SAP GRC Access Control: Systems List for Function in Rule Set

[reza_ahoui2]

Hi

Our GRC Access Control was connected to few satellite systems. We disconnected couple of them but we still see their parts in each function in the AC rule set.

Example: we disconnected the satellite system of EBZCLNT900 from our GRC but still we see lines with EBZCLNT900 in the function (screenshot). How can we purge the function from such redundant data?

343.png

[josiane_costa · Accepted solution]

Hi Reza, have you run program GRAC_DELETE_ACCESS_RULES yet? From there, you can choose the Physical Systems or Logical Systems and select the 2 options:

Delete Rules data for Physical, Logical and Cross Systems
Delete Generated Rules

Hope it helps.

[reza_ahoui2]

The 3 records belong to a logical connector. It had thousands of records which we later removed through the program but for an unknown reason these 3 do not get removed through the program

[josiane_costa]

Hi Reza, in case the entries are related to a system that is not part of an existing connector group, these will not be deleted. So you may check whether these entries are not part of an existing connector group and if this is the case you may need to create it in SPRO and then run program

GRAC_DELETE_ACCESS_RULES again with it. Once executed and confirmed the entries are gone, you may delete the connector group. Thank you, Josiane

[reza_ahoui2]

Thank you Josiane

99% of our redundant records have been removed through the program.

3 records do not get removed through the program, what could be the reason?

Regards

Rzea