on ‎2012 Jun 07 10:30 AM
Hello,
We are missing the GRC role assignment menu under access management in GRC V.10.
The user that needs to maintain the role assignment has the following authorization:
SAP_GRC_FN_ALL
SAP_GRC_FN_BASE
SAP_GRC_FN_BUSINESS_USER
SAP_GRC_MSMP_WF_ADMIN_ALL
SAP_GRC_NWBC
SAP_GRC_RM_API_RISK_EXPERT
SAP_GRC_RM_API_RISK_MANAGER
SAP_GRC_RM_API_RISK_OWNER
SAP_GRC_RM_NWBC_2010
SAP_GRC_RM_OB_API_OPRISK_MNGR
SAP_GRC_SPC_CUSTOMIZING
SAP_GRC_SPC_GLOBAL_CEO_CFO
SAP_GRC_SPC_SETUP
SAP_GRC_SPC_SOX_AUT_SPECIALIST
SAP_GRC_SPC_SOX_ICMAN
SAP_GRC_WEBSERVICE
Also he has SAP_ALL and SAP_NEW profiles and GRC AC roles.
We reviewed the security guide and gave the user all needed authorization but still we can't maintain the user access for all PC objects (process, control etc.) because we don't see the relevant menu in the system.
Does anyone have an idea of what can be the cause for this?
Thank you in advance,
Shira
Help others by sharing your knowledge.
AnswerRequest clarification before answering.
Hi Shira,
Did you activate plugins GRCPI in SPRO ?
governance, risk and compliance -> access control -> maintain plugin setting
You should activate all activity for the connector.
Once activate, 'user access' appears in NWBC
Best Regards
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hello
All application are activated in AC but this issue is for PC.
We can see the assignment already performed to the org units and process/controls etc in their master data BUT
we don't see the user access menu in which we can choose an org unit with its processes/controls and review all the assignments they have and change them there. This is also the place where you assign the process owners since there is no other place for it.
We used to have it but for some reason we can't now. we made sure that there was no change to the user authorizations and none was made.
The user that we are testing it with has full GRC AC and PC authorizations.
another user that has roles:
SAP_GRC_FN_BASE
SAP_GRC_FN_BUSINESS_USER
SAP_GRC_NWBC
SAP_GRC_SPC_SOX_ICMAN
can see the role assignment menu under the access management and both users are maintained as SOX ICM in corporate level.
(the user with which we have the issue has the same roles and more...)
Would appriciate any ideas you may have on this issue.
Thank you,
Shira
I used Google translator to do it = )
Symptom
In a launchpad will display all entries. There are missing entries that refer to a repository.
Further terms
Report Launchpad, FPM Navigation
Cause and prerequisites
error
solution
Remove the attachment note_1681453.txt described changes in XSLT program APB_LPD_XML_TO_TABLE one. Then delete the shared memory area instances' of the shared memory area CL_APB_LPD_SHM_AREA (transaction: SHMM).
------------------------------------------------------------------------
|Manual Pre-Implement. |
------------------------------------------------------------------------
|VALID FOR |
|Software Component SAP_ABA SAP Application...|
| Release 702 SAPKA70201 - SAPKA70211 |
------------------------------------------------------------------------
Install the correction described in the attachment for the XSLT program
APB_LPD_XML_TO_TABLE one.
That's really good.
@Shira, I also suggested you the same note on 8th-June. You can check this once again into your system. Hopefully this should resolve your issue.
"
Hi Shira,
Are you on NW 7.02 SP11? There is one recent fix from NW under SAP Note 1681453 related to same issue. Please check with your NW team and implement this, if required.
Hopefully, this would resolve your issue.
Thanks & Regards
Neeraj
"
Thanks & Regards
Neeraj
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.