topic Re: How to run Acecss Controls?? in Application Development and Automation Discussions

How to run Acecss Controls??

Former Member — Fri, 29 Jun 2007 14:28:55 GMT

We have just loaded Access Controls into our ERP 6.0 system.

Simple question how do we use it?

What are the t codes.

We have all sub modules.

Re: How to run Acecss Controls??

Former Member — Sun, 01 Jul 2007 07:01:41 GMT

Hi,

main transaction codes in the back-end are the following:

/VIRSA/ZVRAT for Access Audit (formerly known as Compliance Calibrator)

/VIRSA/VFAT for Superuser Privilege Management (formerly FireFighter)

/VIRSA/VRMT for Role Expert

other transactions can be retrieved by searching on /VIRSA/* in SE93.

Rgds,

Karim

Re: How to run Acecss Controls??

Former Member — Sun, 01 Jul 2007 11:52:50 GMT

And for some more points, where do we get the 120,000 SoD rules.

I have checked out those t codes, I can use them but the rules aren't behind them.

I have checked in SE16, in the VIRSA tables and there are no entries in there.

I was told, it come delivered with 120,000, rules, where do I download them from?

thanks.

Re: How to run Acecss Controls??

Former Member — Sun, 01 Jul 2007 16:25:26 GMT

Mark,

depending on your access control release, the rule sets have either to be activated through BC sets or to be uploaded.

E.g.

- for a version 4.0, see note 1008500 where it is explained in point "BC Set Activation" which BC sets need to be activated.

- for a version 5.2, see note 1033326 where it is explained that files are included in the CC Software Java component...

Rgds,

Karim

Re: How to run Acecss Controls??

Former Member — Mon, 02 Jul 2007 14:08:15 GMT

Hi Karim,

I now have an error message

Rule Builder is not activated yet. In order to proceed Rule Builder

Conversion, you need to enable Rule Builder Configuration.

This is on t code /VIRSA/ZVRAT_RB3

Re: How to run Acecss Controls??

Former Member — Mon, 02 Jul 2007 14:35:17 GMT

Dear Mark,

Go to transaction /VIRSA/ZVRAT_RB3. This Wizard guides you through the Rule Architect Process to convert all the existing TCode and Object Rules.

1) Check Rule Architect Configuration

2) Upload Predefined Virsa Rules

3) Assign Transactions ( Include Coupled Transactionss)

4) Compare TCode Rules ( TCode Rules Discrepancy List)

5) Assign Objects ( Enable / Disable New Objects)

6) Compare Object Rules ( Object Rules Discrepancy List)

7) Generate Transaction Code and Object Rules

😎 Sucessful Completion of Rule Architect Conversion Process

Regards,

Naveen.

Re: How to run Acecss Controls??

Former Member — Mon, 02 Jul 2007 14:39:37 GMT

OK, I mentioned that in a previous post, I need to activate Role Builder how and where do I do that?

Re: How to run Acecss Controls??

Former Member — Tue, 03 Jul 2007 11:04:05 GMT

Dear Mark,

/VIRSA/ZVRMT_U01 Check Role Status

/VIRSA/VRMT Role Expert

/VIRSA/ZRTDELLOCK Delete Role Lock

/VIRSA/ZVRAT_RB3 Rule Architect Conversion

Regards,

Naveen.

Re: How to run Acecss Controls??

Former Member — Tue, 03 Jul 2007 11:16:01 GMT

OK, when I go to RB3, and the first option is Check Rule Architech Config and click the arrow icon I get the error message that I posted.

I need to know what config I need to make to resolve this?

error again is:

Rule Builder is not activated yet. In order to proceed Rule Builder

Conversion, you need to enable Rule Builder Configuration.

Re: How to run Acecss Controls??

Former Member — Tue, 03 Jul 2007 13:02:12 GMT

Dear Mark,

Transaction : /VIRSA/VRMT .. Role Expert

Execute Report : /VIRSA/ZVRMT (from SE38)

Check the entries in tables:

/VIRSA/ZVRMTCNFG Role Expert Configuration

/VIRSA/ZVRATCNFG - Compliance Calibrator Configuration.

Regards,

Naveen.

Re: How to run Acecss Controls??

Former Member — Thu, 05 Jul 2007 12:41:57 GMT

Make sure you are planning to use the ABAP CC only and not the Java version. If 4.0 (ABAP) only, from within the Compliance Calibrator analysis screen, go to Compliance Calibrator on the menu, select Configuration Option. Set the Configuration parameter 'Rule Architect Activation' to YES.

Please download the Compliance Calibrator User Guide from Service MarketPlace to continue.