Configuration Table for SAP GRC

Insert the following data into the '/SAILPOIN/CONF' table:

Note
Validate that the values for COLUMN_DENAME and COLUMN_LENGTH are correct as per your system. This can be validated through the t-code "SE11" while viewing the table details, under Fields.

OR

Table Permissions

SERVICE_ACCOUNT

NAME

COLUMNNAME

ENTITY_TYPE

COLUMN_DTYPE

COLUMN_DENAME

COLUMN_LENGTH

<your-service-account-name>

GRACPROFILE

AC_REF_ROLE_ID

TABLE

C

GRFN_GUID

32

<your-service-account-name>

GRACPROFILE

CONNECTOR

TABLE

C

GRFN_CONNECTORID

32

<your-service-account-name>

GRACPROFILE

PROFILE

TABLE

C

GRAC_PROFILE

20

<your-service-account-name>

GRACRLCOMPRL

CHILD_ROLEID

TABLE

C

GRFN_GUID

32

<your-service-account-name>

GRACRLCOMPRL

COMP_ROLEID

TABLE

C

GRFN_GUID

32

<your-service-account-name>

GRACRLCONN

AC_REF_ROLE_ID

TABLE

C

GRFN_GUID

32

<your-service-account-name>

GRACRLCONN

CONNECTOR

TABLE

C

RFCDEST

32

<your-service-account-name>

GRACRLCONN

ROLE_ID

TABLE

C

GRFN_GUID

32

<your-service-account-name>

GRACRLCONN

ROLE_NAME

TABLE

C

GRAC_ROLE_NAME

300

<your-service-account-name>

GRACRLCUARELAT

ROLEID1

TABLE

C

GRAC_ROLEID

32

<your-service-account-name>

GRACRLCUARELAT

ROLEID2

TABLE

C

GRAC_ROLEID

32

<your-service-account-name>

GRACROLE

BPROC

TABLE

C

GRAC_BPROC

10

<your-service-account-name>

GRACROLE

BSUBPROC

TABLE

C

GRAC_BSUBPROC

10

<your-service-account-name>

GRACROLE

CONNECTOR_GRP

TABLE

C

GRFN_CONNECTORGRP

10

<your-service-account-name>

GRACROLE

ROLEID

TABLE

C

GRAC_ROLEID

32

<your-service-account-name>

GRACROLE

ROLE_NAME

TABLE

C

GRAC_ROLE_NAME

300

<your-service-account-name>

GRACROLE

ROLE_STATUS

TABLE

C

GRAC_ROLE_STATUS

3

<your-service-account-name>

GRACROLE

ROLE_TYPE

TABLE

C

GRAC_ROLE_TYPE

3

<your-service-account-name>

GRACROLERELAT

RELAT_TYPE

TABLE

C

GRAC_RL_RELAT_TYPE

4

<your-service-account-name>

GRACROLERELAT

ROLEID1

TABLE

C

GRAC_ROLEID

32

<your-service-account-name>

GRACROLERELAT

ROLEID2

TABLE

C

GRAC_ROLEID

32

<your-service-account-name>

GRACUSER

CONNECTOR

TABLE

C

GRFN_CONNECTORID

32

<your-service-account-name>

GRACUSER

DEPARTMENT

TABLE

C

GRAC_DEPARTMENT

100

<your-service-account-name>

GRACUSER

EMAIL

TABLE

C

AD_SMTPADR

241

<your-service-account-name>

GRACUSER

FIRST_NAME

TABLE

C

GRAC_USER_NAME

50

<your-service-account-name>

GRACUSER

LAST_NAME

TABLE

C

GRAC_USER_NAME

50

<your-service-account-name>

GRACUSER

MANAGER_ID

TABLE

C

GRAC_USER

50

<your-service-account-name>

GRACUSER

PHONE

TABLE

C

GRAC_PHONE_NUMBER

20

<your-service-account-name>

GRACUSER

USER_ID

TABLE

C

GRAC_USER

50

<your-service-account-name>

GRACUSERCONN

CONNECTOR

TABLE

C

RFCDEST

32

<your-service-account-name>

GRACUSERCONN

INACTIVE

TABLE

C

BOOLEAN

1

<your-service-account-name>

GRACUSERCONN

USER_GROUP

TABLE

C

GRAC_USER_GRP

50

<your-service-account-name>

GRACUSERCONN

USER_ID

TABLE

C

GRAC_USER

50

<your-service-account-name>

GRACUSERCONN

USER_TYPE

TABLE

C

XUUSTYP

1

<your-service-account-name>

GRACUSERCONN

VALID_FROM

TABLE

C

GRAC_VALID_FROM

8

<your-service-account-name>

GRACUSERCONN

VALID_TO

TABLE

D

GRAC_VALID_TO

8

<your-service-account-name>

GRACUSERPROFILE

CONNECTOR

TABLE

C

GRFN_CONNECTORID

32

<your-service-account-name>

GRACUSERPROFILE

PROFILE

TABLE

C

GRAC_PROFILE

20

<your-service-account-name>

GRACUSERPROFILE

USER_ID

TABLE

C

GRAC_USER

50

<your-service-account-name>

GRACUSERROLE

BUS_ROLEID

TABLE

C

GRFN_GUID

32

<your-service-account-name>

GRACUSERROLE

CONNECTOR

TABLE

C

GRFN_CONNECTORID

32

<your-service-account-name>

GRACUSERROLE

ROLE_ID

TABLE

C

GRFN_GUID

32

<your-service-account-name>

GRACUSERROLE

USER_ID

TABLE

C

GRAC_USER

50

<your-service-account-name>

GRACUSERROLE

VALID_FROM

TABLE

 

GRFN_TIMESTAMP

15

<your-service-account-name>

GRACUSERROLE

VALID_TO

TABLE

 

GRFN_TIMESTAMP

15

<your-service-account-name>

USRSYSACT

SUBSYSTEM

TABLE

C

RFCRCVSYS

10

<your-service-account-name>

USRSYSACT

AGR_NAME

TABLE

C

F_AGR_NAME

30

<your-service-account-name>

USRSYSACT

COL_AGR

TABLE

C

XUFLAG

4

<your-service-account-name>

CVERS

COMPONENT

TABLE

C

DLVUNIT

30

<your-service-account-name>

CVERS

RELEASE

TABLE

C

SAPRELEASE

10

<your-service-account-name>

CVERS

EXTRELEASE

TABLE

C

SAPPATCHLV

10

<your-service-account-name>

PRDVERS

NAME

TABLE

C

BORM_NAME

30

<your-service-account-name>

PRDVERS

VERSION

TABLE

C

BORM_VERS

30

<your-service-account-name>

PRDVERS

VENDOR

TABLE

C

BORM_VEND

30

Additional Table Permissions for GRC AC12 SP19 and above versions

Note
For SAP GRC AC12 SP19 and above versions, the following additional permissions for the GRACUSERSOURCE table are required.

SERVICE_ACCOUNT

NAME

COLUMNNAME

ENTITY_TYPE

COLUMN_DTYPE

COLUMN_DENAME

COLUMN_LENGTH

<your-service-account-name>

GRACUSERSOURCE

CONNECTOR

TABLE

C

GRFN_CONNECTORID

32

<your-service-account-name>

GRACUSERSOURCE

DATA_SOURCE_TYPE

TABLE

N

GRAC_DATA_SOURCE

2

<your-service-account-name>

GRACUSERSOURCE

SEQUENCE

TABLE

N

GRAC_SEQUENCE

4