GRC 5.3: Mass role import in ERM

[Former Member]

Dear Guys,

Please help me to understand the concept of Mass role import in GRC 5.3 ERM with program in Backend : /VIRSA/RE_DNLDROLES

What does Role info file and Role org file signifies and what are the contents inside those files.

Please check the attached screenshot for the program : /VIRSA/RE_DNLDROLES

Thanks in Advance....

[FilipGRC]

Hi Arpit,

first of all I would recommend migrating / updating the SAP GRC 5.3 into versison 10.0 or 10.1.

Below I have outline to concept.

Using this program in background you can perform Mass Role Import in Enterprise Role Management . Before you run it make sure that connectors and role attributes are configured within Enterprise Role Management (ERP). Roles and Derive roles exist in the R/3 back end system and also Org values are maintained with correct field names and values.  These values must match the data in the role file data.

All background jobs, including Transaction/Object/Field Value, Org Value, and Activity Value synchronizations need to be scheduled in the order started in sap note 1250568.

1. Download a Bulk Download text file by running the /VIRSA/RE_DNLDROLES transaction, on the SAP ERP system from which you plan to import roles. You should run this job in background mode.

2. Save the file to either your local computer or to the server on which Enterprise Role Management is installed.

3. Create an information file for the downloaded roles in Enterprise Role Management. This file contains mandatory information specific to Enterprise Role Management. This information does not exist in the back-end SAP system. The information file must be in tab delimited text format and contain the following role attributes with the corresponding role names: Business Process, Sub-Process, and Project/Release. You can download templates for creating the information file and other files by clicking on help on the top right hand corner of your ERP 5.3 version. For ERP 5.3, you can access the template by using the Mass Role Import screen in the Configuration tab. In the System Type field, select SAP from the dropdown menu. The Enterprise Role Management Information File field appears. Click the Red Arrow icon to download the template.

4. If you import a derived role, its master role must exist within Enterprise Role Management, and you must create a Primary Org Level file. Enterprise Role Management provides a template for this purpose. Access the template by clicking the red download arrow next to the Browse icon from the Mass Role Import screen for ERP 5.3.  For ERP 5.2, the template is at the same location as other templates accessing via help link.

5. Fill in all system info and file location info in the Mass Role Import screen and start the import process.

Hope this help,

Filip