GRC role assignment menu is missing

[Former Member]

Hello,

We are missing the GRC role assignment menu under access management in GRC V.10.

The user that needs to maintain the role assignment has the following authorization:

SAP_GRC_FN_ALL

SAP_GRC_FN_BASE

SAP_GRC_FN_BUSINESS_USER

SAP_GRC_MSMP_WF_ADMIN_ALL

SAP_GRC_NWBC

SAP_GRC_RM_API_RISK_EXPERT

SAP_GRC_RM_API_RISK_MANAGER

SAP_GRC_RM_API_RISK_OWNER

SAP_GRC_RM_NWBC_2010

SAP_GRC_RM_OB_API_OPRISK_MNGR

SAP_GRC_SPC_CUSTOMIZING

SAP_GRC_SPC_GLOBAL_CEO_CFO

SAP_GRC_SPC_SETUP

SAP_GRC_SPC_SOX_AUT_SPECIALIST

SAP_GRC_SPC_SOX_ICMAN

SAP_GRC_WEBSERVICE

Also he has SAP_ALL and SAP_NEW profiles and GRC AC roles.

We reviewed the security guide and gave the user all needed authorization but still we can't maintain the user access for all PC objects (process, control etc.) because we don't see the relevant menu in the system.

Does anyone have an idea of what can be the cause for this?

Thank you in advance,

Shira

[former_member848901]

I have faced same issue and got the issue resolved with below solution.

For PC NWBC tabs we need to add role(SAP_GRC_NWBC) and if AC related role(SAP_GRAC_NWBC) is assigned it wont overwrite with SAP_GRC_NWBC role and unable to find some menu’s under tabs.

[Former Member]

Hello experts,

I'm having the exact same problem, although it's even stranger in my case. Under the same instance, in client 100 (DEV) I can actually see the GRC Role Assignments menu, but in client 200 (QAS), the menu does not appear.

I check the configuration of both clients (IMG) for General Settings, Shared Master Data Settings, Common Component Settings and Process Control and they are exact the same in client 100 and 200. The permissions in both clients are also the same. Do you guys have any idea or suggestions?

Thanks in advance!

M.

[Former Member]

There are two NWBC roles.  SAP_GRC_NWBC usually enables you to see the PC user assignment menu.  In some cases, I have seen that, if you have the other NWBC role for AC, it will conflict.  I'm not sure if that is your problem, but check your NWBC roles and see if you have multiple. 

[Former Member]

You are right Paul! Thank you so much for the tip. I removed the SAP_GRAC_NWBC (View Access Control Information Architecture) rol and now I'm able to visualize the menu again.

Thanks again.

Cheers,

M.

[Former Member]

Hello

Maybe you have an idea of why we still don't see the menu when the user has only the GRC_NWBC role and note 1681453 was implemented?

Kind Regards,

Shira

[Former Member]

Hello Shira,

Remove all the Access Control Management Roles and it should solve your issue.

Best Regards,

Mohammed Sharfuddin

[Former Member]

Hi Shira,

Did you activate plugins GRCPI in SPRO ?

governance, risk and compliance -> access control -> maintain plugin setting

You should activate all activity for the connector.

Once activate, 'user access' appears in NWBC

Best Regards

[Former Member]

Hello

All application are activated in AC but this issue is for PC.

We can see the assignment already performed to the org units and process/controls etc in their master data BUT

we don't see the user access menu in which we can choose an org unit with its processes/controls and review all the assignments they have and change them there. This is also the place where you assign the process owners since there is no other place for it.

We used to have it but for some reason we can't now. we made sure that there was no change to the user authorizations and none was made.

The user that we are testing it with has full GRC AC and PC authorizations.

another user that has roles:

SAP_GRC_FN_BASE

SAP_GRC_FN_BUSINESS_USER

SAP_GRC_NWBC

SAP_GRC_SPC_SOX_ICMAN

can see the role assignment menu under the access management and both users are maintained as SOX ICM in corporate level.

(the user with which we have the issue has the same roles and more...)

Would appriciate any ideas you may have on this issue.

Thank you,

Shira

[rajeshwari_akkamgari]

Hi Shira,

Hope you have not clicked on User Settings->Hide link 'GRC Role assignment' ( it comes when you right click on the work center)? If its hidden like this,you have to make this visible again.

regards,

Rajeshwari

[Former Member]

I assume under Access Management, you can see the GRC Role Assignments menu.  If you can, when you choose Organizations, make sure you select the view "Standard Hierarchy". 

[Former Member]

Hello Paul

The issue is that we can't see the role assignment menu

Regards,

Shira

[Former Member]

Hello Rajeshwari

We don't see the header of "GRC role assignment" in my home tab so we can't even right click on it to make it unvisible.

Regards,

Shira

[joaopaulo_fortes]

Hi Shira,

I have the same problem in my new AC installation and I found the SAP note 1681453.

it seems to be related to a problem in SAP ABAP (NW 7.02 SP11). I just requested my BASIS team to apply and I don´t know if it will solve the problem.

Best regards.

[Former Member]

Hello Joao

The note is in German so I can't understand what it is reffering to hence our basis team won't understand and know what to do. Do you know if it has translation?

Would appriciate if you will let me know of the implementation results.

Regards,

Shira

[joaopaulo_fortes]

I used Google translator to do it = )

Symptom

In a launchpad will display all entries. There are missing entries that refer to a repository.

