Access Requests are going to ZESCAPE path after system upgrade.

[former_member1189878]

After my GRC system is upgraded to SPS16 my cup requests are going to ZESCAPE path with below error, though the roles are getting assigned to the users.

"You are not authorized to assign user group to roles"

The System type user has already been assigned to S_USER_GRP : CLASS = * and ACTVT = * in the GRC system.

[former_member1189878]

Hi Marcelo,

Thanks for your response!

I checked PRGN_CUST table and value for this CHECK_S_USER_SAS is set to NO.

Also, I gave SAP_ALL and SAP_NEW to RFC user in dev GRC system but ended up with same error.

Are there any other ways to tackle this issue as many CUP requests are getting dumped into ZESCAPE path.

Regards,

Chethan.

[Monsores]

Hi Nagachethan.

Please make sure that you have also upgraded your GRC plugin (GRCPINW) on your target systems together with your main GRC system upgrade (GRCFND_A)

Are you facing this same issue when performing provisioning against any of your target systems?

Another thing that you can try is to enable MSMP debugging (tcode GRFNMW_DEBUG) and check the logs of your access requests (tcode GRFNMW_DBGMONITOR_WD) to see if there is any error reported there.

Regards,

Marcelo

[Monsores]

Hi Nagachethan.

Check PRGN_CUST to confirm if maybe your S_USER_SAS checking has been enabled.

Additionally, if this issue is happening also on your Dev or Sandbox system I'd temporarily assign SAP_ALL to your RFC user to quickly be sure that it is an auth issue.

Once (if) you are sure that it is an auth issue you can remove SAP_ALL and do an auth trace for your RFC user to check what is missing.

Regards,

Marcelo Monsores