Tuesday, February 2, 2016

2142049 - Error "Role does not exist" while running Risk Analysis for HANA connector

Symptom
  • Risk Analysis on Hana Databse is working for Users but not for Roles.
  • 'Role does not exist' message is displayed while performing Risk Analysis even when the role exists and hence no results are displayed. (role name is actually displayed in the result, but has been manually greyed out in this snapshot below).

    Role does not exist.jpg


Environment
GRC10.0, GRC10.1, Risk Analysis, HANA Database


Reproducing the Issue
1. Perform Repository Object Sync from IMG. [HANA roles are case sensitive, you can check in table GRACRLCONN]
2. Roles contain permissions and these permissions are violating some risks.
3. Perform Risk Analysis on Role ['Show all object' checkbox is checked on the Role Level Risk Analysis Screen].
4. On the result screen 'Role does not exist' message is displayed.


Cause
Reason: HANA roles are usually case sensitive and might have been stored in lower case as a part of GRC Repository Sync job (you can see details in table GRACRLCONN).


Resolution
1. Go to SPRO > Governance Risk and Compliance > Access Control > Maintain Configuration Settings
2. Maintain the HANA connector ID as a value for the Parameter ID '1022'.

This parameter id is meant to store the connectors for which the objects are case sensitive.


Keywords
Risk Analysis, Hana Database, Role does not exist, Role Level Risk Analysis, Parameter ID 1022, Case Sensitive



Header Data

Released On 12.03.2015 12:13:47
Release Status Released to Customer
Component GRC-SAC-ARA Access Risk Management
Priority Normal
Category Problem

1 comment:

  1. Great Post!!! I have read your blog and it's very informative & really impressed .
    Thanks for sharing it. Keep continue your post.
    SAP FIORI TRAINING ONLINE
    SAP FICO TRAINING ONLINE

    ReplyDelete