User Risk Analysis - Detailed report doesn't show values in some fields

[Former Member]

Hello Experts,

We had run User level Risk Analysis, and it completed successfully. When we have checked the results, detailed report, some of the columns have no description values assigned (like Permission Object, Field, Value columns doesn't any description of entries).

Then we had download static text and authorization objects from backend and uploaded the same again -ran the job again - and this time results show up proper description values for these 3 columns also.

So need your kind advise on following:

1. How frequently, we need to upload static texts and authorisation objects? Is there any way to automate this?

2. At GRC level, how can we check, if the existing static text and authorisation objects have been modified or deleted. Which tables will store these information?

3. Any pointers on finding out root cause of such issues.

Thanks

Davinder

[Former Member]

Thanks for your help n time.

[hkaur]

Hello Davinder,

Please find my comments below:

1) You need to upload static text and authorization objects only once unless there has been some change in them and you want that change to be reflected in RAR objects or you want to upload some data which is specific to a system.

Do we need to upload these after support package deployment of RTA's.

Will Static Text and Authorization Objects changes with time, like after support packages deployment, user/role/profile creations/modifications on backend systems.

No, these objects do not change with time or with the deployment of RTAs. Only if you upgrade your ERP or there is some change in auth objects or trxns then you need to upload them again.

2) Text objects are stored in : VIRSA_CC_OBJTEXT and

auth objects are stored in : VIRSA_CC_SAPOBJ

Our QA system which was built around 3 months back, we have observed that table VIRSA_CC_OBJTEXT and VIRSA_CC_SAPOBJ doesn't contain any entry. Only change after system setup is, deployment of GRC SP7.

Is there any possibility that GRC SP deployment will clear these two tables.

GRC SP deployment does not affect database so ideally it would not clear these tables. Are you sure that you were successuful in uploading these objects earlier? It could be that they were not uploaded succesfully at that time.

3) When you upload these objects for the first time, they will go in VIRSA_CC_SAPOBJ

4) After that if you want to upload some more objects which are system specific then they go to VIRSA_CC_SYSSAPOBJ table.

Static Text and Authorisation objects which we downloaded during system setup are also system specific, and we select the backend connector at the time of uploading in front end.

If we upload the static text and authorisation object again in frontend, will they overwrite the existing entries.

It will not overwrite but the entries will be added to database only if they are different from the ones that are already existing. Same entries will not be added to database.

Hope this helps

Harleen

SAPGRC RIG

[hkaur]

Hello Davinder,

1) You need to upload static text and authorization objects only once unless there has been some change in them and you want that change to be reflected in RAR objects or you want to upload some data which is specific to a system.

2) Text objects are stored in : VIRSA_CC_OBJTEXT and

auth objects are stored in : VIRSA_CC_SAPOBJ

3) When you upload these objects for the first time, they will go in VIRSA_CC_SAPOBJ

4) After that if you want to upload some more objects which are system specific then they go to VIRSA_CC_SYSSAPOBJ table.

Hope this clarifies the doubt.

Harleen

SAP GRC RIG

[Former Member]

Thanks Harleen for your response. Aprreciate if you can please clarify following doubts:

1) You need to upload static text and authorization objects only once unless there has been some change in them and you want that change to be reflected in RAR objects or you want to upload some data which is specific to a system.

Do we need to upload these after support package deployment of RTA's.

Will Static Text and Authorization Objects changes with time, like after support packages deployment, user/role/profile creations/modifications on backend systems.

2) Text objects are stored in : VIRSA_CC_OBJTEXT and

auth objects are stored in : VIRSA_CC_SAPOBJ

Our QA system which was built around 3 months back, we have observed that table VIRSA_CC_OBJTEXT and VIRSA_CC_SAPOBJ doesn't contain any entry. Only change after system setup is, deployment of GRC SP7.

Is there any possibility that GRC SP deployment will clear these two tables.

3) When you upload these objects for the first time, they will go in VIRSA_CC_SAPOBJ

4) After that if you want to upload some more objects which are system specific then they go to VIRSA_CC_SYSSAPOBJ table.

Static Text and Authorisation objects which we downloaded during system setup are also system specific, and we select the backend connector at the time of uploading in front end.

+If we upload the static text and authorisation object again in frontend, will they overwrite the existing entries.+

Hope this clarifies the doubt.