GRC Provisioning Error to BW

[Former Member]

Hello,

(GRC 10.0 SP13)

GRC provisioning if failing to BW Prod.  The issue is not present in BW QA - can successfully provision; all configurations are consistent.  We do not use CUA.  The request is a New Account request.  No issue with provisioning to ECC Prod.

Here is the log from SLG1 in GRC:

Confirmed the RFC user has same authorization in BW QA and BW Prod (S_RFCACL, etc.).  SM59 connector showing no issue.  Have not configured workflow parameter 2051, but End User Verification is set to YES in Data Sources config.  All other connector mappings and integration scenarios are identical to ECC Prod config.  Again, not having this issue in BW QA.

Any ideas?

Thanks,

Ken

[alessandr0]

Ken,

I suggest to run an authorization trace in your BW system to ensure the RFC user has the proper authorization to provision the user.

Regards,

Alessandro

[Former Member]

Thanks for the recommendation, but the RFC user has identical authorization as in BW QA, where this is working.  I'll open a trace anyway.

[Former Member]

Hello Ken,

Check logs in T-Code GRFNMW_DBGMONITOR_WD ( MSMP Instance Runtime Monitor) under message log and Audit log it might give you some clues.

Also you can enable debug logging for MSMP workflow- check below note

1624069 - GRC 10.0 Enabling Debug Logging for MSMP

Thanks

[Former Member]

Hello Ken,

Good to know your GRC system is 10.0 SP13, but from SLG1 screenshot it looks like the issue is on the plug-in side. Please compare the release and SP-level of GRCPINW in your BW and ECC systems, and also share with us so we can suggest.

Regards,

Zoltan

[Former Member]

Thanks,

BW: GRCPINW   V1000_710  SP0013  (BW QA works just fine; only issue is in BW Prod)

ECC: GRCPINW  V1000_700  SP0018

We do not see any error logs on the plugin-system's side.

[Former Member]

Hi Ken,

Suggest you to check if SAP note 2027126 - GRC 10.0 - User Access Provisioning Error - has been implemented in the BW systems. Let us know if this note has resolved the issue.

Best Regards,

Zoltan

[Former Member]

Hello Ken,

Can you check following setting under Maintain Global Provisioning "For assign role action" -

just cautious note please hide your system information from next time ( image)

Thanks

Shaik

[Former Member]

Yes the connectors are configured  for "Create User for Role Assign Action" and for "Create User For Change User Action".  The Global provisioning settings are configured for the same.

[Former Member]

Hello Ken,

Check if you have Param ID 2051 set to "Yes" in configuration setting.

Thanks

shaik

[Former Member]

Parameter 2051 is not set to Yes - it is not configured at all.