GRC Provisioning for SuccessFactors GRC 12.0

[lashele_harris]

All,

I've completed the configuration setup for GRC to SF using reference material:

https://blogs.sap.com/2020/05/12/sap-success-factors-employee-central-and-its-integration-with-sap-g...

I can see data in the GRAC tables, but I'm experiencing a few problems that I'm hoping I can get assistance with.

1. The SuccessFactors roles have successfully loaded in BRM; however, I'm unable to make any edits to the roles

2. When creating a Access Request, I'm unable to search for roles or users that I see in both (GRACUSER and GRACROLE).

3. I also believe there two level of security access for SuccessFactors. How do I request access to the role and the permission level (not sure if this is the right terminology for the level of authorization)

Regards,

LaShele

[Trinetra_Bhusha]

Hello,

Please find the answer below:

1. The SuccessFactors roles have successfully loaded in BRM; however, I'm unable to make any edits to the roles

- In GRC you can see the SF roles but can not edit them. Only static groups can be uploaded and provisioned.

2. When creating a Access Request, I'm unable to search for roles or users that I see in both (GRACUSER and GRACROLE).

- You need to upload the static group and make the status as Production.

3. I also believe there two level of security access for SuccessFactors. How do I request access to the role and the permission level (not sure if this is the right terminology for the level of authorization)

- You can only provision for static group.

Thanks,

Trinetra

[lashele_harris]

Trinetra,

I have loaded the static groups/ roles into BRM without any issues. Is there a difference in terminology for role and static group?

[Trinetra_Bhusha]

LaShele - You can refer my blog here for more details on Role Type Import SF Static group in GRC. I hope this will help you.

[lashele_harris]

Trinetra,

I appreciate your additional feedback; I reviewed your blog previously and followed those steps to load SF roles into GRC. However, I'm still having issues with creating an Access Request for those roles. I have been in contact with SAP and there seems to be a bug that they are currently troubleshooting. I will update this note once additional information is provided.