Skip to Content

Customizing NWBC for New Menus with our own Transactions, Reports and Accessing SAP Backend Systems from NWBC


Since GRC 5.3 was on Java stack, customization of GRC screen was not possible on greater extend. As GRC 10.0 is on ABAP stack we have the flexibility of Customization of NWBC as the per the client requirement and you can customize the NWBC to provide access which are not delivered through SAP GRC ABAP Roles.

“Whatever you want see in NWBC choice is yours to enable it”

With this customization of NWBC launch pad we can do the followings provided for you:

  1. We can access all SAP systems
  2. Execute  all backend system reports ex: SUIM, SE16 reports
  3. Customize the GRC screens (SPRO) from NWBC itself, no need to login to ABAP and use SPRO T-code
  4. Create users & roles, develop and configure MSMP by using NWBC.
  5. BI related reports and queries  and many mores …….

Hence you might not need to use SAP GUI since we can customize the NWBC.

Below NWBC customization can be achieved from web based NWBC (internet explorer). You need to make sure that you have one alias name created for each SAP system (ECC/Portal) from SAP Enterprise Portal (SAP EP) as a portal administrator.

Below are  few examples of customization of NWBC:

  1. Accessing Backend systems
  2. Table Access
  3. MSMP Access
  4. BRF Plus Access
  5. Merging NWBC and SAP Login Screen in internet explorer

Step 1.


   Go to SPRO –> Governance, Risk and Compliance –> Configure LaunchPad for Menus


               Image 1.JPG


You can see below launch pad and GRC (AC, PC & RM) related Roles and Description. Before customizing, we need to decide in which work center we have to put customized menus/links in NWBC. I have chosen My Home work center in NWBC. For My Home work center choose GRACHOME role (see below).

Select GRACHOME Role and double click or choose edit button.


               Image 2.JPG


Step 2:

Select New Folder to create Main Menu in Work center and enter text which ever you need.
Here I have given the text My Company Access (showed in screen) and the same will show in NWBC as Main menu. System will provide default Icon for our customized menu. Save the screen.


Note: You can change the folder name whenever you wish to change.

              Image 3.JPG

               Image 4.JPG

Step 3:

Choose newly create Folder name (My Company Access) and select New Application button.

Provide the name of Menu/Link which can be execute from NWBC. Ex Table Access

Select any one of Application Category based on your requirement and find below few of SAP provided Application Categories

BEx Analyzer
BI Enterprise Report
BI Query
BI Webtemplete
Cristal Report
Infoset query
KM Document
Managers Desktop
Transaction
Portal Page
Webdynpro ABAP

I have selected Application Category as Transaction, once you select Application Category as Transaction, system will request for transaction code. See below:

Note: For one application, you can select only one transaction or one application category.

As mentioned above, please select System Alias and in this example System Alias is SAP-GRC-AC or Local.

               Image 5.JPG

Click on Advanced Parameters tab

GUI TYPE: This is optional and you can select which ever you need.

               Image 6.JPG

Step 4

Link to a Repository Application

To add existing SAP Repository objects to our newly created custom folder, kindly follow the process mentioned below:

Select My Company Access (newly created one) and click Link to a Repository Application, system will prompt a launch pad window (marked in green color) to select existing role. See below example where I have selected GRCIAREPOS.

Double click on Role GRCIAREPOS

Once you link your Custom folder with SAP Repository Application, you can also add SAP standard links to our Custom Folder.

               Image 7.JPG

Once you double click Role GRCIAREPOS, you can see below screen:

               Image 8.JPG

Drill down the GRC_AccessControl Menu and select the relevant role which you want to have in the customized screen and drag in into our custom folder “My Company Access”.

This option gives us to restrict the access from NWBC apart from authorizations.

               Image 9.JPG

Add Separator if you wish to differentiate Custom objects and SAP objects.

Select folder My Company Access and select button Add Separator. Now you can move the links/menu and separator wherever you need.

