Customizing NWBC for New Menus with our own Transactions, Reports and Accessing SAP Backend Systems from NWBC
Customizing NWBC for New Menus with our own Transactions, Reports and Accessing SAP Backend Systems from NWBC
Since GRC 5.3 was on Java stack, customization of GRC screen was not possible on greater extend. As GRC 10.0 is on ABAP stack we have the flexibility of Customization of NWBC as the per the client requirement and you can customize the NWBC to provide access which are not delivered through SAP GRC ABAP Roles.
“Whatever you want see in NWBC choice is yours to enable it”
With this customization of NWBC launch pad we can do the followings provided for you:
- We can access all SAP systems
- Execute all backend system reports ex: SUIM, SE16 reports
- Customize the GRC screens (SPRO) from NWBC itself, no need to login to ABAP and use SPRO T-code
- Create users & roles, develop and configure MSMP by using NWBC.
- BI related reports and queries and many mores …….
Hence you might not need to use SAP GUI since we can customize the NWBC.
Below NWBC customization can be achieved from web based NWBC (internet explorer). You need to make sure that you have one alias name created for each SAP system (ECC/Portal) from SAP Enterprise Portal (SAP EP) as a portal administrator.
Below are few examples of customization of NWBC:
- Accessing Backend systems
- Table Access
- MSMP Access
- BRF Plus Access
- Merging NWBC and SAP Login Screen in internet explorer
Step 1.
Go to SPRO –> Governance, Risk and Compliance –> Configure LaunchPad for Menus
You can see below launch pad and GRC (AC, PC & RM) related Roles and Description. Before customizing, we need to decide in which work center we have to put customized menus/links in NWBC. I have chosen My Home work center in NWBC. For My Home work center choose GRACHOME role (see below).
Select GRACHOME Role and double click or choose edit button.
Step 2:
Select New Folder to create Main Menu in Work center and enter text which ever you need.
Here I have given the text My Company Access (showed in screen) and the same will show in NWBC as Main menu. System will provide default Icon for our customized menu. Save the screen.
Note: You can change the folder name whenever you wish to change.
Step 3:
Choose newly create Folder name (My Company Access) and select New Application button.
Provide the name of Menu/Link which can be execute from NWBC. Ex Table Access
Select any one of Application Category based on your requirement and find below few of SAP provided Application Categories
BEx Analyzer
BI Enterprise Report
BI Query
BI Webtemplete
Cristal Report
Infoset query
KM Document
Managers Desktop
Transaction
Portal Page
Webdynpro ABAP
I have selected Application Category as Transaction, once you select Application Category as Transaction, system will request for transaction code. See below:
Note: For one application, you can select only one transaction or one application category.
As mentioned above, please select System Alias and in this example System Alias is SAP-GRC-AC or Local.
Click on Advanced Parameters tab
GUI TYPE: This is optional and you can select which ever you need.
Step 4
Link to a Repository Application
To add existing SAP Repository objects to our newly created custom folder, kindly follow the process mentioned below:
Select My Company Access (newly created one) and click Link to a Repository Application, system will prompt a launch pad window (marked in green color) to select existing role. See below example where I have selected GRCIAREPOS.
Double click on Role GRCIAREPOS
Once you link your Custom folder with SAP Repository Application, you can also add SAP standard links to our Custom Folder.
Once you double click Role GRCIAREPOS, you can see below screen:
Drill down the GRC_AccessControl Menu and select the relevant role which you want to have in the customized screen and drag in into our custom folder “My Company Access”.
This option gives us to restrict the access from NWBC apart from authorizations.
Add Separator if you wish to differentiate Custom objects and SAP objects.
Select folder My Company Access and select button Add Separator. Now you can move the links/menu and separator wherever you need.
