Derived Role generation in BRM

[former_member204479]

Hi,

In BRM while creating a parent role, corresponding derived roles are created and sent for approval.

Post approval, the roles are generated, in the foreground confirmation message states that Parent + derived roles all are successfully generated.

In the backend system the derived role's "Authorization" tab is with a status yellow and profile is not generated. However, the derived role has all the relevant values in it and the last changed by / date is appropriate to reflect the changes done.

Can some one please point to a solution to this? We have raised an OSS for this about a month back and applied suggestions from SAP without any result.

Version - GRC 10.0 SP10

Thanks,

Sammukh

[AndrzejP]

Dear Sammukh,

Are all of the derived roles in status "complete"? 

Did you try to re-generate them manually through mass generation? What was the result?

Best regards, Andrzej

[former_member204479]

Hello Andrzej

Yes, the derived roles are in status complete. After generation of all the roles (parent+derived) the derived roles move to the maintain test cases phase. Here we maintain the test cases and close the methodology. Post this the derived roles' status become complete.

Yes, we did try re-generating them manually from mass generation from GRC. The result is same. In fact the surprising thing is following:

1. Derived role is complete and in not generated state.

2. Mass generated from GRC - still not generated.

3. Manually generated in backend system - roles are now generated.

4. Mass generated from GRC again - status that was generated from point 3 before changed to not generated again.

Looks like the generation from GRC itself is the problem, but we are unable to pin-point the issue.

Thanks

Sammukh

[AndrzejP]

Hello Sammukh,

maybe this is some issue with privileges for grc account in backend system, please check trace from ECC during generation... any issues there?

Regards, Andrzej