Question Re: GRC RFC Function Module GRAC_API_RISK_ANALYSIS no results in Financial Management Q&A

GRC RFC Function Module GRAC_API_RISK_ANALYSIS no results

daniel92 — Tue, 16 Apr 2019 13:15:58 GMT

Hello everybody,

I want to access the Function Module GRAC_API_RISK_ANALYSIS by pyrfc.

The result of the call is:

{'ET_ACT_EXEC_SUM': [], 'ET_ACT_MGMT_SUM': [], 'ET_ACT_VIOL_DET': [], 'ET_ACT_VIOL_SUM': [], 'ET_ANALYTICAL_REPORT_SUM': [], 'ET_CRACT_EXEC_SUM': [], 'ET_CRACT_MGMT_SUM': [], 'ET_CRACT_VIOL_DET': [], 'ET_CRACT_VIOL_SUM': [], 'ET_CROLEPROF_VIOL_SUM': [], 'ET_CRPRM_EXEC_SUM': [], 'ET_CRPRM_MGMT_SUM': [], 'ET_CRPRM_VIOL_DET': [], 'ET_CRPRM_VIOL_SUM': [], 'ET_MITIGATION_SUM': [], 'ET_PRM_EXEC_SUM': [], 'ET_PRM_MGMT_SUM': [], 'ET_PRM_VIOL_DET': [], 'ET_PRM_VIOL_SUM': [], 'EV_RETURN_MSG': {'TYPE': 'S', 'ID': 'GRAC_SOD_MESSAGES', 'NUMBER': '300', 'MESSAGE': 'Risk analysis finished successfully', 'LOG_NO': '', 'LOG_MSG_NO': '000000', 'MESSAGE_V1': '', 'MESSAGE_V2': '', 'MESSAGE_V3': '', 'MESSAGE_V4': '', 'PARAMETER': '', 'ROW': 0, 'FIELD': '', 'SYSTEM': ''}}

As you can see, all the values are empty.

But for Users with Roles/Profiles like SAP_ALL there should be a lot of risks.

How could I use the Function Module to get correct results?

Used Python Code:

value1 = {u'SIGN':'I',u'OPTION':'EQ',u'LOW':'USERNAME'}
value2 = {u'SIGN':'I',u'OPTION':'EQ',u'LOW':'CLIENTNAME'}
value3 = {u'SIGN':'I',u'OPTION':'EQ',u'LOW':'Global'}
value4 = {u'SIGN':'I',u'OPTION':'EQ',u'LOW':'0',u'HIGH':'4'}
       
result = conn.call('GRAC_API_RISK_ANALYSIS',
                     IT_OBJECT_RANGE = [value1],
                     IT_SYS_RANGE = [value2],
                     IT_RULESETID_RANGE = [value3], 
                     IT_RISKLEVEL_RANGE = [value4],
                     IV_OBJECT_TYPE = 1,
                     #IT_USER_TYPE = 'A',
                     #IV_OFFLINE_ANALYSIS = 'X',
                     #IV_ANALYSIS_MODE = '01',
                     IT_REPORT_TYPE = '01',
                     )

Re: GRC RFC Function Module GRAC_API_RISK_ANALYSIS no results

madhusap — Wed, 17 Apr 2019 08:50:05 GMT

Hi Daniel,

This function module works perfectly. Are you passing the following details highlighted?

Prerequisite: Just make sure rules are already setup in GRC system and are generated. Also cross check if you are able to get the risk analysis results when you execute the risk analysis directly from path NWBC -> Access Management -> User Level Analysis

Input Values

Output Values

Regards,

Madhu

Re: GRC RFC Function Module GRAC_API_RISK_ANALYSIS no results

daniel92 — Wed, 17 Apr 2019 15:32:21 GMT

Hi Madhu,

thank you very much for your answer!

In NWBC I can execute the analysis successfully.
But in the SE80 Testsequence or by pyrfc I get no results.

I think my input parameters are wrong.
Could you please add a screenshot of your inputdata fields from the function model test?

My input variables are:

value1 = {u'SIGN':'I',u'OPTION':'EQ',u'LOW':'A12CLNTXXX'}
value2 = {u'SIGN':'I',u'OPTION':'EQ',u'LOW':'DXXX'}
value3 = {u'SIGN':'I',u'OPTION':'EQ',u'LOW':'Global'}
#value4 = {u'CONNECTOR':'A12CLNTXXX',u'S':'EQ',u'LOW':''}

rseult = conn.call('GRAC_API_RISK_ANALYSIS',
                     IT_SYS_RANGE = [value1],
                     IT_OBJECT_RANGE = [value2],
                     IV_OBJECT_TYPE = 1,
                     IT_REPORT_TYPE = '01',
                     IT_USER_TYPE = 'A',
                     IT_RULESETID_RANGE = [value3], 
                     #IT_SIMULATION = [value4]

Re: GRC RFC Function Module GRAC_API_RISK_ANALYSIS no results

daniel92 — Mon, 29 Apr 2019 08:57:21 GMT

Hi Madhu,

Could you please send me your import parameters?

Maybe I will have there a mistake.

Do I need to fill the parameter IT_SIMULATION?

Thank you in advance

Regards,

Daniel

Re: GRC RFC Function Module GRAC_API_RISK_ANALYSIS no results

daniel92 — Mon, 29 Apr 2019 13:15:04 GMT

I´ve got the solution:

The IT_RULESETID_RANGE parameter needs the name of the vlue of the parameter in upper letters. So if your name of the rule id is "test" you need to set "TEST".

You can check the input parameters by SE30 old, if you run a program which uses the needed function module.

Re: GRC RFC Function Module GRAC_API_RISK_ANALYSIS no results

Former Member — Wed, 07 Apr 2021 18:56:45 GMT

HI,

can i know why you have declared the values for parameters (IT_OBJECT_RANGE, IT_SYS_RANGE, IT_RULESETID_RANGE,IT_RISKLEVEL_RANGE ) as a dictionary (key:value) pair. I am dealing with same scenario of using python to communicate with SAP and was getting empty values from SAP just like in your case. Can you please guide me what i should put as the key,value pair for my parameters

Thank you

Re: GRC RFC Function Module GRAC_API_RISK_ANALYSIS no results

daniel92 — Thu, 08 Apr 2021 07:06:59 GMT

Hi,

the dictionary is used because as you can see on some parameters there is a *_RANGE.

This is like a multiselection field in SAP GUI where you can set "from value" to "to value"

You have to change the last parameters to your needs.

Here is an example:

def grc_analysis(rfc_user, rfc_pw, rfc_ashost, rfc_asnr, rfc_client, rolename):
       value1 = {u'SIGN':'I',u'OPTION':'EQ',u'LOW':'SYSTEMNAME'}
       value2 = {u'SIGN':'I',u'OPTION':'EQ',u'LOW':rolename}
       value3 = {u'SIGN':'I',u'OPTION':'EQ',u'LOW':'RULESETNAME'}
       conn = Connection(ashost=rfc_ashost, sysnr=rfc_asnr, client=rfc_client, user=rfc_user, passwd=rfc_pw)
       r = conn.call('GRAC_API_RISK_ANALYSIS',
                     IT_SYS_RANGE = [value1],
                     IT_OBJECT_RANGE = [value2],
                     IV_OBJECT_TYPE = 2,
                     IT_REPORT_TYPE = '01',
                     IT_RULESETID_RANGE = [value3], 
                     )
       print(r)