Incorrect Count in User Analysis Management Report

[Former Member]

Hello Experts,

Can anyone please explain the logic behind the count displayed on users analysis management report.

The count displayed for Total Users Analyzed, Users with no violations and Users with violations

does not match with the actula entries.

Here are the steps I followed to update the management reports.

1. First time scheuled job for user full sync.

2.Incremental User Sync job runs every day

3.Excluded Few objects and user and user group level

4.Sechuled Permission Level Batch RIsk Analysis Job (Full Sync)

5.Scheduled Management Report

Now when I download the management report data for the users with no violations and count the unique entries,

I get a different count as compared to the count displayed on the chart.

I get a unique count of 8049, whereas the count displayed on the chart is 8015.

Similar is the case for users with violations.

For this, I downloaded all the users with HighMediumLow+Critical violations.

Did a unique count and get less count .

Here I get a count of 377 whereas the displayed count is 420.

I get duplicate entries in Users with no violations and there are users who have violations are also displayed in

users with no violations report.

Please help!

[frank_bannert]

Hi Choudhary,

have a look at this SAP note "1239588 - Numbers of sync user / roles / profiles seem to be wrong".

It explains the numbers.

Best,

Frank

[Former Member]

Hello,

Msg# 1239588 talks about the situation where user count in SAP doesn't match the with the users analysed in RAR.

In my case, the count displayed on the user analysis management report (labels) doesn't match with the data populated in the pie chart.

For e.g. if we download the number of users with no violations ,count the unique users and compare with what is displayed on the chart , is different.

The value/count doesn't match with the actual users.

I did a comparison by downloading the users from the mgmnt report with the users listed in the table- VIRSA_CC_MGRISKD

for a specific system ID and found the count to be correct.

The only issue here is with the displayed value.

Thanks,

Renuka

[Former Member]

Doesn't the chart you are referring to display "total number of violations" not number of users? maybe some of your users have multiple violations?

Sorry, please disregard. I was looking at risk viaolations not User Analysis. Maybe you have some mitigated users?

Dave Wood

Edited by: David Wood on Mar 15, 2011 10:16 AM

[Former Member]

Hello David,

I have done following configuration in RAR.

1. Master Usesr Datasource- Master CUA system

2. Have excluded few users (using wild cards) and one user group.

3. Running User/Role/Profile Sync incremental job on daily basis and one full sync on monthly basis

4. Executed Full Sync Batch Risk Analysis job (for users) for one of the child systems

5. Scheduled Management report to update the charts of User Analysis Management Report.

6.Compared the results (displayed on chart) with the data downloaded from the charts

- Downloaded Users with No Violations (did a unique)

- Unique of Users with HighMediumLoq+Critical violations

Thanks,

Renuka