cancel
Showing results for 
Search instead for 
Did you mean: 

Problem with ERM in GRC 5.3

Former Member
0 Kudos

Hi,

We are facing an issue with generation of roles in back end ECC 6.0 system from GRC ERM.

Landscape : SAP ECC 6.0 and SAP GRC AC 5.3 ( on SP06 Patch 1).

Scenario : E2E implementation, GRC is being used to create roles and push into back end ECC system.

While generating roles in Back end ECC system the following errors are coming

1) If role generation is run in foreground mode : " Cannot generate role Z:Test1 provide valid & 1& 2 in table & 3"

2) If role generation is run as background job:"Error generating role Z:Test1 for system DEC 100: Unable to create role (Invalid Object S_TCODE in Objects table.)

Z:Test1 is the role name

Activities done so far:

Authorisation objects imported to GRC

Connectors tested successfully

Authorisation objects are checked in tables.

Accepted Solutions (0)

Answers (3)

Answers (3)

Former Member
0 Kudos

Thanks

hkaur
Advisor
Advisor
0 Kudos

Hello Prasant,

Is it happening for all the roles or some particular role? Which support pack of AC 5.3 are you on?

Reload the authorization data and see if you are able to generate the role.

Let me know if it does not help.

Harleen

SAP GRC RIG

Former Member
0 Kudos

On rare occasions, Risk Terminator prevents modifications to a Role by locking certain

tables. You can use the following log utility to remove the lock and continue generating

your Role.

Enter transaction code /n/VIRSA/ZRTDELLOCK, and enter the name of the Role.

BestRegards_

NaveenMurthy_

Former Member
0 Kudos

I have the same error when i am creating a new role in ERM but with new authorizations objects "Z" created in the Company; this authorizations objects are not maintained into SU24; There are old authorizations objects "Z" and i can create without problems roles and they are not maintainance too.

Do i need to upload the SAPTEXT and SAPAuthobj?

Regards,

Tomás Pérez

Former Member
0 Kudos

Hi,

It seems authorization issue.

Please re-upload Auth Objects and Text Objects.

Also make sure the webuser has authorization "SAP_ALL".

Regards,

Sabita

Former Member
0 Kudos

I re-uploaded the SAPtext and SAPAuthObj files and the problem continue.

Regards,

Tomás Pérez

Former Member
0 Kudos

Hello Tomás,

Check note 1570321 - Field values are not shown for selection when adding object

"Field values have to be maintained in transaction SU24, in the back-end SAP system, under the objects for the transactions. This is particularly important in the case of custom transactions and objects."

also check for the sync jobs.

Cheers,

Diego.