Skip to Content
Author's profile photo Former Member

Fiori apps in GRC – Install two applications in 5 easy steps

SAP has significantly increased the usability of some of the most common business functions with the creation of Fiori – oh, and now it is free: Fiori is free, now what.


Here at NIMBL we have been busy configuring Fiori Applications in our lab environment, and this week we focused on GRC and more specifically, the applications that are available for SAP Access Control.

SAP has several applications available for Access Control – below are highlights of the most popular ones:

  • Request Access: A user can search for SAP roles based on various criteria, then they can request those roles with one click.
  • Check Request Status:  Search for all requests submitted by me or on my behalf and check the status of the request.  Additionally, see the list of all approvers and send them a message
  • Access Approver: Approve, Reject or forward access requests.  You can view risk information about the request and explore the information on the risk level and actions that caused the risks.  Send a personalized comment to the requestor.

The two applications that we have installed and configured are Request Access and Check Request Status.

Launchpad.png

Pretty cool huh? (It beats CUP any day)


Here are the basic installation and configuration steps for the above applications:

     1) Our GRC system is running on NW 7.4, which includes the SAP_UI and Gateway components – We did however need to install the      GRC Transactional  Applications for Fiori – this is: SAPK-100AGINUIGRC001

     2) Review and Install any relevant OSS notes.  For the GRC UI and the Access Apps, the needed OSS notes are:

          1929930 – General Prerequisites needed for GRC Fiori


           1966012 – Corrections for Access Request App

    

    

     3) Activate the OData Services via /IWFND/MAINT_SERVICE transaction code.  The two oData services needed are:

     GRC_ACCESSREQUEST_CREATE and

     GRC_ACCESSREQUEST_TRACK

     4) Activate the UI Components in SICF, they are:

     GRC_ACREQ_CRE and

     GRC_ACREQ_MON

     5) Assign the Roles needed to the Users, they are:

     SAP_GRC_ACREQ_CRE_APP

     SAP_GRC_ACREQ_MON_APP

     SAP_GRC_BCR_EMPLOYEE

And that is it – check out the screenshots: (Note: These were taken on a Nexus 7 tablet)


/wp-content/uploads/2014/08/ra_513029.png


/wp-content/uploads/2014/08/sub_513030.png


Overall – the installation and configuration for these two applications were very simple.  More, in-depth configuration steps are required for some of the other applications in GRC.  It is however worth the effort, as you can see the UI is simple, intuitive and pleasing to look at. 

Assigned tags

      8 Comments
      You must be Logged on to comment or reply to a post.
      Author's profile photo Mahendra Bhandari
      Mahendra Bhandari

      Thank you Sarah!

      Author's profile photo Former Member
      Former Member

      Hi Sarah,

      We too have implemented Request access, check status and access Approver firoi applications.

      We want to now add validity from and to dates in the Request access  app. Did you find any helpful documentation on how to add new fields ? details on extensibilty in this link App Implementation: Request Access - SAP Fiori Apps - SAP Library are not very helpful.  Since the nwbc version of the application already has valid from and to dates, I would think adding new custom field would not be the right way to do it.

      Thanks

      Kalpana

      Author's profile photo Dávid Tóth
      Dávid Tóth

      HI Sarah,

      we Implemented the Access Approval app, but after the submit action the request is not approved, it disappears from the list in the app but when I reload it it's still there...do you have any ideas what can course this problems?

      Thanks,

      David

      Author's profile photo Mahendra Bhandari
      Mahendra Bhandari

      Hi Dávid,

      At the time of Approval, pl check F12 (in Google Chrome) and see if there are any error's in it (esp the Network Tab and Console Tab).

      By this, we can narrow down the issue.

      Also, if you can help with the Component versions of UI addon, UI5 Lib version and Backend Addon.

      KR,

      ~ MB

      Author's profile photo Dávid Tóth
      Dávid Tóth

      Hi,

      So I found out that the Submit logic is fully missing from the server:Method 'SUBMITS_GET_ENTITYSET' not implemented in data provider class.

