AE 5.2 cross system risk analysis with CC 4.0

[Former Member]

Hi,

We have an unique situation.

We have CC 4.0 (central) set up in ECC system where the rules and risks are defined for systems such as R/3, HR and SRM

We need AE to use this central CC system to do the risk analysis when an access request for HR or SRM is submitted in AE 5.2. Right now for a request to a HR system, risk analysis is being done in HR system where there are no rules and hence no risks are identified.

Environment :

CC 4.0 in ECC 5.0 with VIRSANH RTA 520_640 Level 3 and VIRSAHR RTA 520_640 Level 2

AE 5.2 JAVA in NW 7.0 SP level 2

Risk analysis for Access requests to ECC system is done with out any issues and the connectors in AE are defined as well as CC 4.0 configuration for cross system is enabled.

Please give your suggestions and also tell me if this below scenario is possible.

Use CC 5.2 Java stand alone system and define logical/cross system to connect to multiple systems such as HR and SRM and use those specific rules to do the risk analysis.

Thanks

[Former Member]

Hi RM,

You can use the CC 5.2 installed on standalone J2EE Server to the backend Systems. You can use the rule sets you have customized in the Central System and perform Risk Analysis on Roles and Users in the different back end SAP systems.

You need to configure the JCO Connectors to the back end systems first and then J2EE Adapters which connect to the JCo Destinations before running the rsik analysis on the systems.

Pls go through the CC 5.2 Installation Manual on SAP Service Market place and there are pages which talk about your specific requirement.

Hope this helps.

Regards,

Kiran Kandepalli.

[Former Member]

Kiran,

Thanks for the reply. Is there any way to make this work with out using CC 5.2 Java?

Regards

[Former Member]

Hi RM,

You can setup Risk Analysis inside AE Configuration.

You can identify the level of risk analysis and specify the Compliance Calibrator version for processing risks.

See the details from the AE Configuration Manual

In the Select Compliance Calibrator Version pane, from the Version drop-down list, select the version of Compliance Calibrator.

In the URI field, enter the appropriate URI address for the web services.

In the User Name field, enter your User ID. Your User ID must have security access

to web service.

In the Password field, type your password.

Select the Perform Org Rule Analysis option to perform org. rule analysis at risk

analysis time.

Note: There are two selectable versions of Compliance Calibrator. If you select 5.0 Web Service, three additional fields appear (URI, User Name, and Password). For the URI field, you need to navigate to the

SAP NetWeaver Web Application Server Home page > Web Services Navigator > CCRiskAnalysisService > WSDLs > Standard link of Document, where you will see a list of all web

services in the server. Select the desired URI address.

If you select Compliance Calibrator 4.0, there is no need to connect to a URI address

So the answer is YES, you can connect AE 5.2 with CC 4.0 for Risk Analysis.

Hope this helps,

Regards,

Kiran Kandepalli.

[Former Member]

Kiran,

Thank you. We selected 4.0 only but this is not working for cross-system risk analysis from AE.

Regards

[Former Member]

AE 5.2 does not support cross sytem analysis.

Thanks

[Former Member]

Hi,

Our requirement is not cross-system analysis. We have to use the HR rules defined in ECC system and ask AE to do risk analysis when provisioning HR related access using AE 5.2

Please let me know if I need to be more explanative.