cancel
Showing results for 
Search instead for 
Did you mean: 

SAP GRC 10.0 : How to synchronize Users existing on several system?

Former Member
0 Kudos

Hi Experts,

We are facing an issue with ARA 10.0 (SP8).

We have 3 back-end connected to our GRC System. Some users exists in the 3 connected SAP Systems but after all job syncronization, we saw that we don't have multiple entries in the GRACUSER table for an user which exists in 2 or 3 systems.

When we try to search for a user in ARA, he only exists for one system.

We manage sequences in User Data source but the issue still appears.

We found that all informations are in the table GRACUSERCONN where we have several entries for these type of users.

How can we have all users in all sytems in ARA matchcode?

Best Regards,

Nicolas

Accepted Solutions (1)

Accepted Solutions (1)

Former Member
0 Kudos

Hi ADM GRC,

Actually, the table GRACUSER is design to have just one entry. This table is the User Master Source. You can find all the users in the table GRACUSERCONN where (as you previously mentioned) you have all the users information.

 

You can choose the back-end systems to be analyzed by setting up a sequence.

User search data source:

Access Control uses the information maintained on this screen to search for user-related data on different data sources.

Retrieve the unique user Ids from multiple data sources by maintaining a different connector for each data source, and then assigning the appropriate sequences.

Note that if the user information is confirmed in one system, it is considered as authenticated for all systems; further confirmation on other systems is not needed.

Fernando

suman_puthadi
Explorer
0 Kudos

Hi ADM GRC,

The GRACUSER table has only one entry as this is the master table .

But GRACUSERCONN table had the complete details of the user's in the respective connector .

When the sync job is ran both the tables are updated with the user details ,but GRACUSER holds the

latest  sync record where as the GRACUSERCONN has the complete details of the connectors synced.

The user details in access request are fetched based onthe data source manintained in the SPRO .

Suman Puthadi

Answers (0)