GRC UAR not excluding specified role

[Former Member]

Hi Experts ,

I’m experiencing an issue whereby i am attempting to exclude certain roles (All general user roles as we don’t want to send this information to reviewers ) from our UAR exercise .

I input the values I would like to exclude when creating the UAR generation .

However , upon completion of the request , it still displays all the roles that I indicated to exclude .

I’m not sure why this is happening .

I hope that somebody can help me with this .

Regards,
AJ

[madhusap · Accepted solution]

Hi AJ,

We are on GRC SP13 and I have tested and it is working fine.

Please share some screenshot on how you excluded as well as your GRC support pack details so that it will be easy to help.

Regards,

Madhu.

[Former Member · Accepted solution]

Hi Madhu ,

Were also on the SP13 .

I do it the exact same way as your screen shot .

My apologies  , I should have worded my concern better .

When I input one role to exclude it works . The issue is when I input a
couple of roles , then is doesn't work .

Just for more info , I'm trying to exclude our general user roles from the
review . The general user role is an composite role that contains 30 single
roles . So essentially I’m trying to exclude all these 30 roles form the UAR .

It would've been helpful if  , for
example  , when input the general composite
role to exclude , it also excludes all the single roles belonging to that
composite role , but it doesn’t .

[madhusap · Accepted solution]

Hi AJ,

I just tried by excluding a composite role and it is working fine. In my scenario UAR reviewers are Managers.

Are your reviewers Managers or Role Owners?

Regards,

Madhu.

[Former Member · Accepted solution]

Hi Madhu ,

I've setup Manager as reviewer as well

Just to confirm , when you exclude the composite role from the UAR generation, does it also exclude all its single roles when the UAR is generated ?

Regards,
AJ

[madhusap · Accepted solution]

Hi AJ,

My UAR requests will contain only directly assigned roles not indirect assignments.

i.e., UAR request shows only assigned Composite roles and not the single roles which are part of composite roles.

When I excluded composite role, that role got excluded.

In your scenario your UAR requests, are they showing indirect assignments also??

Please check GRACROLEUSAGE table once, whether this table contains Composite roles only or Single roles which are part of composite role also for any UserID?

Regards,

Madhu.

[Former Member · Accepted solution]

Hi Madhu ,

I've resolved the issue .

There was an issue with one if the single roles in the GRC repository which belongs to the composite role .

(GRC didn't recognize the role). After I re-imported the role , everything is working as it should .

Also , the UAR only displays composite roles as described by you above .

Thanks you so much for all assistance  , it was most helpful in resolving my issue .

(Also just for info , there is an program called GRAC_UAR_REQUEST_GEN , which can be used for UAR generation ,so you don't have to log onto NWBC for this purpose)

Regards,
AJ

[alessandr0]

Dear AJ,

based on your SP level are several notes from SAP. Please let us know.

See for example the following note if you are below SP 9:

http://service.sap.com/sap/support/notes/1717387

Regards,

Alessandro