Prerequisites

  1. Ensure that the service account used while the configuring SAP GRC application has sufficient permissions. For more information, refer to Required Permissions to create a service account with minimum permissions.

  2. Configuring risks.

    1. Sign in to SAP NetWeaver.

    2. Go to Rule Setup > Critical Roles > Create.

    3. Select the System drop down to see all of the connected system names, which are the respective connector names.

  3. If a risk is not detected for a critical role/profile you must implement the following SAP Notes in the SAP GRC Server:

    • 2409002 - Critical role/profile shows no result for GRAC_RISK_ANALYSIS_WOUT_NO_WS

    • 3429303 - Risk Analysis Webservice does not work for Critical Role/Profile Report Type

  4. If an incorrect SAP GRC connector name is provided, the request will get provisioned even if there is a risk in the request. To avoid this issue, implement the following SAP Note in the SAP GRC Server:

    • 2399698 - Validation changes in GRAC_RISK_ANALYSIS_WOUT_NO_WS webservice

Note
This enhancement is for users that have Multi-Stage and Multi-Path (MSMP) workflows configured to support provisioning via SAP GRC.