it.

Regards, Alessandro

[SubbuIyer]

Thank you Alessandro. Thanks for the confirmation.

Btw, I have attended a few of your sessions from Xiting for Fiori authorizations. They have been pretty informative and have helped me a great deal. Thanks for sharing the information with the community.