cancel
Showing results for 
Search instead for 
Did you mean: 

Query on Incremental Synch in RAR 5.3

Former Member
0 Kudos

Hi all,

We made some changes to the user at the backend SAP system and performed User analysis for this user. The changes are reflected in the user analysis report without any Incremental Sync with the back end system.

If the changes made to the users are automatically reflected in realtime then what is the need of scheduling Incemental Sync on a daily basis [as recommended by SAP] for User/Roles and Profile?

We would like to know what are the updates that will happen when Incremental Sync is scheduled on a periodical basis

Thanks in Advance

Srihari.K

Accepted Solutions (0)

Answers (2)

Answers (2)

hkaur
Advisor
Advisor
0 Kudos

Hello Sri, Here is my clarification :

But when this Incremental Synch is only for updating the management reports then why do we need to schedule the User/Role/Profile synch on a daily basis and Batch risk analysis on a monthly basis. Can't we schedule both at a time whenever we need management reports

*While peforming analysis from Informer --> Risk Analysis --> User level, if you provide the name of specific user then it will not go to database to search that user but will go to backend.

But if you provide any wild characters or do analysis for all users, then the user is searched from database . Also, the standard user search on risk analysis screen will not return that user until you have done inc sync.*

As per SAP Notes 1179717 & 1034117 it is mentioned that changes to the users/roles/profiles will get reflected in the front end only when there is a Incremental Synch.

This is correct

Your explanation states that the users details (like auth obj, values etc) will be picked up from the backend SAP system for SoD analysis reports and not from the data stored in the VIRSA CC Tables

Is our understanding correct, if yes, then what is the need of updating the CC Tables using Incremental Sync.

The data like auth objects is stored in CC only for legacy systems. For SAP systems, the data is always picked using BAPI call (i.e. directly from backend.)

Hope this helps in understanding

Harleen

SAP GRC RIG

Former Member
0 Kudos

Hi Alpesh/Harleen,

Thanks a lot for your detailed explanation on this.

Best Regards,

Sri

hkaur
Advisor
Advisor
0 Kudos

Hello Sri,

Adhoc risk analysis(at User/Role level) picks data directly from backend.So any changes made to a user will be directly reflected in this report.

But for you to be able to see the updated user risks as part of Management report, you need to run the incremental sync and analysis again for this user.So, for the purpose of management report, you need to run incremental sync and analysis.

Hope this helps in understanding

Harleen

GRC RIG APJ

Former Member
0 Kudos

Hi Harleen,

Thansk for your reply.Your answer is very helpful.

But when this Incremental Synch is only for updating the management reports then why do we need to schedule the User/Role/Profile synch on a daily basis and Batch risk analysis on a monthly basis. Can't we schedule both at a time whenever we need management reports

As per SAP Notes 1179717 & 1034117 it is mentioned that changes to the users/roles/profiles will get reflected in the front end only when there is a Incremental Synch.

Your explanation states that the users details (like auth obj, values etc) will be picked up from the backend SAP system for SoD analysis reports and not from the data stored in the VIRSA CC Tables

Is our understanding correct, if yes, then what is the need of updating the CC Tables using Incremental Sync.

Thanks in Advance,

Best Regards,

Srihari.K

Former Member
0 Kudos

Sri,

I don't think you are getting Harleen's point. Background job risk analysis is used for batch risk analysis (more than one user, role and profile) whereas usually ad-hoc risk analysis are used for very small number of users/roles/profiles. When you run a ad-hoc risk analysis or simulation RAR checks the backend system for any updates and gives you the result in real-time. When you run a batch risk analysis, due to the amount of data involved, RAR will look at its own database for the running the risk analysis.

I don't think SAP has ever recommended to run user/role/profile sync everyday and management report every month. It depends and varies from customer to customer. If you don't make lots of user/role changes in a day then you might be able to survive by just scheduling the sync job every week or so.

Regards,

Alpesh