Import existing role into GRC

[FredericGirod]

Hi,

as far as I know, it's not possible to import roles that have been created in ECC using PFCG into GRC.

is-it true  ?

Regards

Fred

[Colleen · Accepted solution]

It is possible using via NWBC import functionality

It is necessary, for example to import SAP standard roles and profiles. Also, this is needed for clients to import what they have already built

[former_member136769]

Hi Fred,

in NWBC, you have Role Maintenance>Role Import link. Via this link you can bring roles existing in GRC plugins (for instance ECC, BW, CRM) and synchronize them in the GRC Repository tables.

In GRC10, we have these possible scenarios:

1) R/3 roles are only synced by the role sync job, and never imported into BRM. We call them backend roles. In this case, the role exists only in table GRACRLCONN. And it can be deleted directly from PFCG, as the role sync will run and capture the deletion, and remove the role
from GRACRLCONN table.

2) R/3 roles are synced by the role sync job, and are IMPORTED into the BRM tool, via link "Role Import" in NWBC. In this case, the role exists in BRM. We call it BRM role. In this case, the role exists in both tables GRACROLE, and GRACRLCONN. And it should only be deleted from
BRM. When it is deleted from BRM, it will be removed from BRM and also a background job will automatically start to remove the role from PFCG and from GRACROLE and GRACRLCONN tables, and all other related tables, like GRACROLEAPPRVR (for approvers).

If you delete a BRM role from PFCG directly, you break the whole chain. And it introduces inconsistencies to the application.

Hope answer is helpful!

Luciana

[Former Member]

Yes. It is true. It is not possible to import ECC roles into GRC using PFCG.

You need to import the roles using the "Import Roles" option provided in CUP/AE