GRACACTUSAGE shows wrong information for User ID field

[former_member615872]

Dear all,

We are experimenting an strange scenario where in action synch report GRAC_ACTION_USAGE_SYNC.

It occurs only for one system and not for all users, therefore we think about an authorizations problem. As you can see in the image below, USER_ID field is been populated in table GRACACTUSAGE with an alphanumeric value but it doesnt correspond with any user ID. Could anybody help us with any idea?

We tried by testing with authorization object S_TOOLS_EX but it doesn't work

We are working on SAP GRC 11 AC SP21

Thanks in advance.

Kind regards.

[former_member615872 · Accepted solution]

Dear all,

we have solved it. It was due to a lack of authozations. It was removed the assignement of a role to RFC user. It is necessary for RFC user to have assigned authorization object S_TOOLS_EX with value S_TOOLS_EX_A.

Thanks.

[former_member615872]

Dear all,

Thanks about your replies.

By running function /GRCPI/GRIA_TRAN_GET_LOG on remote system, we are getting results properly according to transactions executed. Field BNAME is correctly filled by running this transaction locally.

However, by running report "GRAC_ACTION_USAGE_SYNC" GRC system, field BNAME is been populated with a wrong value in table "lt_tran_log_out" by calling FM if_grac_ad_out_grcpi_types=>c_gria_tran_get_log (constant valued as /GRCPI/GRIA_TRAN_GET_LOG) in method IF_GRAC_AD_AUTH_MGMT~GET_ACTION_LOG.

How could it be possible that this function get values succesfully but it could converts as alphanumeric value in GRC system when it is executed from remote system.

Kind regards

[RameshVithanala]

Hi Marcos,

From your screenshot,I Don't see the Terminal Column,you can add the Terminal from Choose Fields for selction and try to dig more and find out whose terminal(Comuper/Laptop) is it?

Thanks

Ramesh

[madhusap]

Hi Marcos,

All Sync jobs in GRC completely rely on the data in your target system and in your case connector is PP1CLNT500.

1. First check if there are any logs in STAD with the alphanumeric User ID being shown in action usage table.

2. Also check if there are any logs in SM20 with the same alphanumeric User ID.

If you cannot find any logs in both STAD and SM20 then i suggest to check if there any change logs with that alphanumeric User ID in PP1CLNT500.

Regards,

Madhu

[RameshVithanala]

Hi Marcos,

Do you have any RFC's user ID or any external user ID that is a Dialog User and executing the tcode SU01?Do you see the same user_ID in the table GRACMGMTACTUSAGE as well?

Thanks

Ramesh