Existing assignments option in Access request - Not fetching existing roles

[surya_appala]

Hi Experts,

Existing assignments option is not fetching the roles data for specific users.

For example:

Requester wants to remove certain roles for user A from system SYSA. When Requester clicks on existing assignments option, it is popping up with SYSA but not the roles of the user A.

But it is working fine for user B. It is showing all the list of roles assigned to user B in SYSA.

It is not an authorization issue. The connector settings are fine.

I have checked the validity of roles for user A in SYSA and validity is till 31.12.9999

Unable to figure out the issue.

Image1 - Roles are fetching for user B from SYSA.Everything is good here.

Image2- Roles are not fetching for user A from SYSA. It is just showing the existence of system.

GRC 10. SP 20

Any expert views please. Thanks a lot for your help.

Regards,

Surya

[former_member185447 · Accepted solution]

Hello Surya,

• Existing Assignments option within Access Request shows the data from GRC Object Repository. It will show the latest SYNCed information only.

• In case the results are not correct, try running a fresh "Repository Object Sync" job from SPRO => IMG => Governance, Risk and Compliance =>Access Control =>Synchronization Jobs.

• You may run Incremental or Full Sync as needed.

Regards,

Rakesh Ram M

P.S : Check this SAP Note 2172233 - Existing Assignment not displaying roles

[surya_appala · Accepted solution]

Thanks Rakesh. It worked.

[former_member226273]

Hello Surya,

Please check if entries exist in table GRACUSERROLE for user A in the SYSA.

If no entry found, please run repository sync and check again, please let us know if its resolved.

Kind regards,

Yashasvi

[surya_appala]

Hello Sanvaliya,

Thanks for your valuable inputs. Rakesh helped me with solution. it worked now.

Regards,

Surya

[surya_appala]

Hello Sanvaliya,

The issue is back again The roles are not present in the table GRACUSERROLE for user A in SYSA. I have run Repository sync job and is successful. But still the result is empty for table GRACUSERROLE. Any help please. Thank you.

Regards,

Surya

[former_member185447]

Hello Surya,

• Please Check Whether you are running the Synch. Job against the Correct Connector.

Regards,

Rakesh Ram M

[surya_appala]

Hello Rakesh,

I am running the sync job on appropriate connector only.

The issue got resolved when Full sync job is run. Everyday we run incremental job and is not getting corrected with incremental job.

The issue got resolved with weekend job (Full sync mode).

Still my worry is that there is no guarantee that this issue will not get repeated. Every day when the issue is observed we cannot run full sync job as the time space is already occupied with many other jobs.

We need to wait till weekend to correct this issue or we should stop any of the already running job to rerun repository object sync in full sync mode.

Regards,

Surya

[former_member73766]

Dear Surya,

Please take a look into SAP Note 2105072 Existing Assignments not Appearing,

This can help you,

Regards

Rafael