               Image 10.JPG

You can see the below screens for NWBC with customizing and without customizing

NWBC without Customizing


               Image 11.JPG

NWBC Customizing with custom menus

               Image 12.JPG

Example 1: Access SAP system from NWBC


Select newly created folder (My Company Access) and create new application
In Application Category choose Transaction, in Application parameter provide SESSION_MANAGER

               Image 13.JPG

  1. Save and execute NWBC. Go to My Home –> click link SAP Backend system

               Image 14.JPG

One new window will open for SAP backend system and click start SAP Easy Access. This SAP will open in internet explorer

               Image 15.JPG

You can see the SAP screen in Internet Explorer/NWBC

               Image 16.JPG

Example 2: Accessing SAP Backend Tables & Reports from NWBC

Same steps you need follow : Create New Application –> Provide link name as Table acces –> select Transaction in Application Category —> Provide T-Code SE16


Save–> Refresh NWBC and execute

               Image 17.JPG

               Image 18.JPG    

Example 3: Opening MSMP from NWBC

Same Steps we need follow for this example also

               Image 19.JPG

    Example 4: Opening BRF + application from NWBC

               Image 20.JPG

               Image 21.JPG

               Image 22.JPG

If you select MSMP Configuration link you will redirect to below screen without any internet explorer link option

Most important customization: Merging NWBC and SAP Screen in internet explorer

Configuring SAP screen and NWBC in one page

As explained in above (already given in example 1)


Select newly created folder (My Company Access) and create new application
In Application Category choose Transaction, in Application parameter provide SESSION_MANAGER and System alias is               SAP-GRC-AC


               Image 13.JPG

Go to Advance Parameters


In advance parameters select GUI Type : SAP GUI for HTML

Select Initial Screen in Entries Once started Option

Portal parameter: select  INPLACE Inplace


               Image 23.JPG

Save and execute in NWBC

Once you refresh NWBC, you can see the link “SAP Backend system”

               Image 28.jpg

Click SAP Backend system link and you will find below screen:

Here you can execute all SAP transactions

               Image 24.JPG

Click Start SAP SAP Easy Access button


You will see below SAP screen similar to SAP GUI Screen.

In this screen every thing is same as SAP GUI however you can also see the NWBC menus. Both SAP screen and NWBC are merged in the same screen.

Even if we do not have SAP GUI, we can login to SAP backend system by using this customization. This customizing will be useful for small devices such as smart phones & Tablets. In soon we can able to execute SAP from small devices based on accessibility and Network (Already SAP launched Android App for FF ID approve)

               Image 25.JPG

Executing SAP transactions from NWBC.

In this example I have executed PFCG and whatever transactions you execute, you can able to see NWBC work centers in the same screen.

               Image 29.jpg

Conclusion

In this way we can customize the NWBC without any ABAP and Java knowledge and whenever we need, we can design and change the screens without taking much time

SAP has provided flexibility to do the customization of NWBC based on the client requirement.

To report this post you need to login first.

37 Comments

You must be Logged on to comment or reply to a post.

  1. Suvonkar Bashak

    Hi Trinad,

     

    Kudos for the article published. It is a nice write-up and provides detailed steps on NWBC screen customization.

     

    Regards,

    Suvonkar

    (0) 
    1. Trinadh Bokka Post author

      Dear Peter,

       

      Thanks for your query and sorry for delay in reply.

      These changes cannot be transported into production system and we need to do the change in Production.

       

      With Regards

      Trinadh Bokka

      (0) 
  2. Corina Aerni

    Hi,

    This is a very good article… thanks a lot for that!!

     

    One question is open to me… how can I map a new created launchpad to a PFCG role? Let’s say we have 3 different launchpads (for requester, approver and administrator)… how can I map these to the 3 different PFCG roles?

     

    Thanks for your response… this would help me very much.

     

    Best Regards, Corina

    (0) 
      1. Colleen Hebbert

        Hi Corina

         

        Wwhen you solve a question yourself it is good etiquette in SCN to share your solution. Otherwise, other users search for same problem and find your question with the answer of ‘solved myself’

         

        Regards

        Colleen

        (0) 
        1. Corina Aerni

          Hi Colleen,

           

          Sure, to match the Launchpad with PFCG role you need to create the Launchpad as “stand alone” and not as I did as “FPM GUIBB”.

