cancel
Showing results for 
Search instead for 
Did you mean: 

SAP IDM 7.1 Role assignment issue

Former Member
0 Kudos

Hello IDM Experts,

I am facing one critical issue here. We have connected SAP GRC with SAP IDM for risk analysis and CUP approvals and then once the approvers have approved the requests, IDM assigns these approved roles to users in backend SAP Systems.

We are now facing issue here past 1-month. Before we never faced this issue.

The issue is when the Roles are approved from GRC-CUP AC 5.3, post the approvals, the IDM is pulling the data and some of the roles are not getting assigned in SAP Backend systems. In the 1st and 2nd attempt it is not getting assigned however sometimes in the 3rd attempt it is getting assigned. This kind of weird behavior we have come across first time.  Has anyone come across such issues before?

What could be the possible reason for the roles not getting assigned in SAP Backend system from IDM?

We checked everything right from dispatchers, connectors, workflow, SQL Logs, Job logs but we are unable to figure out the reason for this issue.

Do we need to restart the dispatcher or is there any issue with cache memory? 

Can anyone help here to resolve this High Priority issue?

Thanks in advance!

Accepted Solutions (0)

Answers (1)

Answers (1)

Former Member
0 Kudos

IDM Experts,

Can I get response on this topic from the experts?

Will restarting the dispatchers help in this situation? Is this related to housekeeping issue of dispatcher.

Why are some roles from IDM are not getting assigned in SAP Backend system? Also it is getting rejected 1st and 2nd time and during 3rd time it is getting approved. Please advise

Regards

Malini Rao

former_member230443
Participant
0 Kudos

This message was moderated.

ChrisPS
Contributor
0 Kudos

Hi Malini,

              can you let us know which SP of 7.1 you are currently running ? In this scenario are the privileges assigned directly or part of a role (MX_ROLE) for example ? Have there been any changes recently in the system or the framework ?

Thanks,

Chris