Permission Level Risk Analysis is showing as "No Violation" in SAP GRC 10.1 SP5

[Former Member]

Hi All,

I am running a Role Level Risk Analysis for a risk contained sample role  in SAP GRC 10.1 SP5 system. Report results successfully for "Action Level" but it is showing "No Violation" at "Permission Level" though it had to show me permission level risks. I have checked the rule-set. And also have checked the Risk-rule-set which is generated, and it seems perfect.

Please help me to resolve this issue. Thanks in Advance!

Regards

Manisha

[Former Member]

Hello Manisha,

In addition to the above solutions, please find the following:

1. 1. Did you happen to check the following discussion?

https://scn.sap.com/thread/3599079

1. 2. Check if the status at Permission level is set to inactive?

Regards,

Rakesh Ram M

[Former Member]

Hello Manisha,

Please check SAP Note # 1262329

The reason why you can see risks at Action level but not at Permission level is because the user does not have the required permissions (authorization objects) to fulfill the conditions determined by the Risk.

What you can do to troubleshoot it is:

1. Looking at said Risk through NWBC and selecting the "Permissions" tab. Take note of all authorizations required

2. Cross-check it with the user or role being checked in the Risk Analysis. If the user does not have the minimum authorization values as defined in the Risk definition, it means your Risk Analysis is working perfectly.

Risks may show up in Action level and not in Permission level -- but never the other way around.

[Former Member]

Hi,

Could you please help me on the issue which I am facing.

Regards

Manisha

[Former Member]

Hi,

Could you please help me on the issue which I am facing.

Regards

Manisha

[former_member204479]

Hello Manisha,

Are you running the risk analysis from "Report and Analytics" tab? If so, this is based on the batch risk analysis data.

In that case, can you ensure that the batch risk analysis was executed for permission level also? If it was run only for action level then the case you mention might happen.

Thanks!

Sammukh

[Former Member]

Hi Sammukh,

Thanks for the reply!

I am trying to perform Ad-hoc Risk Analysis from Access Management tab on NWBC --> Role Level Risk Analysis and I am getting this incorrect result.

Regards

Manisha

[Former Member]

Hi Manisha,

Can you check the Value from and Value to fields for ACTVT in the function permission Tab.

If the value are like 1 and 2 you need to change these to 01 and 02 , the same as your backend system.

Regards,

Manju

[Former Member]

Hi Manju,

I have checked the rule-set in the GRC system, the field value is correctly set as 01 and 02 in Permission tab, as that of back-end system. Then also i am facing the issue.

Regards

Manisha

[Former Member]

Hi Manisha,

Do you see any error logs in SLG1 or ST22 dumps?

Can you try re-generating the SOD rules and check if the action and permission rules are successfully generated for all the risks.

Then , try running the risk analysis and check if you are able to see the violations at permission level.

Regards,

Manju

[Former Member]

Hi Manju,

Thanks for the reply!

I have successfully generated the rules for the risks at the permission level, but then also I am getting the incorrect results.

Also my SLG logs is clear and in GREEN color and I am not getting any ST22 dump

Regards

Manisha