Centralized GRC/De-centralized GRC

[Former Member]

Hi SAP Folks

We are planning to implement GRC Access Control 10.1 in our project. We are now in study phase so we would like to understand from your experience on the below topics to finalise our design.

We have multiple GRC system which are running on GRC 5.3 .

1) Can we do a consolidation (Centralised GRC) ,if yes what are the project/technical challenges that you guys met with.

2) Can we keep them as current setup and just migrate to 10.1. then what are the project/technical challenges that you guys met with.

We are planning to implement ARA/ARM and EAM only.

Looking forward for your suggestion

Aside to admin guys,

we have already gone through some posts in SDN,but unable to freeze the requirements. Please do the needful.

Regards,

Arjuna.

[alessandr0]

Dear Arjuna,

1) Yes you can centralize the firefighters. Administration takes place centrally (GRC) whereas the Firefighter can be used decentralized.

2) Yes you can keep the current Firefighter IDs. In 10.1 it is possible to define different Firefigther roles for different connectors so that your current set up should work. The master data (Owner, Controller, etc.) must be set up in GRC box once (migration should be possible).

Hope this helps.

Regards,

Alessandro

[Former Member]

Hi Alessandro,

Thanks for the Quick response.

we are planning to implement the ARA(Access Risk Analysis)/ARM(Access Request Management) as well.

could you explain the project/technical challenges on centralization/de-centralization for the above two components(ARA/ARM)

Regards,

Arjuna.

[alessandr0]

Don't get the question. ARA/ARM modules are installed on GRC only. In the backend you have plugins to enable connections and programs to run.

I recommend to visit the GRC300 course if you are planning to implement SAP Access Control (more information on training.sap.com). This course will help you to get a general understanding of the product and how it works and how the set up can be done.

Regards,

Alessandro

[Former Member]

Hi Arjuna,

EAM itself is a huge configuration that you have asked on, and topping that up with ARM and ARA, is leading to no-where.

Since the title of the thread is EAM, i will suggest you Migration method from 5.3 to GRC 10.1. Please implement Note 2094980, for upload of EAM Master data.

What i did was, download all /VIRSA* EAM tables, from plug-in systems, and then use the upload functionality, of this note, to upload in GRC system.

The link

provides all the details for EAM, ARM and ARA.

Regards

Plaban