Risk Violation flag showing green even if risks are there in the request

[former_member771067]

Hi Experts,

We are working in demo systems with GRC AC 5.3_10.1.

1) when a user creates a request for new roles, the request after submission from the user goes to the manger as a part of approval process. The manager opens the request. At this stage, the system automatically runs a risk analysis in the background and if risks are found in the requested roles then the red flag appears automatically. We were able to see the red flag until patch 7.0. But after upgrading to patch 10, not able to see the red flag even after manually performing the risk analysis(it's showing risks in after performing risk analysis). The flag always looks green. Can anyone please clarify is this a bug in the patch 10 or we are lacking some configuration?

2) For the same roles requested in one demo system, after performing risk analysis, we are finding 2 risks. and in another system we are finding 3 risks. User attributes, Access Control patch level, GRC risk library remains same in both of the test systems. We thought roles we are requesting might be having some difference as systems are difference, and performed user and role comparison. But surpringly everything looks same. Can anyone please highlight, where we need to drill down for further analysis.

Thanks in advance.

Regards,

Gurugobinda

[Former Member · Accepted solution]

Hi Gurugobinda,

I haven't seen this issue in our local AC 5.3_10.1 system. Please open an OSS message for SAP to look into this.

Best Regards,

Sirish Gullapalli.

[Former Member · Accepted solution]

Hi Guru,

The first one doesn't make sense. This may be a bug but I am on SP 10 Patch 1 and this is working fine. Are you getting same risks when you run risk analysis in RAR? Make sure these are SoD risks not critical action risks.

The second one sounds like configuration or data issues. Are you connected to same SAP system from both the environments? Do you have any mitigating controls defined?

Regards,

Alpesh

[former_member366047]

Try restarting your J2EE.

If you are facing the same issue, then please take Sirish's advice and open a CSS message.

Ankur

SAP GRC RIG

[former_member771067]

Hi all,

Thanks a ton. Will post the resolution, once the issue would be addressed by the SAP development team.

Regards,

Gurugobinda