      But i think I have the correct backend component installed:

      GRCFND_A V1100 0010 SAPK-V1110INGRCFNDA GRC Foundation ABAP

      I think the ui5 version is not relevant now :/

      Any Ideas how to solve this?

      Thanks,

      David

      Author's profile photo Mahendra Bhandari
      Mahendra Bhandari

      Hi David,

      You can raise an Incident and on the other hand, I think you can search for SAP Notes (if there are any). However, as you mentioned- this is something mismatch in UI and oData Add-ons..... Can you provide both the details so that we can narrow it down.

      KR,

      ~ MB

      Author's profile photo Dávid Tóth
      Dávid Tóth

      Hi,

      We already raised a ticket but we dont have helpful answer yet.

      So this is what we have on the Gateway:

      SAP_BASIS 740 0012 SAPKB74012 SAP Basis Component
      SAP_ABA 740 0012 SAPKA74012 Cross-Application Component
      SAP_GWFND 740 0012 SAPK-74012INSAPGWFND SAP Gateway Foundation 7.40
      SAP_UI 740 0013 SAPK-74013INSAPUI User Interface Technology 7.40
      PI_BASIS 740 0012 SAPK-74012INPIBASIS Basis Plug-In
      ST-PI 740 0002 SAPK-74002INSTPI SAP Solution Tools Plug-In
      SAP_BW 740 0012 SAPKW74012 SAP Business Warehouse
      IW_FNDGC 100 0004 SAPK-10004INIWFNDGC SAP IW FNDGC 100
      IW_PGW 100 0007 SAPK-10007INIWPGW Process Gateway
      WEBCUIF 747 0007 SAPK-74707INWEBCUIF SAP Web UI Framework
      IW_CBS 200 0010 SAPK-20010INIWCBS SAP IW CBS 200
      IW_CNT 200 0010 SAPK-20010INIWCNT SAP IW CNT 200
      SAPUIFT 100 0000 - SAP UI Frontend Implementation Technolog
      UIGRC001 100 0006 SAPK-10006INUIGRC001 UI for GRC
      UIX01CA1 100 0005 SAPK-10005INUIX01CA1 UI for Cross-Applications

      And this on the Backend:

      SAP_BASIS 740 0012 SAPKB74012 SAP Basis Component
      SAP_ABA 740 0012 SAPKA74012 Cross-Application Component
      SAP_GWFND 740 0012 SAPK-74012INSAPGWFND SAP Gateway Foundation 7.40
      SAP_UI 740 0013 SAPK-74013INSAPUI User Interface Technology 7.40
      PI_BASIS 740 0012 SAPK-74012INPIBASIS Basis Plug-In
      ST-PI 740 0002 SAPK-74002INSTPI SAP Solution Tools Plug-In
      SAP_BW 740 0012 SAPKW74012 SAP Business Warehouse
      GRCFND_A V1100 0010 SAPK-V1110INGRCFNDA GRC Foundation ABAP
      GRCPINW V1100_731 0010 SAPK-11510INGRCPINW SAP GRC NetWeaver Plug-In
      IW_PGW 100 0007 SAPK-10007INIWPGW Process Gateway
      POASBC 100_731 0006 SAPK-10206INPOASBC POA Shared Business Components
      SAPUIFT 100 0000 - SAP UI Frontend Implementation Technolog
      UIGRC001 100 0006 SAPK-10006INUIGRC001 UI for GRC
      ST-A/PI 01R_700 0002 SAPKITAB7P

      Servicetools for other App./Netweaver 04

      I think it should be fine, but please let me know if u see any mistakes.

      Br,

      David

      Author's profile photo Kiran Israni
      Kiran Israni

      Hi

       

      Following roles to be assigned in Gateway or in GRC system or both

      Assign the Roles needed to the Users, they are:

      SAP_GRC_ACREQ_CRE_APP

      SAP_GRC_ACREQ_MON_APP

      SAP_GRC_BCR_EMPLOYEE

       

      Thanks

      Kiran