SAP has significantly increased the usability of some of the most common business functions with the creation of Fiori – oh, and now it is free: Fiori is free, now what.


Here at NIMBL we have been busy configuring Fiori Applications in our lab environment, and this week we focused on GRC and more specifically, the applications that are available for SAP Access Control.

SAP has several applications available for Access Control – below are highlights of the most popular ones:

  • Request Access: A user can search for SAP roles based on various criteria, then they can request those roles with one click.
  • Check Request Status:  Search for all requests submitted by me or on my behalf and check the status of the request.  Additionally, see the list of all approvers and send them a message
  • Access Approver: Approve, Reject or forward access requests.  You can view risk information about the request and explore the information on the risk level and actions that caused the risks.  Send a personalized comment to the requestor.

The two applications that we have installed and configured are Request Access and Check Request Status.

Launchpad.png

Pretty cool huh? (It beats CUP any day)


Here are the basic installation and configuration steps for the above applications:

     1) Our GRC system is running on NW 7.4, which includes the SAP_UI and Gateway components – We did however need to install the      GRC Transactional  Applications for Fiori – this is: SAPK-100AGINUIGRC001

     2) Review and Install any relevant OSS notes.  For the GRC UI and the Access Apps, the needed OSS notes are:

          1929930 – General Prerequisites needed for GRC Fiori


           1966012 – Corrections for Access Request App

    

    

     3) Activate the OData Services via /IWFND/MAINT_SERVICE transaction code.  The two oData services needed are:

     GRC_ACCESSREQUEST_CREATE and

     GRC_ACCESSREQUEST_TRACK

     4) Activate the UI Components in SICF, they are:

     GRC_ACREQ_CRE and

     GRC_ACREQ_MON

     5) Assign the Roles needed to the Users, they are:

     SAP_GRC_ACREQ_CRE_APP

     SAP_GRC_ACREQ_MON_APP

     SAP_GRC_BCR_EMPLOYEE

And that is it – check out the screenshots: (Note: These were taken on a Nexus 7 tablet)


/wp-content/uploads/2014/08/ra_513029.png


/wp-content/uploads/2014/08/sub_513030.png


Overall – the installation and configuration for these two applications were very simple.  More, in-depth configuration steps are required for some of the other applications in GRC.  It is however worth the effort, as you can see the UI is simple, intuitive and pleasing to look at. 

To report this post you need to login first.

8 Comments

You must be Logged on to comment or reply to a post.

  1. Kalpana Tyagi

    Hi Sarah,

    We too have implemented Request access, check status and access Approver firoi applications.

    We want to now add validity from and to dates in the Request access  app. Did you find any helpful documentation on how to add new fields ? details on extensibilty in this link App Implementation: Request Access – SAP Fiori Apps – SAP Library are not very helpful.  Since the nwbc version of the application already has valid from and to dates, I would think adding new custom field would not be the right way to do it.

    Thanks

    Kalpana

    (0) 
  2. Dávid Tóth

    HI Sarah,

    we Implemented the Access Approval app, but after the submit action the request is not approved, it disappears from the list in the app but when I reload it it’s still there…do you have any ideas what can course this problems?

    Thanks,

    David

    (0) 
    1. Mahendra Bhandari

      Hi Dávid,

      At the time of Approval, pl check F12 (in Google Chrome) and see if there are any error’s in it (esp the Network Tab and Console Tab).

      By this, we can narrow down the issue.

      Also, if you can help with the Component versions of UI addon, UI5 Lib version and Backend Addon.

      KR,

      ~ MB

      (0) 
      1. Dávid Tóth

        Hi,

        So I found out that the Submit logic is fully missing from the server:Method ‘SUBMITS_GET_ENTITYSET’ not implemented in data provider class.

        But i think I have the correct backend component installed:

        GRCFND_A V1100 0010 SAPK-V1110INGRCFNDA GRC Foundation ABAP

        I think the ui5 version is not relevant now :/

        Any Ideas how to solve this?

        Thanks,

        David

        (0) 
        1. Mahendra Bhandari

          Hi David,

          You can raise an Incident and on the other hand, I think you can search for SAP Notes (if there are any). However, as you mentioned- this is something mismatch in UI and oData Add-ons….. Can you provide both the details so that we can narrow it down.

          KR,

          ~ MB

          (0) 
          1. Dávid Tóth

            Hi,

            We already raised a ticket but we dont have helpful answer yet.

            So this is what we have on the Gateway:

            SAP_BASIS 740 0012 SAPKB74012 SAP Basis Component
            SAP_ABA 740 0012 SAPKA74012 Cross-Application Component
            SAP_GWFND 740 0012 SAPK-74012INSAPGWFND SAP Gateway Foundation 7.40
            SAP_UI 740 0013 SAPK-74013INSAPUI User Interface Technology 7.40
            PI_BASIS 740 0012 SAPK-74012INPIBASIS Basis Plug-In
            ST-PI 740 0002 SAPK-74002INSTPI SAP Solution Tools Plug-In
            SAP_BW 740 0012 SAPKW74012 SAP Business Warehouse
            IW_FNDGC 100 0004 SAPK-10004INIWFNDGC SAP IW FNDGC 100
            IW_PGW 100 0007 SAPK-10007INIWPGW Process Gateway
            WEBCUIF 747 0007 SAPK-74707INWEBCUIF SAP Web UI Framework
            IW_CBS 200 0010 SAPK-20010INIWCBS SAP IW CBS 200
            IW_CNT 200 0010 SAPK-20010INIWCNT SAP IW CNT 200
            SAPUIFT 100 0000 SAP UI Frontend Implementation Technolog
            UIGRC001 100 0006 SAPK-10006INUIGRC001 UI for GRC
            UIX01CA1 100 0005 SAPK-10005INUIX01CA1 UI for Cross-Applications

            And this on the Backend:

            SAP_BASIS 740 0012 SAPKB74012 SAP Basis Component
            SAP_ABA 740 0012 SAPKA74012 Cross-Application Component
            SAP_GWFND 740 0012 SAPK-74012INSAPGWFND SAP Gateway Foundation 7.40
            SAP_UI 740 0013 SAPK-74013INSAPUI User Interface Technology 7.40
            PI_BASIS 740 0012 SAPK-74012INPIBASIS Basis Plug-In
            ST-PI 740 0002 SAPK-74002INSTPI SAP Solution Tools Plug-In
            SAP_BW 740 0012 SAPKW74012 SAP Business Warehouse
            GRCFND_A V1100 0010 SAPK-V1110INGRCFNDA GRC Foundation ABAP
            GRCPINW V1100_731 0010 SAPK-11510INGRCPINW SAP GRC NetWeaver Plug-In
            IW_PGW 100 0007 SAPK-10007INIWPGW Process Gateway
            POASBC 100_731 0006 SAPK-10206INPOASBC POA Shared Business Components
            SAPUIFT 100 0000 SAP UI Frontend Implementation Technolog
            UIGRC001 100 0006 SAPK-10006INUIGRC001 UI for GRC
            ST-A/PI 01R_700 0002 SAPKITAB7P

            Servicetools for other App./Netweaver 04

            I think it should be fine, but please let me know if u see any mistakes.

            Br,

            David

            (0) 
  3. Kiran Israni

    Hi

     

    Following roles to be assigned in Gateway or in GRC system or both

    Assign the Roles needed to the Users, they are:

    SAP_GRC_ACREQ_CRE_APP

    SAP_GRC_ACREQ_MON_APP

    SAP_GRC_BCR_EMPLOYEE

     

    Thanks

    Kiran

     

    (0) 

Leave a Reply