GRC role assignment menu is missing

[Former Member]

Hello,

We are missing the GRC role assignment menu under access management in GRC V.10.

The user that needs to maintain the role assignment has the following authorization:

SAP_GRC_FN_ALL

SAP_GRC_FN_BASE

SAP_GRC_FN_BUSINESS_USER

SAP_GRC_MSMP_WF_ADMIN_ALL

SAP_GRC_NWBC

SAP_GRC_RM_API_RISK_EXPERT

SAP_GRC_RM_API_RISK_MANAGER

SAP_GRC_RM_API_RISK_OWNER

SAP_GRC_RM_NWBC_2010

SAP_GRC_RM_OB_API_OPRISK_MNGR

SAP_GRC_SPC_CUSTOMIZING

SAP_GRC_SPC_GLOBAL_CEO_CFO

SAP_GRC_SPC_SETUP

SAP_GRC_SPC_SOX_AUT_SPECIALIST

SAP_GRC_SPC_SOX_ICMAN

SAP_GRC_WEBSERVICE

Also he has SAP_ALL and SAP_NEW profiles and GRC AC roles.

We reviewed the security guide and gave the user all needed authorization but still we can't maintain the user access for all PC objects (process, control etc.) because we don't see the relevant menu in the system.

Does anyone have an idea of what can be the cause for this?

Thank you in advance,

Shira

[Former Member]

Hello experts,

I'm having the exact same problem, although it's even stranger in my case. Under the same instance, in client 100 (DEV) I can actually see the GRC Role Assignments menu, but in client 200 (QAS), the menu does not appear.

I check the configuration of both clients (IMG) for General Settings, Shared Master Data Settings, Common Component Settings and Process Control and they are exact the same in client 100 and 200. The permissions in both clients are also the same. Do you guys have any idea or suggestions?

Thanks in advance!

M.

[Former Member]

There are two NWBC roles.  SAP_GRC_NWBC usually enables you to see the PC user assignment menu.  In some cases, I have seen that, if you have the other NWBC role for AC, it will conflict.  I'm not sure if that is your problem, but check your NWBC roles and see if you have multiple. 

[Former Member]

You are right Paul! Thank you so much for the tip. I removed the SAP_GRAC_NWBC (View Access Control Information Architecture) rol and now I'm able to visualize the menu again.

Thanks again.

Cheers,

M.

[Former Member]

Hello

Maybe you have an idea of why we still don't see the menu when the user has only the GRC_NWBC role and note 1681453 was implemented?

Kind Regards,

Shira

[Former Member]

Hello Shira,

Remove all the Access Control Management Roles and it should solve your issue.

Best Regards,

Mohammed Sharfuddin