How can HANA Application Privileges be defined in risks in GRC Access Control?

[martin_vanbaal]

We tried to define a risk for an SAP HANA Application Privilege (example: sap.hana.xs.admin::JobAdmin) in GRC Access Control but it is not detectable by the user-risk-analysis.
Has anybody ever done this successfully?

We debugged the communication on the grc-plugin-Interface and have the impression that application privileges implementation has possibly been 'forgotten'.

[martin_vanbaal]

Dear Jeevan,

yes, it works now. Please see an example attached. It shows the detected Application Privileges JobAdmin and SAML Admin.

[martin_vanbaal]

To answer my question myself: The functionality was indeed missing. SAP provided recently a solution with Note: 3031944. (Beware of prerequisite notes as specified in 2589878 !)

[jeevan_pulapa]

Hi Martin.. did it work for you? We implemented 3031944 and its prereqs but application privileges still do not show up in risks analysis. Here is a test function I am using.