GRAC_ERM_MASS_ROLE_UPD - question about Role Mass Update in GRC

[lukasz_konieczny]

Hello all,

We are rocking quite standard GRC solution, but our role development process is not so standard.
We are creating and changing all roles in the backends directly.

If we are creating a new role, then after deploying it into production we are importing this role to GRC via file upload. During this process we are getting all the authorization data from backend into GRC but this is one time. Every time the role changes, we don't get fresh data about current authorization objects.
Thanks to standard synchronization jobs GRC is aware of the change, but authorization data is not being pulled.

Tu update the Permissions tab we have to manually run Role Update webdynpro app:

Problem with this solution is that this is a manual work and the app can't really handle mass update.
App times out when more than about 2k roles are being selected for update.

Question:
We need an ABAP program that could be scheduled as a job and update all the roles from all of our backends weekly for example.
Do you know if such tool exists in standard GRC?

[Claudio91]

Hi!

[Claudio91]

Hi!
Check if your are running PFCG_SYNG_AUTH job periodically after the changes.

[lukasz_konieczny]

There is no such program anymore. And the GRAC_PFCG_AUTHORIZATION_SYNC does something different.