GRC 10.0 : Unable to generate data for SOD Review MSMP Process ID

[Former Member]

Here is what I see when I create a job in NWBC Background Scheduler. I have followed all the instructions available in Performing Segregation of Duties Reviews in Access Control 10.0 to set up SAP_GRAC_SOD_RISK_REVIEW.

Here is the job log:

Job ID : 11321700 created

Extraction of user-risk data started

Total Number of Users:0

Extraction of user-risk data completed

Request to be group by risk owners

Request generation started

Request generation completed

Total number of request created: 0

I am not sure if I am missing something here. Any help will be appreciated.

Thank you,

Pawan

[Former Member]

Steps to try

1. you need to enable "Offline Risk Analysis" in the GRC system

2. Again run Batch jobs

GRAC_ROLEREP_PROFILE_SYNC

GRAC_ROLEREP_ROLE_SYNC

GRAC_ROLEREP_USER_SYNC

GRAC_BATCH_RISK_ANALYSIS

GRAC_ACTION_USAGE_SYNC

GRAC_ROLE_USAGE_SYNC

3. Make sure Risk owners and Coordinator are updated

4. then run the jobs to get data for SOD

Hope this helps.

Thanks

Kailash

[Former Member]

Dear all.

I did all the steps you mention before.

1. you need to enable "Offline Risk Analysis" in the GRC system

2. Again run Batch jobs

GRAC_ROLEREP_PROFILE_SYNC

GRAC_ROLEREP_ROLE_SYNC

GRAC_ROLEREP_USER_SYNC

GRAC_BATCH_RISK_ANALYSIS

GRAC_ACTION_USAGE_SYNC

GRAC_ROLE_USAGE_SYNC

3. Make sure Risk owners and Coordinator are updated

4. then run the jobs to get data for SOD

And the SOD review is fetching information however is not creating the requests. I am at GRC 10.0 SP12.

Best regards.

[Former Member]

Hi Sara,

Can you see data in GRACMGRISKD table?

Thanks

Kailash

[Former Member]

Hi Sara,

Please run the job on User level. by default it displays on roles, replace it with users and then run, it will fetch the result.

BR,

Mangesh

[Former Member]

Hi Kailash.

yes i can see this table fullfilled.

Regards

[Former Member]

Hi Mangesh. Which job should i run on user level? COuld you please specify a little more?

Regards.

[Former Member]

Hi Sara,

Go to Job schedular>>create job for "Generates Data for access request SoD review">>go Next>>you will get a list of criteria to run this job

Replace below criteria

By selecting "User ID" instead of "Role Name" and then put * or specific user search like ZZ* as per your user nomenclature and submit the job..

This will work.

BR,

Mangesh

[Former Member]

Hi Sara,

Did I mis interprete your requirement?

Did you mean you are getting data generated through SOD review job? in job log?

BR,

Mangesh

[Former Member]

Hi Mahesh , Can you confirm whether we can keep just * in the UserID field .My job getting cancelled every time for the review.

Also I havent updated Risk Owner for each Risk . Will this impact the SoD review report. ?? Is there any easy to update Risk Owners rather than to update each Risk ?

[Former Member]

Hi Pawan,

have u fixed this issue? Because I face the same issue in getting same results:

Job ID : 11321700 created

Extraction of user-risk data started

Total Number of Users:0

Extraction of user-risk data completed

Request to be group by risk owners

Request generation started

Request generation completed

Total number of request created: 0

Does Anybody have a solution?

[Henrik1]

I am facing the same issue here with SP12. Anyone found a solution?

Note 1729482 sounds like it's got nothing at all to do with it...

[Former Member]

One workaround that worked for me in the past was to perform the SOD in batches, split by the Business Process or specific range of Risk ID's. I think I had a similar issue in SP06 and was told by SAP to select the Risk Level and/or have no blank entries within the job selection screen.

[Henrik1]

ah! I found that it works if I run on user level rather than role level - although user isn't in the default selection criteria. That's a bit silly...

Anyway, it's working now

[Former Member]

Henrik you're right.

with setting a UserID and the connectors, I get some results:

Job ID : 11241200 created

Extraction of user-risk data started

Total Number of Users:1

Extraction of user-risk data completed

Request to be group by risk owners

Request generation started

Request generation completed

Total number of request created: 217

unfortunately it doesn't work, without a user... I hope SAP will fix that.

thank you Henrik.

[Henrik1]

I can now generate the workflows, but!! I get no information about the actual transactions in the report, even though there's a field for it... Is that just me or are you seeing that as well?

/henrik

[Former Member]

Hi Pawan,

I had a similar issue with User Access Review, opened a message in SAP and they sent me SAP Note 1729482 to be applied to BACKENDs.

Then the  synchronization jobs (mentioned above by Asok kumar Christian) started to work correctly.

Maybe it can help.

Good luck,

Vaner

[Former Member]

Is this "bug/Issue" something that has crept in since Support pack 9?!

[achristian17]

Hi Pawan,

   Have you tried as Kailash said. Apart from that you might need to run the below jobs in this sequence.

GRAC_ROLEREP_PROFILE_SYNC	Synchronizes all profiles in the repository
GRAC_ROLEREP_ROLE_SYNC	Synchronizes all roles in the repository
GRAC_ROLEREP_USER_SYNC	Synchronizes all users, and roles used by these users
GRAC_BATCH_RISK_ANALYSIS	Performs batch Risk Analysis
GRAC_ACTION_USAGE_SYNC	Retrieves the action usage for users
GRAC_ROLE_USAGE_SYNC	Retrieves the role usage

BR,

Asok

[Former Member]

Hi Kailash and Ashok,

I have the above listed jobs scheduled and they are running periodically and I see data being generated for GRAC_BACTH_RISK_ANALYSIS in tcode GRACRABATCH_MONITOR. But, I am still getting the same job results as I mentioned first:

Here is the job log:

Job ID : 11343300 created

Extraction of user-risk data started

Total Number of Users:0

Extraction of user-risk data completed

Request to be group by risk owners

Request generation started

Request generation completed

Total number of request created: 0

I am not sure what I am missing. Thank you for your help guys!

Pawan

[Former Member]

HI Pawan,

Sadly you need to enable "Offline Risk Analysis" in the GRC system if you already have not done so.

I had the same issue at a client last year.

Let me know if it works once you have done this and once your BRA job has been performed.

[Former Member]

Hi Harinam,

I have enabled "Offline Risk Analysis" but I still do not get any data generated.

Thanks,

Pawan

[Former Member]

Hello,

Does anyone have an idea why I am unable to generate data SAP_GRAC_SOD_RISK_REVIEW workflow?

Please help.

Thanks,

Pawan

[Former Member]

Hi Pawan,

1. Before running the SoD Review data job, ensure that the Batch Risk Analysis job (GRAC_BATCH_RISK_ANALYSIS) is executed.

2. Risk owners are defined in the Risk

Thanks,

Kailash