You can see the below screens for NWBC with customizing and without customizing
NWBC without Customizing
NWBC Customizing with custom menus
Example 1: Access SAP system from NWBC
Select newly created folder (My Company Access) and create new application
In Application Category choose Transaction, in Application parameter provide SESSION_MANAGER
- Save and execute NWBC. Go to My Home –> click link SAP Backend system
One new window will open for SAP backend system and click start SAP Easy Access. This SAP will open in internet explorer
You can see the SAP screen in Internet Explorer/NWBC
Example 2: Accessing SAP Backend Tables & Reports from NWBC
Same steps you need follow : Create New Application –> Provide link name as Table acces –> select Transaction in Application Category —> Provide T-Code SE16
Save–> Refresh NWBC and execute
Example 3: Opening MSMP from NWBC
Same Steps we need follow for this example also
Example 4: Opening BRF + application from NWBC
If you select MSMP Configuration link you will redirect to below screen without any internet explorer link option
Most important customization: Merging NWBC and SAP Screen in internet explorer
Configuring SAP screen and NWBC in one page
As explained in above (already given in example 1)
Select newly created folder (My Company Access) and create new application
In Application Category choose Transaction, in Application parameter provide SESSION_MANAGER and System alias is SAP-GRC-AC
Go to Advance Parameters
In advance parameters select GUI Type : SAP GUI for HTML
Select Initial Screen in Entries Once started Option
Portal parameter: select INPLACE Inplace
Save and execute in NWBC
Once you refresh NWBC, you can see the link “SAP Backend system”
Click SAP Backend system link and you will find below screen:
Here you can execute all SAP transactions
Click Start SAP SAP Easy Access button
You will see below SAP screen similar to SAP GUI Screen.
In this screen every thing is same as SAP GUI however you can also see the NWBC menus. Both SAP screen and NWBC are merged in the same screen.
Even if we do not have SAP GUI, we can login to SAP backend system by using this customization. This customizing will be useful for small devices such as smart phones & Tablets. In soon we can able to execute SAP from small devices based on accessibility and Network (Already SAP launched Android App for FF ID approve)
Executing SAP transactions from NWBC.
In this example I have executed PFCG and whatever transactions you execute, you can able to see NWBC work centers in the same screen.
Conclusion
In this way we can customize the NWBC without any ABAP and Java knowledge and whenever we need, we can design and change the screens without taking much time
SAP has provided flexibility to do the customization of NWBC based on the client requirement.
Good Job Trinadh... Keep it up.
Hi Trinad,
Kudos for the article published. It is a nice write-up and provides detailed steps on NWBC screen customization.
Regards,
Suvonkar
Thanks for sharing your knowledge..
Very good article
thanks for sharing 
Thanks for sharing .Nice article
Good One.. Thanks Master 🙂
Nice one Trinad.
Thanks for sharing helpful blog.Keep posting.
Thanks
Katrice
Thanks Trinadh. Keep it Going!
Quite useful, will give it a shot!
Thanks for sharing!
Excellent post, Trinadh
Excellent post and helpful .thanks a lot for posting the same.
Good and helpful, but one question:
How can I transport changes in the NWBC customizing?
Dear Peter,
Thanks for your query and sorry for delay in reply.
These changes cannot be transported into production system and we need to do the change in Production.
With Regards
Trinadh Bokka
Very Good work!!!
Hi,
This is a very good article... thanks a lot for that!!
One question is open to me... how can I map a new created launchpad to a PFCG role? Let's say we have 3 different launchpads (for requester, approver and administrator)... how can I map these to the 3 different PFCG roles?
Thanks for your response... this would help me very much.
Best Regards, Corina
I found it out now... so no answer needed.
Hi Corina
Wwhen you solve a question yourself it is good etiquette in SCN to share your solution. Otherwise, other users search for same problem and find your question with the answer of 'solved myself'
Regards
Colleen
Hi Colleen,
Sure, to match the Launchpad with PFCG role you need to create the Launchpad as "stand alone" and not as I did as "FPM GUIBB".
After you have created the new launchpad (role/instance-combination) you can use it in
transaction PFCG and add the launchpad to the PFCG role using the Web
Dynpro application parameter ROLE and INSTANCE.
Best Regards, Corina
Dear Corina,
Thanks for your explanation.
