cancel
Showing results for 
Search instead for 
Did you mean: 
Read only

Unable to fetch system in GRC access request

Former Member
0 Kudos
1,705

Hello All,

I am unable to fetch the system in access request form. In the form I click on Add - > System. I should get the list of systems that are maintained in the settings in SPRO. I have maintained the systems in the integration scenarios such as PROV etc.

We are currently on GRC 10.1 SP15.

Request you to help me out with this.

Thanks in advance !

Best Regards,

Praman Mulay

Accepted Solutions (0)

Answers (5)

Answers (5)

Former Member
0 Kudos

Hi

Make sure that connector you have configured in SPRO have Active box "Checked".

Shivam

vandana_maini
Product and Topic Expert
Product and Topic Expert
0 Kudos

Hello,

Please ensure you maintain the connectors in SPRO --> IMG --> GRC --> Access Control --> Maintain Connector Settings.

Let me know if that works.

Vandana

Former Member
0 Kudos

Hi Vandana,

Thanks for your reply. We have already maintained the connectors in connector settings.

Best Regards,

Praman Mulay

Former Member
0 Kudos

Param,

Do you have any LDAP as the Datasource,if so can you check if you have access to the S_LDAP with ACTVT 51,03 and also for Auth Object GRAC_REQ do you have field : GRAC_RQFOR with M,O,S

Thanks

Ramesh

Former Member
0 Kudos

Hi Ramesh,

Thanks for your reply. The access is present already (We have the complete access). Any other thing I am missing.

Thank you !

Regards,

Praman Mulay

Former Member
0 Kudos

Hi Praman,

To eliminate the authorization issue, can you do the same by assign full access(GRAC_ALL & SAP_ALL).

Thanks

Ramesh

0 Kudos

It seems to be a configuration in SPRO configuration , maybe you are missing a step when maintaining the connection groups, scenarios or sub scenarios

Former Member
0 Kudos

Hi Rafael,

Thanks ! I got the configuration set up checked by couple of people as well. We did not miss out on any configuration. I just wanted to know if we are able to fetch the roles then why are we not able to see the systems.

Best Regards,

Praman Mulay

0 Kudos

Hi Praman,

Go to method GET_AUTH_CONNECTORS class CL_GRAC_ACCESS_REQUEST_UTIL, in line 29 the system tries to get the connector, in this method the system will check scenarios specific authorizations and more, the table from the system is taken is grfnconnscnlk,

I hope that this can be helpfull,

Regards

Rafael

Former Member
0 Kudos

Hi Praman,

I faced this issue with GRC 10.1 SP18, and it was caused by a missing authorization object that is newly introduced in 10.1. The object was GRAC_SYSTM. Also check to see that GRAC_SYS is also assigned.


Hope this helps,

Ken

Former Member
0 Kudos

Hi Ken,

Thanks for your reply. I have complete access to the authorization objects GRAC_SYSTM and GRAC_SYS. Am I missing some thing else ? Please let me know should you require more information.

Regards,

Praman Mulay

Former Member
0 Kudos

Next I would reproduce the error in non-prod, then assign SAP_ALL to your account and see if the systems become available thereafter. If they become available, then you know there's a missing authorization. If not, then it is likely configuration or data synchronization issue. Complete the full repository object sync and authorization syncs again.