cancel
Showing results for 
Search instead for 
Did you mean: 

Backend role changes into GRC

Former Member
0 Kudos

Hi Experts,

We create/maintain our roles in the backend systems directly and do not use BRM workflow to create/modify roles.

Once the roles are created, the roles are imported into BRM using 'Role Import' option. Once this is done the tables GRACROLE,

GRACROLEACT, GRACROLEPERM, GRACROLEPERMAUTH etc. are populated.

But when any role is modified, how can the changes be updated in these tables (example if a tcode is deleted from a role in the backend system, the tcode still appears in GRACROLEACT table)?

The repository sync job does not update the modified data into these tables.

Do we need to perform a role import each time a role change is done, so that the action and permission (tcode and auth) data is in sync?

I have gone through the below post, but there is no explanation.

https://scn.sap.com/thread/3609214

I have also tried the 'Role Comparison' option, however this does not sync data properly (example - deleted tcodes in backend system still appear in GRACROLEACT table, however new tcodes added into role are being updated into this table).

Regards,

Sireesha

Accepted Solutions (0)

Answers (2)

Answers (2)

former_member226273
Active Participant
0 Kudos

Hello Sireesha,

You can sync the role with back-end from Role Maintanence screen.

go to Maintain Authorizations phaseand choose Sync. with PFCG.

Kind regards,

Yashasvi

former_member197694
Active Contributor
0 Kudos

Hello Sireesha,

Can you try to run GRAC_REPOSITORY_OBJECT_SYNC in FULL mode and check the table

Regards

Baithi

Former Member
0 Kudos

Hi Baithi,

Thanks for the reply.

GRAC_REPOSITORY_OBJECT_SYNC in FULL mode is run, but the table is still the same.

former_member185447
Active Contributor
0 Kudos

Hello Sireesha,

Generally, The Repository Object Synch. Job is related to ARA than BRM. So, When you run the synch. job it updates table like GRACRLCONN and few other tables related to ARA and not to BRM.

This Could be one of the possible reasons why you cant see the updates in the tables related to BRM.

Also, Give a Reading to this SAP Note

2027447 - Tables GRACUSER and GRACUSERCONN Explained

SAP might have used the same logic for the above mentioned tables.

Regards,

Deepak M