13 Replies Latest reply: Jul 25, 2014 10:50 PM by Harinam SanKirtan RSS

Business Role mapping to Users GRC 10

Jose Espin
Currently Being Moderated

Greetings all: 

Had a question regarding Business Role Mapping to Users in Access Controls, trying to figure out if there is a way to extract the following information from GRC Access Controls:

  • Report or table that would show the User to Business Role mapping.
  • Report or table that would show the Business Role to Technical Role Mapping (Roles in back-end system)

Any advice in this matter would be greatly appreciated.

  • Re: Business Role mapping to Users GRC 10
    Akhil Chopra
    Currently Being Moderated

    Hi Jose,

     

    Can you please check with table 'GRACRLCONNSTA' in Tcode: SE16.

     

    Regards,

    Akhil Chopra

  • Business Role mapping to Users GRC 10
    Jose Espin
    Currently Being Moderated

    Akhil,

     

    That table only contains the following fields:

    • Client
    • GUID (which is a long string that appears to be encrypted)
    • Target Connector
    • Time Stamp
    • User (which appears to be the user who submitted the request)

     

    Therefore, that table doesn't seem to be the answer.

     

    I was, however, able to get the Business Role to Technical Role mapping via the "Role Search" reporting in the NWBC. 

     

    Any other ideas on how to get the Business Role to User mapping? 

  • Re: Business Role mapping to Users GRC 10
    Nicholas Hassanali
    Currently Being Moderated

    Jose,

     

    I have been searching for same for some time now.

     

    Sadly as Aneesh stated, it seems as though this is not available. We have found a short term method of determining what Business Role is assigned to a user. If you create a new GRC Request for a change to a user and select the Existing Assignments button, it will show you the Technical roles and the associated Business Role currently assigned to a user.

     

    Having some experience is developing ABAP reports, I am also looking for the tables that store the Business Roles (Not sure I will) so that I can try to develop a custom report to achieve such.

     

    Hope this was helpful.

  • Re: Business Role mapping to Users GRC 10
    Nicholas Hassanali
    Currently Being Moderated

    Hi Jose,

     

    I have found that there is a report under the Access Management tab in the NWBC that can give you the User to Business Role when searching by a User.

     

    Under the Access Management tab, there is a section called Access Request Administration. In the listing of links under here there is a Provisioning Logs option. Here I have the option to search by a User, for example. The results will give me the User to Business Role mapping. This report is designed to show the requests that were created for a particular user and the provisioning action for the respective business role.

     

    A request can be made to either remove or add a Business Role to a user. The Provisioning Logs shows you all the activity. This way you can determine what Business Role/s a particular User currently has or previously had.

     

    The column, "Parent Item Name" must be shown to give you the Business Role name. The "Provisioning Action" column is also important so that you know if the role was added or removed. The column settings can be manipulated using the Settings option on this report.

     

    This is the closest that I can find with regards to the User/Business Role mapping when searching by a user. My previous post is another method to determine what a user currently has, but it is a tedious method. This method is easier.

     

    I don't know the tables that this report uses; however, I will continue to search for them.

     

    This helps in my organization and I hope that it will assist you as well.

  • Re: Business Role mapping to Users GRC 10
    Fadel Harp
    Currently Being Moderated

    Hello,

     

    Has anyone had any luck with finding the tables/reports?  Also looking for something similar if anyone has any ideas.  Specifically looking for a report or the table where I can trace business role to security role to tcode.

     

    Thanks

  • Re: Business Role mapping to Users GRC 10
    Jatin Grover
    Currently Being Moderated

    1. GRACUSERROLE - check BUS_ROLEID

    2. GRACROLERELAT

  • Re: Business Role mapping to Users GRC 10
    Fadel Harp
    Currently Being Moderated

    Thank you Shreya and Jatin for those tables.  Still trying to think through the best way where I can create a query in GRC which will pull together the business role, associated roles linked to that business role, and the tcodes that are assigned to those roles which make up the business role.  Not sure if anyone has ever created such a query or report?

Actions