Question Re: GRC role assignment menu is missing in Additional Q&A

GRC role assignment menu is missing

Former Member — Thu, 07 Jun 2012 09:30:30 GMT

Hello,

We are missing the GRC role assignment menu under access management in GRC V.10.

The user that needs to maintain the role assignment has the following authorization:

SAP_GRC_FN_ALL

SAP_GRC_FN_BASE

SAP_GRC_FN_BUSINESS_USER

SAP_GRC_MSMP_WF_ADMIN_ALL

SAP_GRC_NWBC

SAP_GRC_RM_API_RISK_EXPERT

SAP_GRC_RM_API_RISK_MANAGER

SAP_GRC_RM_API_RISK_OWNER

SAP_GRC_RM_NWBC_2010

SAP_GRC_RM_OB_API_OPRISK_MNGR

SAP_GRC_SPC_CUSTOMIZING

SAP_GRC_SPC_GLOBAL_CEO_CFO

SAP_GRC_SPC_SETUP

SAP_GRC_SPC_SOX_AUT_SPECIALIST

SAP_GRC_SPC_SOX_ICMAN

SAP_GRC_WEBSERVICE

Also he has SAP_ALL and SAP_NEW profiles and GRC AC roles.

We reviewed the security guide and gave the user all needed authorization but still we can't maintain the user access for all PC objects (process, control etc.) because we don't see the relevant menu in the system.

Does anyone have an idea of what can be the cause for this?

Thank you in advance,

Shira

Re: GRC role assignment menu is missing

rajeshwari_akkamgari — Thu, 07 Jun 2012 09:49:12 GMT

Hi Shira,

Make sure all the BC sets are activated and basic master data is created (like regulation etc.,).

regards,

Rajeshwari

Re: GRC role assignment menu is missing

Former Member — Thu, 07 Jun 2012 10:23:55 GMT

Hi Rajeshwari,

We used to see it before but now it is missing.

All BC sets are activated and all basic MD is already maintained in the system.

Regards,

Shira

Re: GRC role assignment menu is missing

neerajmanocha — Thu, 07 Jun 2012 10:37:06 GMT

Hi Shira,

Hope you are doing good!!!

Could you please check your role 'GRCACCMGMT' in LPD_CUST whether this has GRC Role Assignment Folder. And more of, whether all the links into this are active and nothing is listed under inactive applications link.

Thanks & Regards

Neeraj

Re: GRC role assignment menu is missing

Former Member — Thu, 07 Jun 2012 11:15:40 GMT

Hello Neeraj,

Thank you for your answer.

We are working with NWBC and not portal.

We are in GRC 10.0 SP06

We didn't find role GRCACCMGMT but when searching for *MGMT* roles we found only the following roles:

SAP_GRAC_ROLE_MGMT_ADMIN
Role Management Admin

SAP_GRAC_ROLE_MGMT_DESIGNER Role
Management Designer

SAP_GRAC_ROLE_MGMT_DESINGER Role
Management Designer

SAP_GRAC_ROLE_MGMT_ROLE_OWNER
Role Owner

SAP_GRAC_ROLE_MGMT_USER
Role Management Business User

SAP_GRAC_SUPER_USER_MGMT_ADMIN
Super User Administrator Role

SAP_GRAC_SUPER_USER_MGMT_CNTLR
Super User Controller Role

SAP_GRAC_SUPER_USER_MGMT_OWNER
Super User Owner Role

SAP_GRAC_SUPER_USER_MGMT_USER
Super User Firefighter

Regards,

Shira

Re: GRC role assignment menu is missing

neerajmanocha — Thu, 07 Jun 2012 11:52:32 GMT

Hi Shira,

My mean to say for role 'GRCACCMGMT' is in Transaction Code 'LPD_CUST' (not in PFCG).

Thanks & Regards

Neeraj

Re: GRC role assignment menu is missing

Former Member — Thu, 07 Jun 2012 12:27:39 GMT

Hi Neeraj,

Thank you for the clarification.

It seems that all applications are active there (I can't attach a print screen to this message so you will see it)

Kind Regards,

Shira

Re: GRC role assignment menu is missing

Former Member — Thu, 07 Jun 2012 13:42:39 GMT

but still we can't see the relevant menu

Regards,

Shira

Re: GRC role assignment menu is missing

Former Member — Thu, 07 Jun 2012 16:24:31 GMT

but still we can't see the relevant menu

Would appriciate your assistance.

