cancel
Showing results for 
Search instead for 
Did you mean: 

SAP GRC BRM: Error SU25 Role Creation

Former Member
0 Kudos

Dear all,

When System Administrator tries to create new role in Production System ECC 6.0 through SAP GRC BRM, user obtains following note:

"Foreign tables are not updated. Please use SU25 to update tables". We created a SAP note and SAP has proposed us to implement SAP note 440231.

Basis Team from client are not confortable implementing this note because it updates authorization from Roles.

Please, Has Someone been in the same situation? Is there someone execute this note in a ECC System?

Please, advise us.

Best Regards.

Accepted Solutions (0)

Answers (2)

Answers (2)

Former Member
0 Kudos

Hello all,

Thanks for your help, this problem was solved.

We run the t-code SU25 in ERP system and the error disappeared, and now we can create roles in NWBC.


Regards,

Inês Costa

Former Member
0 Kudos

Hello Jebeni

Did you have any answer about this problem? What solution did you find to resolve that?

We have a similar issue, when we tried to create a derived role through the BRM process, we have the following message:

We did make also the steps that are mentioned in Snote 2092251 and after that, the sync, but the error persist.

Could you help us?

Thank you.

Regards,

Inês

former_member193066
Active Contributor
0 Kudos

Hello ,

Please run AUTH sync again.

i had same issue but was solved with AUTH sync after updating tables.

Regards,

Prasant

Former Member
0 Kudos

Hello Prasant,

The update tables that you said, should be run in ERP or GRC? We have already create some roles in systems ERP e GRC.

We know this make a update of the tables USOBX_C and USOBT_C, but what is the real impact of this running, the work that we make so far, will be lost?

Thank you.

Regards,

Inês

former_member193066
Active Contributor
0 Kudos

please run auth sync in GRC system and try.

Regards,

Prasant

Former Member
0 Kudos

hi Ines,

BRM belongs to GRC. But role will get generated on plug-in systems. So,as a prerequisite you would need to sync up Auth. data from plug-in systems to GRC. So, if your Plug-in has been upgraded, run SU25 in plug-in and then sync. This will sync the customer tables, to GRC. could you check GRACACTPERMSYS, on GRC.

So, as per the note, this is the table that BRM reads auth. during derivation.

Else, can you put a SQL trace, and check which table is called during Role derivation,through BRM

Regards

Plaban

Colleen
Advisor
Advisor
0 Kudos

Hi Ines

In your plug-in system, what is that status for SU25 Step 2A/B completion and your current basis release (check via system > status)

The SU25 error means you're on a higher basis release level than you SU24/SU25 data. PFCG when maintained at it's most efficient level should mean that you keep your SU24/SU25 up to date

When this doesn't match, you get a warning prompt in PFCG when you edit authorisations.

If you do not want to run this, you can edit the PRGN_STAT table and change the release value.

Regards

Colleen