Had a question regarding Business Role Mapping to Users in Access Controls, trying to figure out if there is a way to extract the following information from GRC Access Controls:
Any advice in this matter would be greatly appreciated.
That table only contains the following fields:
Therefore, that table doesn't seem to be the answer.
I was, however, able to get the Business Role to Technical Role mapping via the "Role Search" reporting in the NWBC.
Any other ideas on how to get the Business Role to User mapping?
first report that you are looking for USER to BUSINESS Role mapping is not at all available . This is already there in idea place and hope sap will address soon as this very basic functionality missed for business role .
For second report ,I would suggest to go to NWBC - in Role management section you can see role maintenance where you can see all roles created in the system .
You can export this by going to detail export and you can all roles and associated role with system .You can find some field which are not relevant .
Hope this will help .
I have been searching for same for some time now.
Sadly as Aneesh stated, it seems as though this is not available. We have found a short term method of determining what Business Role is assigned to a user. If you create a new GRC Request for a change to a user and select the Existing Assignments button, it will show you the Technical roles and the associated Business Role currently assigned to a user.
Having some experience is developing ABAP reports, I am also looking for the tables that store the Business Roles (Not sure I will) so that I can try to develop a custom report to achieve such.
Hope this was helpful.
I have found that there is a report under the Access Management tab in the NWBC that can give you the User to Business Role when searching by a User.
Under the Access Management tab, there is a section called Access Request Administration. In the listing of links under here there is a Provisioning Logs option. Here I have the option to search by a User, for example. The results will give me the User to Business Role mapping. This report is designed to show the requests that were created for a particular user and the provisioning action for the respective business role.
A request can be made to either remove or add a Business Role to a user. The Provisioning Logs shows you all the activity. This way you can determine what Business Role/s a particular User currently has or previously had.
The column, "Parent Item Name" must be shown to give you the Business Role name. The "Provisioning Action" column is also important so that you know if the role was added or removed. The column settings can be manipulated using the Settings option on this report.
This is the closest that I can find with regards to the User/Business Role mapping when searching by a user. My previous post is another method to determine what a user currently has, but it is a tedious method. This method is easier.
I don't know the tables that this report uses; however, I will continue to search for them.
This helps in my organization and I hope that it will assist you as well.
Thank you Shreya and Jatin for those tables. Still trying to think through the best way where I can create a query in GRC which will pull together the business role, associated roles linked to that business role, and the tcodes that are assigned to those roles which make up the business role. Not sure if anyone has ever created such a query or report?