GRACUSER is showing incorrect data

[#1]

Hello,

We have 2 data sources connected to GRC system suppose say as SOURCE1 and SOURCE2.

User details along with personal number present in both the source systems. We have configugred first source system is SOURCE1 and second is SOURCE2.

But after the synchronization, in the table GRACUSER is showing connector as SOURCE2 for some users instead details are present in SOURCE1.

Why the system has skipped the details in SOURCE1 and updated GRACUSER as SOURCE2.

Please advise ?

[former_member136769 · Accepted solution]

Hi Abhi,

I ran the sync job for and the behaviour is as per the explanation below:

GRACUSER is a master table for user data. There is a setting in SPRO->Governance, Risk and Compliance->Access Control->Maintain Data Sources Configuration->User Search Data Source.

You can list the connectors here for which you want the master data to be updated from. Whenever a repository sync job is run for a connector, if the connector is present in the data source list, all

the users which are there in that system will be have a new entry for this connector (overwriting the previous entry for any user which existed in the table).

Table GRACUSERCONN will contain the connector specific entries i.e. if a user exists in two system there will be two entries in GRACUSERCONN. While GRACUSER will have only one entry for a user for which the sync was last run(provided the connector was in the search data source list).

Let me know if you need further help!

Luciana

[Colleen · Accepted solution]

Hey Luciana

This is great you confirmed the program and use of the Data Source.

Are you able to (pretty please) convert this into a SAP KB article in marketplace? This topic has come up a few times and would probably help everyone with SAP providing a clear explanation for user syncs

Regards

Colleen

[former_member136769 · Accepted solution]

Hi Colleen,

I will do, sure, thanks for the heads up! so much information that can be put on WIKIs but problem is timeeeee! 🙂

Speak later,

Lu

[Colleen · Accepted solution]

For sure - happy to contribute to the Wiki. I tried a while back but was not authorised to create pages, etc. I'm finding quite a few documents in SCN community probably belong more in the Wiki space.

If SAP and/or Moderators have ideas for Wiki improvements, possible we could identify people in the community to contribute and focus on building it?

Regards

Colleen

[Former Member · Accepted solution]

Hello Luciana,

Yes, you are right and thanks a lot...!

[former_member136769 · Accepted solution]

KBA and WIKI are underway.. soon will be available! Thanks for moderating helpful answers!

[Former Member · Accepted solution]

Hello Luciana,

In continuation to this as you said Sync Job updates the details from the last sync connector.

Suppose in this case SOURCE 1 has complete user details but SOURCE 2 has very limited details.

Last sync was done on SOURCE 2 and it updates the same in GRACUSER table. But we need to have this table update based on the complete data.

Please advise on this is it possible.

Thanks in advance.