Role creation: how to detect if is ERM or PFCG

[Former Member]

Hello,

We are using the ERM module of SAP GRC AC 5.3 SP5. We ar going to create roles through the ERM to the R/3. But is there a way to detect what roles are created by the ERM, and witch ones where created in the PFCG?.

I have seen that the ERM uses de RFC user to create the role, is there an object that can be detected as an creation of the ERM?

Best regards.

Pablo Mortera.

[Former Member]

Hi Pablo,

There is a field in PFCG screen which shows the creator of the role, i don't have SAP System with me right now (holidays here !!), but it should be in AGR_DEFINE or in some AGR* table. You can differentiate the roles based on the creator if you are using a separate RFC user ID for ERM connection...that's one of the approach to find out what are all the roles created by ERM..

Cheers !!

Zaheer

[Matthias038]

Right, it is the field AGR_DEFINE-CREATE_USR

ciao

Matthias