Regards,

Shira

Re: GRC role assignment menu is missing

neerajmanocha — Fri, 08 Jun 2012 03:40:24 GMT

Hi Shira,

Are you on NW 7.02 SP11? There is one recent fix from NW under SAP Note 1681453 related to same issue. Please check with your NW team and implement this, if required.

Hopefully, this would resolve your issue.

Thanks & Regards

Neeraj

Re: GRC role assignment menu is missing

Former Member — Mon, 11 Jun 2012 12:03:36 GMT

Hi Neeraj,

We are on NW 7.02 SP09 so note 1681453 is relevant to us but we can't find program APB_LPD_XML_TO_TABLE as described in the note.

Any suggestions?

Thank you,

Shira

Re: GRC role assignment menu is missing

neerajmanocha — Mon, 11 Jun 2012 13:58:32 GMT

Hi Shira,

I am sorry. I don't have much idea for this program APB_LPD_XML_TO_TABLE. You can check with your basis or raise a ticket under component BC-MUS-LP.

This SAP component deals in this area.

Thanks & Regards

Neeraj

Re: GRC role assignment menu is missing

Former Member — Mon, 11 Jun 2012 14:01:28 GMT

Hi Shira,

I've the same issue but I found the "central owner" in nwbc :

setup -> access owners -> access control owner

Hopefully, this would resolve your issue.

Thanks & Regards

Laura

Re: GRC role assignment menu is missing

Former Member — Mon, 11 Jun 2012 14:48:17 GMT

Hello Laura,

Thank you for your answer.

Unfortunatly our issue is relevant for process control owners and not access control owners.

Regards,

Shira

Re: GRC role assignment menu is missing

joaopaulo_fortes — Mon, 11 Jun 2012 19:37:25 GMT

Hi Shira,

At first the role SAP_GRC_FN_ALL is enough for power users in the frontend.

Be aware that the menus in the front end may vary depending on the activated applications (AC, PC and RM) in your system.

You can find the role assignments under menu "Access Management" / "GRC Role assigments" / "Organizations" and/or "Business Process". These two links contains relevant roles assignments for organization and business process levels.

Best regards.

Re: GRC role assignment menu is missing

Former Member — Tue, 12 Jun 2012 08:02:16 GMT

Hi Shira,

Did you activate plugins GRCPI in SPRO ?

governance, risk and compliance -> access control -> maintain plugin setting

You should activate all activity for the connector.

Once activate, 'user access' appears in NWBC

Best Regards

Re: GRC role assignment menu is missing

Former Member — Wed, 20 Jun 2012 10:31:19 GMT

Hello

All application are activated in AC but this issue is for PC.

We can see the assignment already performed to the org units and process/controls etc in their master data BUT

we don't see the user access menu in which we can choose an org unit with its processes/controls and review all the assignments they have and change them there. This is also the place where you assign the process owners since there is no other place for it.

We used to have it but for some reason we can't now. we made sure that there was no change to the user authorizations and none was made.

The user that we are testing it with has full GRC AC and PC authorizations.

another user that has roles:

SAP_GRC_FN_BASE

SAP_GRC_FN_BUSINESS_USER

SAP_GRC_NWBC

SAP_GRC_SPC_SOX_ICMAN

can see the role assignment menu under the access management and both users are maintained as SOX ICM in corporate level.

(the user with which we have the issue has the same roles and more...)

Would appriciate any ideas you may have on this issue.

Thank you,

Shira

Re: GRC role assignment menu is missing

rajeshwari_akkamgari — Wed, 20 Jun 2012 10:50:21 GMT

Hi Shira,

Hope you have not clicked on User Settings->Hide link 'GRC Role assignment' ( it comes when you right click on the work center)? If its hidden like this,you have to make this visible again.

regards,

Rajeshwari

Re: GRC role assignment menu is missing

Former Member — Wed, 20 Jun 2012 12:37:53 GMT

I assume under Access Management, you can see the GRC Role Assignments menu. If you can, when you choose Organizations, make sure you select the view "Standard Hierarchy".

Re: GRC role assignment menu is missing

Former Member — Thu, 21 Jun 2012 06:38:13 GMT

Hello Paul

The issue is that we can't see the role assignment menu

Regards,

Shira