GRC Rule Files

[Former Member]

Hello,

After GRC installation, I must upload the Rule file.

I don't know what's the function of these files.Who could tell me? Thanks.

Business Processes:

ALL_Business_Processes.txt

Function:

ALL_Functions.txt

ALL_Functions_BP.txt

Function Authorization:

XX_function_action.txt

XX_function_permission.txt

Rule Set:

ALL_Ruleset.txt

Risk:

R3_risks.txt

R3_risks_desc.txt

R3_Risk_Ruleset.txt

[Former Member]

If there are no rules, then how will you know if someone is violating them.

It is like we have LAW and police makes sure no one violate them.

[former_member96398]

I'm having an issue where not all my risks are being loaded, they stop at the H* area and do not continue to load any of the MM, PP, SD risks.

Anyone else ever have this issue?

Curtis

[former_member366047]

Curtis-

Do you get an error while trying to load those risks?

Ankur

SAPBusinessObjects GRC

[Former Member]

Hello Custis,

Open your TXT files in Word and enable check in Technical mode for all the TABs and ENTERs.

Your TXT file have formatting issues.

Regards,

Surpreet

[former_member96398]

Thanks I'll give that a try.

[former_member96398]

I looked at the txt files in technical mode, there were no inconsistencies, so that doesn't seem to be a problem.

I copied the text file and deleted the risks already created and reran the import and it worked, so there must have been some consistency issue in there I couldn't find.

Thanks for the help.

Curtis

Edited by: Curtis Fincher on Feb 19, 2009 8:22 PM

[Former Member]

Hi Zeng,

Yes, these files will create rules for your RAR system. Creating rules is not a straightforward process.

Here is description for all those files:

1) Business Processes: ALL_Business_Processes.txt -> Definition of Business process

2) Function: ALL_Functions.txt -> Definition of function

ALL_Functions_BP.txt -> association between functions and Business process

3) Function Authorization:

XX_function_action.txt -> association between functions and transaction

XX_function_permission.txt -> association between functions and authorization objects

4) Rule Set: ALL_Ruleset.txt -> definition of rule set

5) Risk:

R3_risks.txt -> composition of risk

R3_risks_desc.txt -> definition of risk

R3_Risk_Ruleset.txt -> relationship between risk and rule set

Regards,

Alpesh

[Former Member]

All those files are for SoD risk check?

GRC check that a user has a risk, the user's role has OBR1 and CMOD(please check the following), but I could not find the rule definition in the *.txt file.

Conflicting Actions | Risk Description | Level | Business Process

-

---

OBR1&CMOD | B00103A01 | Medium | Basis

I was completely puzzled by this.

[Former Member]

"OBR1&CMOD | B00103A01 | Medium | Basis

I was completely puzzled by this."

Hi Zeng,

These are not present in TXT file, rather GENERATED when you run 'Generate Rule' Job.

Regards,

Surpreet

[Former Member]

Hi zeng

Those are the SAP standard rule set, business process, functions , function action and permission, Risks which are known to SAP . please upload all of them.

You can also define custom ones but you have to upload the ones from SAP first before start working on custom ones.

[Former Member]

Where exactly do you find those rule files (ALL_Business_Processes.txt). The doc's indicate they're "delivered" with GRC but where?

Thanks

[koehntopp]

There is a download called "Access Control 5.3 Text Files.

It's all in there.

Frank.