With Regards
Trinadh Bokka
Dear Melo
Its exist in this portal and you can see this in below link
Customizing NWBC for New Menus with our own Transactions, Reports and Accessing SAP Backend Systems from NWBC
With Regards
Trinadh Bokka
Thank you Trinadh. Excellent step-by-step instructions.
May be I am missing something. When you add a Transaction how do you specify whch backend system to use? I added SUIM as an avaiable t-code in the home page. I have 4 different connectors setup in GRC for various systems. I could not find a place to specify the system to be used.
Kind regards,
Sonny
I tried with the connector name in the 'System Alias" field. I see an information message "Tree Control inconsistent - Delete mode", cannot go any further.
Just read bit more about this. Looks like the backend system referenced is just the ABAP system GRC is sitting on. I got exited hoping I will be able to provide a link to connected systems. Our Risk Owners and Role Owners log into connected systems (SAPGUI) and use SUIM to view roles assigned to users.
Nevertheless your instructions are great.
Thanks,
Sonny
Thank you Sonny..
Dear Sonny,
Kindly send me your error screen shot so that I can help you to go further.
With Regards
Trinadh Bokka
Hi Trinadh,
This is the message
Thank you
Sonny
Dear Sonny,
Sorry for the delay in replying..
I have checked in my system and configured as per your requirement.
Please find the screen shot for SUIM so that your issue will be solved.
Please let me know if you have any issues with the same.
With Regards
Trinadh Bokka
Thank you Trinadh. all ok.
G'Day Trinadh,
Thank you for a fantastic document. Never realised NWBC screens could be customised this way. You have done a great job in explaining everything in detail. No biggie but It could have saved me the trouble of scouring through the SCN pages and then few more in google to find the tcode for MSMP config, if you mentioned it here.
I understand, that's not the objective of this document and I am very grateful for what you posted here but there are people out there(like myself) who are still new to all of this. So it is just a suggestion. I apologise if you did mention it somewhere and I missed it and also if it appears like I am nitpicking.
If anyone's wondering what the tcode for MSMP config is, it is: GRFNMW_CONFIGURE_WD
Regards,
Leo..
Hey Leo
A little off topic from this document, however, I recommend you go to table TSTCT (transactions) and search for all GRFNW* ones and work your way through. There area heap of useful ones (like Expert mode of MSMP as well as instance run-time monitor and debug)
Regards
Col
Thanks Col! I will check it out now.
Cheers
Leo..
P.S: Would you know why the advanced editor is disabled in some pages?
Dear Leo,
Thanks for your comments and I am aware of this transaction code for MSMP but somehow I missed out in this customization.
With Regards
Trinadh Bokka
Dear Trinadh,
thank you very much for your helpfull documentation. Really appretiated it!!!
I have one additional question. We created a launchpad to enter a specific table in SE16 (e.g. GRACFUNCACT) as it is not allowed at our company to have full access to all tables. Therefore, we created a customer specific transaction in SE93 with the variant: GRACFUNCACT. Nevertheless, in SAP NWBC it is via the menu bar possible to select the "Back" button and then to enter the SAP Easy Access Menu.
Do you have an idea how we can hide this menu bar?
Many thanks in advance for your reply!!!
Best regards,
Sebastian
Hi Sabastian,
Instead of giving SESSION_MANAGER under application paramenter you please enter your transaction code directly and it will work and let me know if you face any issue with the same.
With Regrds
Trinadh Bokka
Thanks..
Thanks a lot for your helpfull informations BR H.Klein
HI Trinadh,
Thanks a lot. Could you also please help with information regarding the procedure for adding the custom launchpads into roles. Thank you.
Regards,
Surya
Trinad,
Thanks a lot, tried in S4H client for NWBC personalization and not getting the same settings. Can you please share a thought.... I am exploring though, if i get i will update in the same thread for sure.
Thanks,
Krishna.
Hi Colleen/Trinadh,
While configuring for SE16 T-code I am getting blank URL through NWBC, However when I add Default Access control Menus they are opening correctly. Could you please suggest the gap.
Thanks,
Syed Quadir Imam