No violation found in GRC 5.3

[Former Member]

Hello All,

I am getting a strange message in GRC 5.3 (SP 16) as 'No violations found' for many users (not all users though) when I am running organisation level risk analysis for users who do have all the risks. For instance - A user has SAP_ALL still I get 'No violation found' message (please note I have not ignored SAP_ALL under Critical roles/profiles), another user has all the business related risk tcodes still the risk analysis shows 'No violation found'.

I believe there is no ruleset configuration issues as for few users I do get the report OK. I also generated the rules as background job which completed successfully, so rule shouldn't be the reason?!

Would really appreciate if you can share your experience, please help.

Thank you all for reading this.

Regards,

Preethi G

[neerajmanocha]

Hi Preethi,

When we use Organizational level analysis, below are the 3 things which we need to take care. I hope step 3 would be the one which might have been missed by you.

1. Creating simple rules and making org fields as enabled using $ value. For example, for BUKRS, maintain $BUKRS in all the field values and enable them.

2. Create ORG Rule as per your business requirements.

3. Run job for "Organizational user mapping". This will udpate the data in VIRSA_CC_ORGUSERS table for the users with their assigned ORG Level.

Please check if you have missed any step.

Thanks & Regards

Neeraj Manocha