How to Uninstall GRC 5.3 to allow reconfiguration

[martin_E]

Hi,

We have situation where we wish to basically start configuration of GRC 5.3 from scratch. This will include reimport of the initial xml config files, rules, setup of connectors etc... We used SDM to successfully uninstall all the grc related components from the Java side :

sap.com VIRACLP 530.700 SP10 (1000.530.700.10.0.20091208181824)

sap.com VIRAE 530.700 SP10 (1000.530.700.10.2.20100217232143)

sap.com VIRCC 530.700 SP10 (1000.530.700.10.2.20100128223758)

sap.com VIREPRTA 530.700 SP10 (1000.530.700.10.0.20091208181823)

sap.com VIRFF 530.700 SP10 (1000.530.700.10.0.20091208181826)

sap.com VIRRE 530.700 SP10 (1000.530.700.10.0.20091208181828)

We could not of course uninstall the ABAP side ERP6 backend system RTAs, but were (overly?) optimistic that a redeployment of Java components would create a blank GRC canvas for reconfiguration. When the above components were again reinstalled via JSPM, all the previous data\configuration was intact and fully accessible.

I cannot find any information on how or where this configuration and other GRC data should be deleted from in order to allow us to start the GRC configuration process from scratch.

We use CC, RAR, CUP, Superuser PM, GRC componnets.

Where does the GRC related data, configuration data etc., reside?

Is it possible to cleanse the systems (ABAP & JAVA) of this data and bring the GRC framework to a state equivalent to a raw install?

Thanks for your help,

Steve Amorsen

[Former Member · Accepted solution]

Hi Steve,

You can not uninstall DB of GRC Access Control. Java applications do not allow you to remove disctionary object which contains all the data. For GRC AC, all the data resides in underlying NetWeaver Database.

To remove all the front-end data (Java), you will have to delete/truncate data from all the tables starting with 'Virsa' and 'VT'. Again, this is not at all recommended by SAP.

To remove all the ABAP data (this will be only related to FF/SPM), you can go to SPM and get all the table names by clicking through each link on the top.

Regards,

Alpesh

[martin_E]

I believe the ability to completely delete the GRC configuration framework to a state equivalent to a raw install is provided after to following patch level:

VIRAE 530.700 SP10 (1000.530.700.10.2.20100217232143) SAP AG MAIN_AC53PAT_C 20100302154119

VIRCC 530.700 SP10 (1000.530.700.10.2.20100128223758) SAP AG MAIN_AC53PAT_C 20100302165139

This will provide delete functionality in the path "SAP GRC->Configuration->Utilities->Manage Deletion"

At this page the options are available to "Delete Systems" or "Delete All Rules"

This can be very useful options and maybe supercede the requirement for a deletion script per se.

Thanks everyone for your immediate support.

Steve

[martin_E]

Alpesh\Siresh,

Thanks for your quick response on this, point awarded for pay.

Will query SAP for script to delete data.

Thanks,

Steve

[Former Member]

Steve,

As far as I know, SAP stopped providing SQL queries to delete data some time back. I have asked for these scripts at least couple of time and I was told that SAP does not recommend direct DB opeartions so would not be able to provide the scripts. As I mentioned before, you can create your own script by combining all the tables starting with 'Virsa_" and "VT_".

If by chance, you receive the scripts then please let me know.

Also, the above options only deal with Java (web browser) based modules. It won't do anything for ABAP based module (which is SPM). You will need to delete those tables manually via SE16 or SPM.

Regards,

Alpesh

[former_member366047]

Steve,

Alpesh is correct, we do not provide delete scripts anymore. You will have to wipe out the data in the DB manually by dropping/truncating tables. You can work with your DBA to do this.

Ankur

SAP GRC RIG

[Former Member]

Hi Steve,

"Option 3.)" was updated after consulting with GRC support.

Option3.) SAP is in process of creating a SAP Note for Delete script, Instead of delivering Delete Script script via OSS message. Will update you as the Note gets released.

Note # 1416728 might help you with your deletion in RAR 5.3 SP10.

Best Regards,

Sirish Gullapalli.

[Former Member]

Hi Steve,

You can bring the GRC framework to a state equivalent to a raw install by following options:

Option 1.) You should have a base-line backup before GRC installation. If so then apply that base-lin backup and deploy GRC components. If there is no base-lin backup, then

Option 2.) Uninstall and re-install J2EE and then follow up with rest of the installation process. If you don't want to go through re-install process, then

**Correction to Option 3**

Option3.) SAP is in process of creating a SAP Note for Delete script, Instead of delivering Delete Script script via OSS message. Will update you as soon as the Note gets released.

Please refere to Note # 1416728 to Manage your deletion in RAR 5.3 SP10.

Hope this helps.

Best Regards,

Sirish Gullapalli.