11 Replies Latest reply: Nov 8, 2013 9:07 PM by Fadel Harp RSS

Business Role mapping to Users GRC 10

Jose Espin
Currently Being Moderated

Greetings all: 

Had a question regarding Business Role Mapping to Users in Access Controls, trying to figure out if there is a way to extract the following information from GRC Access Controls:

  • Report or table that would show the User to Business Role mapping.
  • Report or table that would show the Business Role to Technical Role Mapping (Roles in back-end system)

Any advice in this matter would be greatly appreciated.

  • Re: Business Role mapping to Users GRC 10
    Akhil Chopra
    Currently Being Moderated

    Hi Jose,

     

    Can you please check with table 'GRACRLCONNSTA' in Tcode: SE16.

     

    Regards,

    Akhil Chopra

  • Business Role mapping to Users GRC 10
    Jose Espin
    Currently Being Moderated

    Akhil,

     

    That table only contains the following fields:

    • Client
    • GUID (which is a long string that appears to be encrypted)
    • Target Connector
    • Time Stamp
    • User (which appears to be the user who submitted the request)

     

    Therefore, that table doesn't seem to be the answer.

     

    I was, however, able to get the Business Role to Technical Role mapping via the "Role Search" reporting in the NWBC. 

     

    Any other ideas on how to get the Business Role to User mapping? 

    • Re: Business Role mapping to Users GRC 10
      Smriti Behl
      Currently Being Moderated

      Hi Jose,

       

      Kindly open the Business Role by searching it in NWBC. In the tab "Additional Details" you can see the users assigned under "Users Assigned" as shown below:

       

      Business Role Mapping.png

       

      I hope this resolves your query!!

       

      Best Regards,

      Smriti

      • Re: Business Role mapping to Users GRC 10
        asheesh mishra
        Currently Being Moderated

        HI Jose

         

        first report that you are looking for USER to BUSINESS Role mapping is not at all available . This is already there in idea place and hope sap will address soon as this very basic functionality missed for business role .

         

        For second report ,I would suggest to go to NWBC - in Role management section you can see role maintenance where you can see all roles created in the system .

        You can export this by going to detail export and you can all roles and associated role with system .You can find some field which are not relevant .

         

        Hope this will help .

         

        Thanks Asheesh

  • Re: Business Role mapping to Users GRC 10
    Nicholas Hassanali
    Currently Being Moderated

    Jose,

     

    I have been searching for same for some time now.

     

    Sadly as Aneesh stated, it seems as though this is not available. We have found a short term method of determining what Business Role is assigned to a user. If you create a new GRC Request for a change to a user and select the Existing Assignments button, it will show you the Technical roles and the associated Business Role currently assigned to a user.

     

    Having some experience is developing ABAP reports, I am also looking for the tables that store the Business Roles (Not sure I will) so that I can try to develop a custom report to achieve such.

     

    Hope this was helpful.

  • Re: Business Role mapping to Users GRC 10
    Nicholas Hassanali
    Currently Being Moderated

    Hi Jose,

     

    I have found that there is a report under the Access Management tab in the NWBC that can give you the User to Business Role when searching by a User.

     

    Under the Access Management tab, there is a section called Access Request Administration. In the listing of links under here there is a Provisioning Logs option. Here I have the option to search by a User, for example. The results will give me the User to Business Role mapping. This report is designed to show the requests that were created for a particular user and the provisioning action for the respective business role.

     

    A request can be made to either remove or add a Business Role to a user. The Provisioning Logs shows you all the activity. This way you can determine what Business Role/s a particular User currently has or previously had.

     

    The column, "Parent Item Name" must be shown to give you the Business Role name. The "Provisioning Action" column is also important so that you know if the role was added or removed. The column settings can be manipulated using the Settings option on this report.

     

    This is the closest that I can find with regards to the User/Business Role mapping when searching by a user. My previous post is another method to determine what a user currently has, but it is a tedious method. This method is easier.

     

    I don't know the tables that this report uses; however, I will continue to search for them.

     

    This helps in my organization and I hope that it will assist you as well.

  • Re: Business Role mapping to Users GRC 10
    Fadel Harp
    Currently Being Moderated

    Hello,

     

    Has anyone had any luck with finding the tables/reports?  Also looking for something similar if anyone has any ideas.  Specifically looking for a report or the table where I can trace business role to security role to tcode.

     

    Thanks

  • Re: Business Role mapping to Users GRC 10
    Jatin Grover
    Currently Being Moderated

    1. GRACUSERROLE - check BUS_ROLEID

    2. GRACROLERELAT

  • Re: Business Role mapping to Users GRC 10
    Fadel Harp
    Currently Being Moderated

    Thank you Shreya and Jatin for those tables.  Still trying to think through the best way where I can create a query in GRC which will pull together the business role, associated roles linked to that business role, and the tcodes that are assigned to those roles which make up the business role.  Not sure if anyone has ever created such a query or report?

Actions