Prerequisites
-
Ensure that the service account used while the configuring SAP GRC application has sufficient permissions. For more information, refer to Required Permissions to create a service account with minimum permissions.
-
Configuring risks.
-
Sign in to SAP NetWeaver.
-
Go to Rule Setup > Critical Roles > Create.
-
Select the System drop down to see all of the connected system names, which are the respective connector names.
-
-
If a risk is not detected for a critical role/profile you must implement the following SAP Notes in the SAP GRC Server:
-
2409002 - Critical role/profile shows no result for GRAC_RISK_ANALYSIS_WOUT_NO_WS
-
3429303 - Risk Analysis Webservice does not work for Critical Role/Profile Report Type
-
-
If an incorrect SAP GRC connector name is provided, the request will get provisioned even if there is a risk in the request. To avoid this issue, implement the following SAP Note in the SAP GRC Server:
-
2399698 - Validation changes in GRAC_RISK_ANALYSIS_WOUT_NO_WS webservice
-
Note
This enhancement is for users that have Multi-Stage and Multi-Path (MSMP) workflows configured to support provisioning via SAP GRC.