Symptom
While importing the GRC Hana Plugin HCOGRCPI, following issues are occuring:
1. Error Message: The schema name "SAP_PI_GRC" must be equal to the object name "sappigrc"; delete this object and create a new one that matches the schema name; do not change the schema name in this object.
2. Insufficient privilege: Not authorized at ptime/query/checker/query_check.cc:3290 for sap.grc.pi.ac.roles.SAP_GRC_PI_ADMIN.hdbrole
1. Error Message: The schema name "SAP_PI_GRC" must be equal to the object name "sappigrc"; delete this object and create a new one that matches the schema name; do not change the schema name in this object.
2. Insufficient privilege: Not authorized at ptime/query/checker/query_check.cc:3290 for sap.grc.pi.ac.roles.SAP_GRC_PI_ADMIN.hdbrole
Environment
GRC 10.1
HANA Plugin
HANA Plugin
Reproducing the Issue
- Start HANA Studio and Open Modeler perspective
- Add System (where HCO_GRC_PI will be deployed) in the HANA Studio
- After System Registration is completed and Connection verified, Use "Select System" button in the Modeler perspective to select a System you just registered in the previous step.
- In the same Modeler Perspective Click "Import" link located under "Content" label and in the open dialog select "Delivery Unit" under SAP HANA Content and Click "Next" button.
- In the opened window, Select file location as "Client" and use "Browse" button to navigate to the location where file was saved with SAP HANA plug-in downloaded from SMP.
- When .TGZ file is selected, there is a Delivery Unit details in the Object import simulation.
- Click "Finish" button to complete Delivery Unit deployment and Object Activation process.
- sap.grc.pi.ac.db package error occurs.
- schema SAP_PI-GRC exists but HAS PRIVILEGES status as FALSE.
Cause
It is related to HANA deployment module for DU (Delivery Units) in
particular to DB deployment, delivered as part of the HANA contents.
And, it is not a critical DU deployment error.
Resolution
In order to resolve the error with SAP_PI_GRC schema, please execute the statements below in the following order:
DROP SCHEMA SAP_PI_GRC CASCADE;
CREATE SCHEMA SAP_PI_GRC;
This will solve all issues with respect to SAP_PI_GRC schema.
In case of newly installed HANA plugin, you can find more details can be found in the SAP Note - 2162881.
For second issue with "Insufficient privilege: Not authorized at ptime/query/checker/query_check.cc:3290 for sap.grc.pi.ac.roles.SAP_GRC_PI_ADMIN.hdbrole"
This needs to be check with your local HANA admin, but this is not a show stopper. Role is actually created and message above related to the schema SAP_PI_GRC is displayed correctly now. Following query can be used as work around.
GRANT CREATE ANY, INSERT, UPDATE, DELETE, SELECT, EXECUTE ON SCHEMA "SAP_PI_GRC" to "sap.grc.pi.ac.roles::SAP_GRC_PI_ADMIN";`
Rest of the objects delivered with DU HCOGRCPI.tgz with HANA Plug-in on GRC system can be deployed easily and activated without any issue by following the Instructions from the SAP Note 1869912.
DROP SCHEMA SAP_PI_GRC CASCADE;
CREATE SCHEMA SAP_PI_GRC;
This will solve all issues with respect to SAP_PI_GRC schema.
In case of newly installed HANA plugin, you can find more details can be found in the SAP Note - 2162881.
For second issue with "Insufficient privilege: Not authorized at ptime/query/checker/query_check.cc:3290 for sap.grc.pi.ac.roles.SAP_GRC_PI_ADMIN.hdbrole"
This needs to be check with your local HANA admin, but this is not a show stopper. Role is actually created and message above related to the schema SAP_PI_GRC is displayed correctly now. Following query can be used as work around.
GRANT CREATE ANY, INSERT, UPDATE, DELETE, SELECT, EXECUTE ON SCHEMA "SAP_PI_GRC" to "sap.grc.pi.ac.roles::SAP_GRC_PI_ADMIN";`
Rest of the objects delivered with DU HCOGRCPI.tgz with HANA Plug-in on GRC system can be deployed easily and activated without any issue by following the Instructions from the SAP Note 1869912.
Keywords
Insufficient privilege: Not authorized at
ptime/query/checker/query_check.cc:3290 for
sap.grc.pi.ac.roles.SAP_GRC_PI_ADMIN.hdbrole,
"The schema name "SAP_PI_GRC" must be equal to the object name "sappigrc"; delete this object and create a new one that matches the schema name; do not change the schema name in this object", SAP_PI_GRC HAS PRIVILEGE as FALSE,
HANA, HCOGRCPI, HANA GRC Integration
"The schema name "SAP_PI_GRC" must be equal to the object name "sappigrc"; delete this object and create a new one that matches the schema name; do not change the schema name in this object", SAP_PI_GRC HAS PRIVILEGE as FALSE,
HANA, HCOGRCPI, HANA GRC Integration
No comments:
Post a Comment