on 09-01-2014 1:41 PM
Dear Experts,
I would just like to know how to check if BS sets for rulesets are activated correctly.
When I click on Activation log I get an error there are no activation logs available for this selection.
Regards,
Abhishek
Hi Abhishek,
As per your furnished info, it clearly indicated that the particular BC set is not yet activated.
Unless and until you see details under activation logs, that BC set is not activated once. If some of it ends with warning or error, you must be able to see the same.
Kindly be more specific with your issues.
Regards,
Ameet
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hi,
I recommend you to go through the below document for basic & better understanding of access risk analysis part.
http://scn.sap.com/docs/DOC-1564
Regards,
Neeraj
Hi Abhisshek
The common rule set contains business process definitions and other values. When you went to activate them via the wizard which option did you choose?
A way to check if activated is to choose the BC Set comparison -compare your config against the BC Set. If you do not get a green light (assuming you have not made changes to the config after activating the BC set) then you have not activated it properly.
Regards
Colleen
Hi Abhisshek,
As other mentioned, there is a straight forward way to check whether BC Set is activated or not. You can check the BC Set Log and if there is no log, means, BC set is not activated.
Another concerned area would be....... If you have moved rules data from source system to your target system (target system where you are checking the BC Set log), then you need NOT to activate the BC Sets. Activating BC Set would overwrite your existing rules data. If you migrate rules data from other source system and then active the BC Sets, your all migrated rules would be replaced with BC Set standard ruleset, provided you have same riskid/functionids.
So be careful before activating the BC Sets!!!!!!
Thanks & Regards
Neeraj
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Dear Mr. Manocha,
You are exaclty correct!
I guess then my question is wrong we just migrated from GRC 5.3 to GRC 10.1 and I dont want new standard ruleset because I already have one from existing system. If I activate them then my migrated rules would be replaced. So quit obvious BC log will not be available.
My problem is when I do risk analysis I am not getting proper result.
The ruleset output is not accurate.
The GRC reports are not checking all possible conflicts set up in the
rule set that lead to risks. They only analyse the first conflict for a
risk in the rule set (Rule ID 0001). If this is found in the
authorizations it shows a risk in the report, if not it doesn't show
one.
I compared all the uploaded ruleset but then still the same issue.
Regards,
Abhisshek
Hi Abhisshek
If that is the case aren't you now back to your original question
In this post you asked the question and Alessandro gave you some advise to check by you did not respond? On checking the link he responded with it goes back to another one of your questions
Trying to understand why you are asking multiple questions for the same problem?
Are these three posts (including this one) for the same issue? If so, my finger is moving towards the Alert Moderator button to have this removed as duplicate.
If you are using your own ruleset then there is no need to activate the BC Set (you can use it to compare if you want to see differences). Alternatively, you could have activated it and then migrated your data to replace it. Or activate, download it via IMG for copy to analyse and then delete.
Regards
Colleen
Yes Abhisshek.
Try to keep the different queries in different Threads. There is no benefit to have multiple queries into one Thread as this may lead to lot of confusion.
Also, try to appreciate the colleagues who helps to resolve your query via assigning points, wherever necessary.
Thanks & Regards
Neeraj
SAP GRC SCN Moderator
Dear Neeraj/ Colleen,
I actually thought one of the reason not getting proper Risk analysis data is BS sets not activated.
But now I unnderstand that if the data is migrated from old system to new one then no need to activate BC sets.
Next time I will not mix up the question and put it on SCN but just finding the answer of my other two posts. Apologies !
Regards,
Abhisshek
Hi Abhishek,
I suspect that you have not activated the BC Set related to rule sets. If you have activated any of the below rule sets then you can find entries in the respective tables.
BC Set
GRAC_RA_RULESET_COMMON - GRACBPROC,GRACBPROCT,GRACFUNC,GRACFUNCT,GRACRULESETT
GRAC_RA_RULESET_SAP_R3 - GRACSODRISKRS
GRAC_RA_RULESET_SAP_BASIS -GRACFUNCPRMEXT
I have specified the most common BC sets which every organization activates as it includes rules related to ECC& HR Systems, so check whether you can find any entries in those tables or under activation logs for the respective BC Set if not then you have to activate the one suitable for your org..
Regards,
Neeraj
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Dear Neeraj,
Thanks for your reply I get the result in below table for this BC sets
BC Set
GRAC_RA_RULESET_COMMON - GRACBPROC,GRACBPROCT,GRACFUNC,GRACFUNCT,GRACRULESETT
GRAC_RA_RULESET_SAP_R3 - GRACSODRISKRS
But for this below BC sets I dont get results do I need to activate the BC sets for this as well.
Please check I dont get any result I hope I am perfroming right steps?
GRAC_RA_RULESET_SAP_BASIS
Abhisshek
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.