on 06-07-2012 10:30 AM
Hello,
We are missing the GRC role assignment menu under access management in GRC V.10.
The user that needs to maintain the role assignment has the following authorization:
SAP_GRC_FN_ALL
SAP_GRC_FN_BASE
SAP_GRC_FN_BUSINESS_USER
SAP_GRC_MSMP_WF_ADMIN_ALL
SAP_GRC_NWBC
SAP_GRC_RM_API_RISK_EXPERT
SAP_GRC_RM_API_RISK_MANAGER
SAP_GRC_RM_API_RISK_OWNER
SAP_GRC_RM_NWBC_2010
SAP_GRC_RM_OB_API_OPRISK_MNGR
SAP_GRC_SPC_CUSTOMIZING
SAP_GRC_SPC_GLOBAL_CEO_CFO
SAP_GRC_SPC_SETUP
SAP_GRC_SPC_SOX_AUT_SPECIALIST
SAP_GRC_SPC_SOX_ICMAN
SAP_GRC_WEBSERVICE
Also he has SAP_ALL and SAP_NEW profiles and GRC AC roles.
We reviewed the security guide and gave the user all needed authorization but still we can't maintain the user access for all PC objects (process, control etc.) because we don't see the relevant menu in the system.
Does anyone have an idea of what can be the cause for this?
Thank you in advance,
Shira
I have faced same issue and got the issue resolved with below solution.
For PC NWBC tabs we need to add role(SAP_GRC_NWBC) and if AC related role(SAP_GRAC_NWBC) is assigned it wont overwrite with SAP_GRC_NWBC role and unable to find some menu’s under tabs.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hello experts,
I'm having the exact same problem, although it's even stranger in my case. Under the same instance, in client 100 (DEV) I can actually see the GRC Role Assignments menu, but in client 200 (QAS), the menu does not appear.
I check the configuration of both clients (IMG) for General Settings, Shared Master Data Settings, Common Component Settings and Process Control and they are exact the same in client 100 and 200. The permissions in both clients are also the same. Do you guys have any idea or suggestions?
Thanks in advance!
M.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hi Shira,
Did you activate plugins GRCPI in SPRO ?
governance, risk and compliance -> access control -> maintain plugin setting
You should activate all activity for the connector.
Once activate, 'user access' appears in NWBC
Best Regards
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hello
All application are activated in AC but this issue is for PC.
We can see the assignment already performed to the org units and process/controls etc in their master data BUT
we don't see the user access menu in which we can choose an org unit with its processes/controls and review all the assignments they have and change them there. This is also the place where you assign the process owners since there is no other place for it.
We used to have it but for some reason we can't now. we made sure that there was no change to the user authorizations and none was made.
The user that we are testing it with has full GRC AC and PC authorizations.
another user that has roles:
SAP_GRC_FN_BASE
SAP_GRC_FN_BUSINESS_USER
SAP_GRC_NWBC
SAP_GRC_SPC_SOX_ICMAN
can see the role assignment menu under the access management and both users are maintained as SOX ICM in corporate level.
(the user with which we have the issue has the same roles and more...)
Would appriciate any ideas you may have on this issue.
Thank you,
Shira
I used Google translator to do it = )
Symptom
In a launchpad will display all entries. There are missing entries that refer to a repository.
Further terms
Report Launchpad, FPM Navigation
Cause and prerequisites
error
solution
Remove the attachment note_1681453.txt described changes in XSLT program APB_LPD_XML_TO_TABLE one. Then delete the shared memory area instances' of the shared memory area CL_APB_LPD_SHM_AREA (transaction: SHMM).
------------------------------------------------------------------------
|Manual Pre-Implement. |
------------------------------------------------------------------------
|VALID FOR |
|Software Component SAP_ABA SAP Application...|
| Release 702 SAPKA70201 - SAPKA70211 |
------------------------------------------------------------------------
Install the correction described in the attachment for the XSLT program
APB_LPD_XML_TO_TABLE one.
That's really good.
@Shira, I also suggested you the same note on 8th-June. You can check this once again into your system. Hopefully this should resolve your issue.
"
Hi Shira,
Are you on NW 7.02 SP11? There is one recent fix from NW under SAP Note 1681453 related to same issue. Please check with your NW team and implement this, if required.
Hopefully, this would resolve your issue.
Thanks & Regards
Neeraj
"
Thanks & Regards
Neeraj
Hi Shira,
I've the same issue but I found the "central owner" in nwbc :
setup -> access owners -> access control owner
Hopefully, this would resolve your issue.
Thanks & Regards
Laura
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hi Shira,
At first the role SAP_GRC_FN_ALL is enough for power users in the frontend.
Be aware that the menus in the front end may vary depending on the activated applications (AC, PC and RM) in your system.
You can find the role assignments under menu "Access Management" / "GRC Role assigments" / "Organizations" and/or "Business Process". These two links contains relevant roles assignments for organization and business process levels.
Best regards.
Hi Shira,
Hope you are doing good!!!
Could you please check your role 'GRCACCMGMT' in LPD_CUST whether this has GRC Role Assignment Folder. And more of, whether all the links into this are active and nothing is listed under inactive applications link.
Thanks & Regards
Neeraj
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hello Neeraj,
Thank you for your answer.
We are working with NWBC and not portal.
We are in GRC 10.0 SP06
We didn't find role GRCACCMGMT but when searching for *MGMT* roles we found only the following roles:
SAP_GRAC_ROLE_MGMT_ADMIN
Role Management Admin
SAP_GRAC_ROLE_MGMT_DESIGNER Role
Management Designer
SAP_GRAC_ROLE_MGMT_DESINGER Role
Management Designer
SAP_GRAC_ROLE_MGMT_ROLE_OWNER
Role Owner
SAP_GRAC_ROLE_MGMT_USER
Role Management Business User
SAP_GRAC_SUPER_USER_MGMT_ADMIN
Super User Administrator Role
SAP_GRAC_SUPER_USER_MGMT_CNTLR
Super User Controller Role
SAP_GRAC_SUPER_USER_MGMT_OWNER
Super User Owner Role
SAP_GRAC_SUPER_USER_MGMT_USER
Super User Firefighter
Regards,
Shira
Hi Shira,
My mean to say for role 'GRCACCMGMT' is in Transaction Code 'LPD_CUST' (not in PFCG).
"
Could you please check your role 'GRCACCMGMT' in LPD_CUST whether this has GRC Role Assignment Folder. And more of, whether all the links into this are active and nothing is listed under inactive applications link.
"
Thanks & Regards
Neeraj
Hi Shira,
Make sure all the BC sets are activated and basic master data is created (like regulation etc.,).
regards,
Rajeshwari
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.