1869912 - SAP GRC 10.1 Plug-In SAP HANA, SAP HANA Content

Symptom

SAP GRC AC 10.1 plug-in for SAP HANA Integration.
The SAP GRC AC 10.1 plug-in for SAP HANA is required to enable User Provisioning and Risk Analysis in the SAP GRC AC 10.1 central system on NW 740 SP04 and above to the HANA System.
For SAP GRC AC 10.1 with HANA as HCO_GRC_PI Plug-In, DBCO configuration must be used to create CONNECTOR from SAP GRC AC 10.1 Central System to the HANA environment where SAP GRC 10.1 PLUGIN HANA were deployed.

Other Terms

SAP GRC AC 10.1, GRC 10.1, SAP GRC HANA integration, NW740, GRC PI HANA, HCO_GRC_PI, SAP GRC 10.1 Plug-In SAP HANA,SAP-SAC-ARQ,
HANA Integration, HCO_GRC_PIHANA as Plug-In, SAP GRC 10.1 PLUGIN HANA, SAP GRC AC 10.1 with HANA, SAP GRC 10.1 DBCO configuration for HANA Integration.

Reason and Prerequisites

Install the SAP HANA plug-in for GRC integration with HANA

Solution

See Installation Guide for SAP Access Control 10.1 software download details.
Note: Always download from SMP latest available verssion of the SAP GRC AC 10.1 plug-in for SAP HANA.
1. Deploy Delivery Unit with Content for the SAP HANA plug-in for GRC integration with HANA by using HANA Studio.

• Start HANA Studio and Open Modeler perspective.
• Add System (where HCO_GRC_PI will be deployed) in the HANA Studio by providing 

        Host Name, Instance Number, Description, HANA User ID and Password.
        Note: Use SYSTEM or Any HANA User with proper authirizations as User ID to connect to the HANA System where HCO_GRC_PI will be deployed. Mandatory, No exceptions.

• After System Registration is completed and Connection verified, Use "Select System" button in the Modeler perspective to select a System you just registered in the previous step.
• In the same Modeler Perspective Click "Import" link located under "Content" label and in the open dialog select "Delivery Unit" under SAP HANA Content and Click "Next" button.
• In the opened window Select file location as "Client" and use "Browse" button to navigate to the location where you save file with SAP HANA plug-in you downloaded from SMP.

        Note: You may need to use SAPCAR to extract Delivery Unit file with extension .TGZ from the archive you downloaded from SMP.

• When .TGZ file is selected you will see Delivery Unit details in the Object import simulation.
• Click "Finish" button to complete Delivery Unit deployment and Object Activation process.
• Verify deployment by navigating in the "Modeler" perspective to "SAP HANA Systems" where you registered HANA Server.
• Expend from Content node, following packages sap --> grc --> pi --> ac  and under ac package you should be able to see two packages ara with 16 sql objects and arq with 11 sql objects and db with 2 objects and roles with 1 object.  
• In this point Delivery Unit was deployed successfully.

2. Install HANA Integration API to the SYSTEM catalog by using HANA Studio.

• Please use instruction in the attached document HowToOpenRepository.pdf to enable HANA Integration API deployment to the HANA SAP_PI_GRC catalog.
• After Repository is Open as it is shown in the attached document, perform following activities for each file in the ara package.

        a. Double click on first sql file in the ara package and after sql file is open in the SQL Editor.
        b. Right Click in editor window and click on "Choose Connection" and in the open window select the same HANA System you registered above.
        c. Click "Execute" or F8 to create Stored Procedure for selected HANA API in the SAP_PI_GRC Catalog. 
        Please Note: First time execution will show you Errors related to the DROP ... DDL as this objects are not existent in time of first run.
        d. Repeat steps from a to c for rest of the sql files in the ara package.
        e. Repeat steps from a to c for all of the sql files in the arq package only in the following order.
            1. All sql files what name started from is_... and ins_... in any order.
            2. Two sql files that name started from Grant_... and Revoke_... in any order.
            3. Three sql files that name started from Create_... and Change_... in any order.
         f. In this point all Stored Procedure for HANA API in the SAP_GRC_PI Catalog, 27 total.
        g. Double click on the grc_pi_public_sysnonyms.sql file in the db package and after sql file is open in the SQL Editor.
        h. Right Click in editor window and click on "Choose Connection" and in the open window select the same HANA System you registered above.
        i. Click "Execute" or F8 to create Public Synonims for Stored Procedures created in the SAP_PI_GRC Catalog. 
        j. In this point all HANA API are ready to use with SAP HANA plug-in for GRC integration with HANA.
3. Configure SAP GRC 10.1 central system with HANA integration.

1. Create new user (For Example: GRC_DBCO_PI) and grant to this user role sap.grc.pi.ac.roles::SAP_GRC_PI_ADMIN activated in the step 1.
2. Activate new user created in the step 1.   
3. Reset new user password to the permanent password by logging with this user in the HANA Studio.
4. Use newly created GRC_DBCO_PI user in steps above for DBCO configuration in the SAP GRC 10.1 Central system.  

4. If previosly SYSTEM catalog was use to create Stored Procedure for HANA API, use SAP HANA Administration Console Perspective from HANA Studio to delete all GRC Procedure and related objects. (optional)

Header Data

Released On	17.06.2015 17:39:21
Release Status	Released for Customer
Component	GRC-SAC-UPG Installation & Upgrade
Priority	Recommendations / Additional Info
Category	Installation information