Well that's the main purpose of the mentioned background job.
Any specific reason why you stopped running the synch job?
Regards
Deepak M
↧
Re: GRC 10 : EAM Logs are showing 'No Records'
↧
Re: Escalation at Role Owner Stage - Wrong Behaviour
Hi Sara/Manik,
We are on GRC SP13.
As per Note 2008881, we already implemented the BADI interface "IF_GRFN_MSMP_ESCALATE_OVERRIDE" and method "STAGE_ESCALATION_OVERRIDE"
Please check screenshot below
Still we are facing the same issue. I have raised a OSS message for the same and yet to get reply from SAP. I will update the thread once I get response from SAP.
~ Madan
↧
↧
Re: MSMP - workflow in GRC AC10.0 (SP13)
Hi Sara,
We are on GRC SP13 and we have implelemented 2008881 BADi with the method given in the note and still the issue persists where approved items are getting escalated.
I have raised a OSS message for the same and yet to get reply from SAP. I will update the details based on their response here.
Hi Ashish,
As per your thread initial issue was that even in your scenario approved Line Items are getting escalated. Are you able to solve this issue?
Reminders - Can be scheduled to send to notification to approvers after certain number of days.
Escalation to Alternate Role Owner - No need to schedule anything. Based on stage settings and duration mentioned at stage level request goes to alternate owner if the main owner didn't respond within this time.
I assume you are using reminder notifications now using Email reminder job. But the escalation issue which you have raised was that resolved? Please let us know if you already have fix for that issue.
~ Madan.
↧
Re: Error Transaction NWBC in SAP GRC AC
Hello Macito,
Since the issue is resolved, You can Close the thread.
Regards
Deepak
↧
Re: Error while Selecting EP system for raising request in GRC
Hello Troy ,
How to create System Aliases within EP .?
Regards,
Rahul
↧
↧
Re: Approval level is Role, but request goes to escape path when 1 of the roles, does not have owner
Hi All,
thanks very much for your efforts. this issue is resolved by introducing a new stage before Role Owner, and adding Routing rule:GRAC_MSMP_ROUTE_NO_ROLEOWNER. This routing rule leads to a path with no Stage. Thus role with no role owner is approved.
regards
Plaban
↧
Re: Problem connector group dashboard
Dear Markus,
please see the following OSS note: http://service.sap.com/sap/support/notes/1472227
Let us know.
Regards,
Alessandro
↧
Re: Problem connector group dashboard
Hi Alessandro,
thanks for the answer, but we are not using a LDAP-Connector and we have GRC 10.0.
Regards
Markus
↧
List of invalid FF logs in tables
Hi Experts,
I was trying to find out how many users/owners have invalid logs in search request, but I can't find any tool or table that can give me this kind of information. I'm running GRC 10, SP14 and only AC is running. When I go to search request and look for decision pending logs I received 700 decision pending logs, but I don't know how many are there invalid logs and unless I ask all owners to open up their logs and find out which ones are invalid ones. The error option didn't give me anything, so that means invalid logs are not error ones.
Please let me know if there is any way we can find out that among 700 logs which ones are invalid logs and who are the owners of these logs.
Thanks in advance
Regards,
Faisal
↧
↧
Re: Access Approve/Reject Buttons Appearing in Email
Hi Katrice,
I do not see the work item ID in the URL as you have stated, how do I go about getting this to populate, or finding the correct url to insert?
Thanks,
Buck
↧
Re: List of invalid FF logs in tables
Hi Faisal,
I didn't try but you may try below option as I don't have any invalid FF log reports in my system.
Also make sure when you have 4007 parameter set as YES, schedule only Log sync job and don't schedule Workflow sync job as this is one of the reason for invalid FF log report.
Go to GRACFFLOG table and pull out the FFLOG_ID value based on FF ID or Date or any other criteria with WORKFLOW_SENT as X
Then go to GRACFFREPMAPP table and input the FFLOG_ID values and check if there is any ACTION_ID associated with those FFLOG_ID entries
If the ACTION_ID doesn't exist for any FFLOG_ID means that Workflow is sent and no data is present in that FF Log workflow.
These reports are called Invalid FF Log reports
Based on ACTION_ID you can check the Action details from table GRACACTUSAGE table.
Please check and let me know 
Regards,
Madhu.
↧
How to get audit trail for user's access in GRC?
Dear GRC Experts,
I need a report showing the audit trail for the
users, who approved, what roles assigned, etc in the access requests.
I could not find these reports for large number of users.
Can you advise the best way for me to get
that?
Regards,
Sindhu
↧
Re: How to get audit trail for user's access in GRC?
Hi Sindhu,
You can pull the data by using GRC tables GRACREQ and GRACREQPROVLOG
Regards,
Madhu.
↧
↧
Re: How to get audit trail for user's access in GRC?
Hi Madhu,
Thank you very much for response and the solution.
I have read couple of your blogs and its really helpful and informative which has resolved some of my GRC issues .
Let me check the tables, do we have any available audit reports in NWBC for the access requests, i could not find one?
Regards,
Sindhu
↧
Re: How to get audit trail for user's access in GRC?
Hi Sindhu,
In NWBC there is no detailed report as such but you can make use of these tables and can pull the report.
GRACREQ
GRACREQOWNER - This will give Creator, Manager and Requestor details. If your role owner is standard role owner agent then you can gets the details from table GRACROLEAPPRVR using the role names from GRACREQPROVLOG
GRACREQPROVLOG
Finding current approvers, etc will depend on what you MSMP Agent definitions are, etc. You might find it easier to trace the access request in ST05/STAUTHTRACE and look at the SQL statements, or look at the MSMP Instance Runtime report and leverage the code
Regards,
Madhu.
↧
Re: Access Approve/Reject Buttons Appearing in Email
Hi Raymond.
Right click on the screen,select technical help and in technical help window check URL start parameters.
Check the attached file for your reference.
Thanks
KH
↧
Re: List of invalid FF logs in tables
Hi Faisal,
Since you have 4007 set as YES, scheduling job GRAC_SPM_LOG_SYNC_UPDATE is enough which retrieves logs as well as generates log review workflow as well.
Regards,
Madhu
↧
↧
Re: List of invalid FF logs in tables
Hi Madhu,
Do you have any other way to find out those invalid logs from NWBC or tables? because I still can't find which ones are invalid logs reports among 700 pending decision reports.
That would be really helpful if you think of any other table that can give me that details, I tried your tips but all the invalid logs have usage ID, I don't know what cause of these invalid logs. I also checked workflow and it has been working fine and triggering all workflow. I checked so many tables but no luck. That would be really challenging to find out which ones are invalid logs.
Regards,
Faisal
↧
Re: List of invalid FF logs in tables
Hi Faisal,
Just wanted to clarify one thing.
So, the EAM log review workflows in your scenario with Invalid FF log report are also having EAM logs inside them. Is that correct?
Actually for Invalid FF log scenario EAM log review workflow will not have EAM logs.
Can you clarify on this?
Regards,
Madhu.
↧
Re: List of invalid FF logs in tables
Yes Madhu,
Correct!
The workflow is triggering fine all controller/owners receiving emails to review the FF logs but when they received the link in their inbox after the notification email, the click the link to submit approve or reject or when they open up logs some of them open with the without submit button and it says " invalid log report".
I'm running the above both batch jobs for every hour for work flow and FF logs, plus I have role usage, action usage and repository jobs are running.
I hope it helps, thanks again.
Regards,
Faisal
↧