Further terms

Report Launchpad, FPM Navigation

Cause and prerequisites

error

solution

Remove the attachment note_1681453.txt described changes in XSLT program APB_LPD_XML_TO_TABLE one. Then delete the shared memory area instances' of the shared memory area CL_APB_LPD_SHM_AREA (transaction: SHMM).

------------------------------------------------------------------------

|Manual Pre-Implement.                                                 |

------------------------------------------------------------------------

|VALID FOR                                                             |

|Software Component   SAP_ABA                        SAP Application...|

| Release 702          SAPKA70201 - SAPKA70211                         |

------------------------------------------------------------------------

Install the correction described in the attachment for the XSLT program

APB_LPD_XML_TO_TABLE one.

[joaopaulo_fortes]

Good News!

problem solved after applying the note!

You have to change the code and execute the steps in SHMM (shared memory) transaction.

Best regards.

[neerajmanocha]

That's really good.

@Shira, I also suggested you the same note on 8th-June. You can check this once again into your system. Hopefully this should resolve your issue.

"

Hi Shira,

Are you on NW 7.02 SP11? There is one recent fix from NW under SAP Note 1681453 related to same issue. Please check with your NW team and implement this, if required.

Hopefully, this would resolve your issue.

Thanks & Regards

Neeraj

"

Thanks & Regards

Neeraj

[Former Member]

Hi Shira,

I've the same issue but I found the "central owner" in nwbc :

setup -> access owners -> access control owner

Hopefully, this would resolve your issue.

Thanks & Regards

Laura

[Former Member]

Hello Laura,

Thank you for your answer.

Unfortunatly our issue is relevant for process control owners and not access control owners.

Regards,

Shira

[joaopaulo_fortes]

Hi Shira,

At first the role SAP_GRC_FN_ALL is enough for power users in the frontend.

Be aware that the menus in the front end may vary depending on the activated applications (AC, PC and RM) in your system.

You can find the role assignments under menu "Access Management" / "GRC Role assigments" / "Organizations" and/or "Business Process". These two links contains relevant roles assignments for organization and business process levels.

Best regards.

[neerajmanocha]

Hi Shira,

Hope you are doing good!!!

Could you please check your role 'GRCACCMGMT' in LPD_CUST whether this has GRC Role Assignment Folder. And more of, whether all the links into this are active and nothing is listed under inactive applications link.

Thanks & Regards

Neeraj

[Former Member]

Hello Neeraj,

Thank you for your answer.

We are working with NWBC and not portal.

We are in GRC 10.0 SP06

We didn't find role GRCACCMGMT but when searching for *MGMT* roles we found only the following roles:

SAP_GRAC_ROLE_MGMT_ADMIN        
Role Management Admin

SAP_GRAC_ROLE_MGMT_DESIGNER    Role
Management Designer

SAP_GRAC_ROLE_MGMT_DESINGER    Role
Management Designer

SAP_GRAC_ROLE_MGMT_ROLE_OWNER          
Role Owner

SAP_GRAC_ROLE_MGMT_USER            
Role Management Business User

SAP_GRAC_SUPER_USER_MGMT_ADMIN        
Super User  Administrator Role

SAP_GRAC_SUPER_USER_MGMT_CNTLR          
Super User  Controller Role

SAP_GRAC_SUPER_USER_MGMT_OWNER       
Super User  Owner Role

SAP_GRAC_SUPER_USER_MGMT_USER            
Super User  Firefighter

Regards,

Shira

[neerajmanocha]

Hi Shira,

My mean to say for role  'GRCACCMGMT' is in Transaction Code 'LPD_CUST' (not in PFCG).

"

Could you please check your role 'GRCACCMGMT' in LPD_CUST whether this has GRC Role Assignment Folder. And more of, whether all the links into this are active and nothing is listed under inactive applications link.

"

Thanks & Regards

Neeraj

[Former Member]

Hi Neeraj,

Thank you for the clarification.

It seems that all applications are active there (I can't attach a print screen to this message so you will see it)

Kind Regards,

Shira

[Former Member]

but still we can't see the relevant menu

Regards,

Shira

[Former Member]

but still we can't see the relevant menu

Would appriciate your assistance.

Regards,

Shira

[neerajmanocha]

Hi Shira,

Are you on NW 7.02 SP11? There is one recent fix from NW under SAP Note 1681453 related to same issue. Please check with your NW team and implement this, if required.

Hopefully, this would resolve your issue.

Thanks & Regards

Neeraj

[Former Member]

Hi Neeraj,

We are on NW 7.02 SP09 so note 1681453 is relevant to us but we can't find program APB_LPD_XML_TO_TABLE as described in the note.

Any suggestions?

Thank you,

Shira

[neerajmanocha]

Hi Shira,

I am sorry. I don't have much idea for this program APB_LPD_XML_TO_TABLE. You can check with your basis or raise a ticket under component BC-MUS-LP.

This SAP component deals in this area.

Thanks & Regards

Neeraj

[rajeshwari_akkamgari]

Hi Shira,

Make sure all the BC sets are activated and basic master data is created (like regulation etc.,).

regards,

Rajeshwari

[Former Member]

Hi Rajeshwari,

We used to see it before but now it is missing.

All BC sets are activated and all basic MD is already maintained in the system.

Regards,

Shira