on 07-21-2015 10:45 AM
Hi !
Do you know some document or post about configuration of landscape of the GRC Access Control 10.x?
I mean the landscape in context of DEV->QA->PRD.
I found only the "Access Control Diagram (Ver. 2.1)" with scheme, without legend and description of configuration.
Best regards,
Elvira Huzina
Here you go
And the following on the SAP GRC WIKI
Configure the cross system SOD analysis in AC 10.0. - Governance, Risk and Compliance - SCN Wiki
Hope this helps you understand how to create the connectors and then add them to a logical group.
One word of advise would be to create a logical group per type of system, i.e. ECC_GROUP, CRM_GROUP, BI_GROUP etc.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Harinam, Thank you!
You provided useful documents and posts on configuration.
But I also need some information about specific settings and steps for transports in landscape. For example, the post
http://scn.sap.com/community/grc/blog/2014/10/23/transport-management-of-grc-configuration
I'm looking for any information about approaches to set the landscape DEV->QA->PRD and how to transport and test the GRC Access Control 10.x in DEV->QA->PRD landscape.
Could you please assist on this matter?
In summary
1) Ensure you have the same Logical groups across all the landscapes (this is transportable from Dev). The actual systems listed within the Logical groups will be unique per GRC landscape, i.e. ECC_GROUP in Dev will have ECCDEV, in QA ECCQA, etc. This is important for the rule set to be transportable, as you would ensure that he Function Actions and Permissions are grouped against a Logical group, as opposed to an actual system ID.
2) All/most configuration done in SPRO is transportable. Front end Master data i.e. FFID Owners/Controllers is not transportable. However, whilst role data imported into BRM is not transportable, it is exportable, hence can be imported into the other GRC front end systems.
Elvira,
You won't get much more documents for what you are after.
The SAP GRC transport mechanism is like any other SAP ABAP system. You will learn from experience as to what is transportable and what is not.
Refer to the following:
https://scn.sap.com/thread/2047837
You will find majority of your answers being shared among the practitioners in the form of advice or answers on this forum, as opposed to a official SAP document.
Hello Elvira,
With addition to Harinam
check the below link for BRF+ rule transport
Some Notes related to transports
1941439 - Transport of Business Units/Organizational Units & Mitigation Controls
2050802 - How to Transport Worfklow using MSMP Workflow Configuration (Expert)
1642420 - Transport of launchpad
hope it helps you
Regards
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.