on 12-25-2011 8:16 PM
Hi All,
after i syncronize the User/Role/Profile data for the first time, i want to cross check this data in RAR database tables.
i have list of RAR tables but i could not find tables related User, Role and Profile. I tried in CCDebugger also.
What is the table name which holds all the table names in RAR?
Thanlks in advance
I assume from your RAR question instead of ARA that you are a 5.3 user and not GRC 10. If your are GRC Access Control 10, you can validate the syncronization process in the log using transaction SLG1.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hi Ammu,
RAR doesn't work in the conventional ABAP sense. RAR gets the actual values for User/Role/Profile data from Backend. Only the header data (such as ) is kept in GRC tables. Whenever Batch Risk Analysis is done, GRC RAR accesses backend, runs the ruleset against the authorisations assigned in backend, identifies the conflicts and stores this processed data in GRC tables as Risk to User mapping.
As far as syncronisation is concerned. Whenever GRC is synced, GRC table VIRSA_CC_GENOBJ stores the date and time when a particular User/Role/Profile was last syncronised. When this job is run again (In Incremental Mode), GRC checks whether any change has happened to User/Role/Profile after the last sync. If yes, it updates the data for changes items only. Incase of Full sync,the whole GRC frontend data is deleted and updated from backend. Objects to be synced are maintained in 'UPDATE' field of table VIRSA_CC_GENOBJ.
Rgds
Ganesh.S
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Ammu,
There's no SAP official document that describes all the tables, because, as I always say, as a customer you usually don't need to check the tables. Only is required in some special cases.
There's a tool for check some things that could be interesting: SAP Note 1370400 - Configuration Validator Diagnostic Tool- Access Control 5.3
Here some tables if you want anyway: VIRSA_CC_SYSUSR for users and VIRSA_CC_GENOBJ mentioned earlier for roles and profiles.
Cheers,
Diego.
Hi,
Try VIRSA_CC_GENOBJ.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.