GRC User Management with ABAP Data Source

[Former Member]

Hi all,

We have given our ABAP - SAP Back end system as the Datasource for the User Management to the GRC Applications.

But when we did a search for User * with Datasource as ABAP only 40 users are appearing. Do we need to Synchronize to get all the users from the ABAP System.

Also can we maintain separate passwords for SAP Application [AS ABAP] and GRC Application [AS JAVA] even though the user is picked up from the AS ABAP

Please help us in resolving this

Thanks and Best Regards,

Srihari.K

Edited by: Sri Kusetti on Jul 28, 2009 8:36 AM

[Former Member]

Hello Srihari,

when searching for users, you must be able to see the field "Maximum Number of Hits". Put in a value like '1000' or more and it will fetch the more users here. By default this is set to 10 and it brings only 10 users. Increase this number to fetch more number of users.

Regards,

varun

[Former Member]

Hi Varun,

Thanks for the answer

We are receiving the following error message when we wish to reset a password for a user in UME.

"An error occurred in the persistence. The original message (possibly not translated) was: "Cannot update user UACC.R3_DATASOURCE.EBRAHAM in ABAP backend system. Reason: The UME/ABAP adapter has recognized that the communication user is only assigned to the read-only role SAP_BC_JSF_COMMUNICATION_RO (or no role at all) in the backend system. Therefore UME was set to read-only mode for users from the backend system. See SAP Note 908911 for further information.". Contact your system administrator"

Can you please let us know what might be the reason?

We checked and the maximum hits configured are already 1000. Not sure why it is not showing all the users.

Thanks and Best Regards,

Srihari.K

[Former Member]

Hello Srihari,

This is not a problem of GRC. Its a problem of UME where it seems that datasource in UME is set to ABAP backend and the communicating user does not have required auth. Your system administrator should be able to help you with it.

Check SAP Note 908911 which talks about this issue and might be able to help you with this problem

Regards,

Varun

[Former Member]

Sri,

Right now, the connection between UME and SAP ABAP is read only so you won't be able to change SAP password from UME. You need to change the settings to read/write and you will be able to change SAP passwords from UME.

Regards,

Alpesh