GRC AC 10 SP12 - Role Risk Analysis returning no violations when there are violations

[Former Member]

Hello

We recently encountered an issue with the role risk analysis returning "no violations" when there is indeed violations. It will pick up the violations when the risk analysis is run within an access request but not when you run it ad hoc. We have re-run all our syncs, re-generated the rule sets and validated they are populated in the NWBC repository but the issue has not been resolved.

I've included a few screen shots of an analysis being perforned on the role administrator which would definitely return violations yet no violations are found.

Any help would be appreciated.

[kevin_tucholke1 · Accepted solution]

Stacey:

Please implement SAP note 1824956 -- User Analysis Report shows "No violations"

Thanks.

Kevin Tucholke

[Former Member · Accepted solution]

Hi Kevin

We just implemented the note, re-ran the auth and repository object syncs and re-generated the ruleset and are still encountering the same issue. Any other recommendations?

[kevin_tucholke1 · Accepted solution]

Stacey:  Have you checked to see if there are any authorization issues in SLG1??

[Former Member · Accepted solution]

Thanks for the quick reply Kevin. SLG1 shows the risk analysis was successful (see attached screen shot).

[kevin_tucholke1 · Accepted solution]

Stacey:

Beyond that, I would suggest a CSS message.  If the note was implemented and no authorization issues exist, and you are sure that the rule set should be finding issues (i.e. physical connectors are assigned to appropriate connector groups (logical systems)), this is probably needs more troubleshooting that you can do here...

Sorry.....

Kevin

[Former Member · Accepted solution]

Hi Stacy,

Please check the following

!. Check if the role exist in the table GRACRLCONN.If the role does not exist in this table, Please run

the Repository sync job.

2. Check if the entries exist in the table GRACACTRULE for the specific connector, IF the entires does not exist, Re-generate the rules.

Also, Can you please share the detials of the role i.e. the Actions that exist in these roles and also the

corresponding risks that should get violated.

Thanks & Regards

Japneet Singh

[Former Member · Accepted solution]

Hey Japneet

Thanks for your assistance.

1. Yes the role exists in GRACRLCONN

2. We are using logical connectors and the entries for those appeared in GRACACTRULE

I think we're going to heed Kevin's advice and open a note with SAP.

I'll report back with a resolution. Thanks!

[Former Member · Accepted solution]

Hi Stacey, Is this issue resolved.. we are having similar scenario with role risk analysis

Regards

Anil

[Former Member · Accepted solution]

Hi Anil

I am almost positive a note had to be applied to resolve the issue. I tried to look in SAP service marketplace for a note around May - June 2013 when I was experiencing the issue but wasn't having any luck.

Another note in addition to the one Kevin provided above is 1817251 - User Analysis Report shows "No violations" but if you are on a support pack after 12 or 13 then they wouldn't be applicable.

Also, have you followed all the other recommendations within this post? I'm assuming so if you're reaching out.

[Former Member]

Stacey,

Yes, SAP Note provided by Kevin should resolve this Issue.

Thanks & Regards,

Ashish