GRC5.3 User Data Source SAPHR Function Template

[Former Member]

Currently, we are implementing GRC 5.3. We are setting up CUP user data source from SAPHR (B012 relationship), while authentication is via LDAP.

But we are facing some problems. System refuse to pull the correct manager for chief positions.

Under Function Template, there are 2 options:  Standard and Custom.

I read from some postings in SDN that we can use Standard SAP ABAP program to extract user data or we write own program.

Has anyone tried using its own program to extract user data source? If yes, how do we tell CUP to use the program?

We are more interesting in getting the manager info from a user.

Thank you in advance.

[Former Member · Accepted solution]

Hi Dominik,

CUP obtain a users manager information by mapping from the LDAP or SAPHR system.

However, to import the manager's information, the user data sources must be set to the LDAP or SAPHR system.

Please check the connector you have configured for user details/data source and be sure that you have set HR System* to YES.

The appropriate RTA VIRAHR also needs to be installed on the system where you are retrieving user/manager information.

If user detail/data source is LDAP, please review the SAP Note 1228996.

GRC seeks this information from HR through FUNCTION MODULE /VIRSA/USER_AUTHENTICATION created with the installation of the VIRSAHR.

The user id has to be maintained in infotype 0105 and subtype 0001.

Following notes explains:
1609554 - How manager info is pulled from HR system into ARQ .

Manager Information will be fetched from BO12 relationship/ A002 relationships maintained HR System. This is the path, you maintain in ARQ to fetch the Manager data depending on how you configured your HR System. B012 is Org Unit based Managers and A002 is Position based Managers.

As Manager is also part of the organization holds the Personal record, the details of Manager are fetched from his/her HR Personal Record.

***************
Issues about this subject resolved in ARQ Support Package 10:-

-Manager information not fetching correctly from SAP HR system when
running HR Trigger Load Data

-Incorrect manager information is returned. This occurs if SAP HR is
used as data source and the manager resides in a different org unit
than the user.

******
Issues about this subject resolved in ARQ Support Package 12:-

-Manager information is not populated in the request. This occurs if
SAP HR is the data source and the user and manager are in different
org units.

***************

You may also refer to SAP note 1168508- Compliant User Provisioning 5.3 Support Package

And for further details regarding this please refer to the CUP 5.3 Configuration guide as well.

I hope this information helps.

Regards,

Yukti