          After you have created the new launchpad (role/instance-combination) you can use it in

          transaction PFCG and add the launchpad to the PFCG role using the Web

          Dynpro application parameter ROLE and INSTANCE.

           

          Best Regards, Corina

          (0) 
  3. Sonny Samarakoon

    Thank you Trinadh. Excellent step-by-step instructions.

     

    May be I am missing something. When you add a Transaction how do you specify whch backend system to use? I added SUIM as an avaiable t-code in the home page. I have 4 different connectors setup in GRC for various systems. I could not find a place to specify the system to be used.

     

    Kind regards,

    Sonny 

    (0) 
    1. Sonny Samarakoon

      I tried with the connector name in the ‘System Alias” field. I see an information message “Tree Control inconsistent – Delete mode”, cannot go any further.

      (0) 
      1. Sonny Samarakoon

        Just read bit more about this. Looks like the backend system referenced is just the ABAP system GRC is sitting on. I got exited hoping I will be able to provide a link to connected systems. Our Risk Owners and Role Owners log into connected systems (SAPGUI) and use SUIM to view roles assigned to users.

         

        Nevertheless your instructions are great.

         

        Thanks,

        Sonny

        (0) 
          1. Trinadh Bokka Post author

            Dear Sonny,

             

            Sorry for the delay in replying..

             

            I have checked in my system and configured as per your requirement.

            Please find the screen shot for SUIM so that your issue will be solved.

             

            Please let me know if you have any issues with the same.

             

            SUIM.JPG

             

            With Regards

            Trinadh Bokka

            (0) 
  4. S A

    G’Day Trinadh,

     

    Thank you for a fantastic document. Never realised NWBC screens could be customised this way. You have done a great job in explaining everything in detail. No biggie but It could have saved me the trouble of scouring through the SCN pages and then few more in google to find the tcode for MSMP config, if you mentioned it here.

    I understand, that’s not the objective of this document and I am very grateful for what you posted here but there are people out there(like myself) who are still new to all of this. So it is just a suggestion. I apologise if you did mention it somewhere and I missed it and also if it appears like I am nitpicking.

     

    If anyone’s wondering what the tcode for MSMP config is, it is: GRFNMW_CONFIGURE_WD

     

    Regards,

    Leo..

    (0) 
    1. Colleen Hebbert

      Hey Leo

       

      A little off topic from this document, however, I recommend you go to table TSTCT (transactions) and search for all GRFNW* ones and work your way through. There area  heap of useful ones (like Expert mode of MSMP as well as instance run-time monitor and debug)

       

      Regards

      Col

      (0) 
      1. S A

        Thanks Col! I will check it out now.

         

        Cheers

        Leo..

         

        P.S: Would you know why the advanced editor is disabled in some pages?

        (0) 
    2. Trinadh Bokka Post author

      Dear Leo,

       

      Thanks for your comments and I am aware of this transaction code for MSMP but somehow I missed out in this customization.

       

      With Regards

      Trinadh Bokka

      (0) 
  5. Sebastian Mayer

    Dear Trinadh,

     

    thank you very much for your helpfull documentation. Really appretiated it!!!

     

    I have one additional question. We created a launchpad to enter a specific table in SE16 (e.g. GRACFUNCACT) as it is not allowed at our company to have full access to all tables. Therefore, we created a customer specific transaction in SE93 with the variant: GRACFUNCACT. Nevertheless, in SAP NWBC it is via the menu bar possible to select the “Back” button and then to enter the SAP Easy Access Menu.

     

    Do you have an idea how we can hide this menu bar?

     

     

    Many thanks in advance for your reply!!!

     

    Best regards,
    Sebastian

    (0) 
    1. Trinadh Bokka Post author

      Hi Sabastian,

       

      Instead of giving SESSION_MANAGER under application paramenter you please enter your transaction code directly and it will work and let me know if you face any issue with the same.

       

      With Regrds

      Trinadh Bokka

      (0) 

Leave a Reply