SAP Access Control – Useful Documents, Blogs, Resources, etc.

August 19, 2014 | 30,275 Views |

Alessandro Banzer

SAP Access Control

This document is a collection of the most useful SAP GRC Access Control documents, blogs, resources, links, etc. here in SCN.

Legend

	SAP SCN Documents
	SAP SCN Blogs
	SAP Wiki
	Newly added document (Contributors: please select from Emoticons )

Please help in updating the collection so that new users can get a well structured overview for their information.

Best regards,

Alessandro

To report this post you need to login first.

70 Comments

You must be Logged on to comment or reply to a post.

Colleen Hebbert August 20, 2014 at 8:24 am

Hey Alessandro

Good idea – do you think it would be worth linking to the Wiki as well?

like (0)
1. Alessandro Banzer Post authorAugust 20, 2014 at 8:51 am
  
  Hi Colleen,
  
  personally I would say yes that make sense. I’ve just started yesterday as I missed such a document and had to search in SCN for some information and had a tough time. So I thought it make sense to have a collection also for newbies.
  
  Regards
  
  Alessandro
  
  like (0)
  1. Prasant Kumar Paichha September 29, 2014 at 6:05 pm
    
    Hello Can you add I document in BRM.
    
    Concept is when you have 3 systems landscape how you create role in development and how you move to qua and prd.
    
    basically the use of logical group and mapping of action to connector.
    
    Regards,
    
    Prasant
    
    like (0)
    1. Colleen Hebbert September 29, 2014 at 11:58 pm
      
      Hey Prasant
      
      Have you published the document in SCN?
      
      Regards
      
      Colleen
      
      like (0)
      1. Prasant Kumar Paichha September 30, 2014 at 3:54 am
        
        I will add it today.
        
        Regards,
        
        Prasant
        
        like (0)
        
        Alessandro Banzer Post authorSeptember 30, 2014 at 4:32 pm
        
        Hi Prasant,
        
        thanks for your input. I will update this document as soon as yours is available.
        
        Regards,
        
        Alessandro
        
        like (0)
        
        Prasant Kumar Paichha July 18, 2016 at 9:25 pm
        
        Hello Alessandro,
        
        Should we add AVM also here?
        
        Regards,
        
        Prasant
        
        like (0)
Prasant Kumar Paichha August 20, 2014 at 8:29 am

Hey Alessandro,

Nice.. would you please add HR trigger as well.

and There might be some other like integration to JAVA system for provisioning.

Like Portal, BPC, LSO .Pleas einclude or else lets create.

I have integrated to BPC,LSO,SPM(spend performance Mangement) and EP.

And Integration with LDAP and how you map different field.

Can we have Derived role in BRM.

And i real time scenario how we connect so system when we have BRM in place .

Regards,

Prasant K Paichha

like (0)
1. Alessandro Banzer Post authorAugust 20, 2014 at 9:03 am
  
  Hi Prasant,
  
  thanks for your feedback. I have added HR Triggers as a section. We can also add more sections for specific topics. Can you provide some links or even better update the document?
  
  Regards,
  
  Alessandro
  
  like (0)
2. Alessandro Banzer Post authorAugust 27, 2014 at 1:45 pm
  
  Prasant,
  
  can you bring in your ideas for new documents in the collaboration list: GRC Document Collaboration Topics
  
  Thanks a lot!
  
  Regards,
  
  Alessandro
  
  like (0)
S A August 20, 2014 at 1:38 pm

G’Day Alessandro,

I just stumbled upon your documents and seriously you are a legend mate!!

The sheer wealth of information you’ve got here is just unbelievable. I would like to sincerely thank you for taking the time to gather all this information and putting out here for the benefit of people like myself.

I so wish there are more people like you out there who would share their knowledge rather than keeping it to them self. As Colleen pointed out in one of your blogs, the way you explain, esp using real life examples helps you stand out from others and makes it so much more easier for us to understand.

Once again I truly appreciate what you are doing mate and Thank you.

Regards,

Leo..

like (0)
1. Alessandro Banzer Post authorAugust 20, 2014 at 2:17 pm
  
  Dear Leo,
  
  wow.. many thanks for your great feedback. I am definitely not a legend I just believe that “sharing is caring” and what you give you will get back one day.
  
  Appreciate that you like my posts and hope you will enjoy reading my stuff also in the future 🙂
  
  Best regards,
  
  Alessandro
  
  like (0)
  1. Colleen Hebbert August 20, 2014 at 2:26 pm
    
    G’day, legend and mate – sounds like someone from Australia paying a compliment!
    
    like (0)
    1. Prasant Kumar Paichha August 20, 2014 at 3:11 pm
      
      hehe… now i learnt how to pay compliment in Australian way..Never been to that part may be coming vacation . i always dream to spend vacation at New Zealand.. may be this december Australia and New Zealand.
      
      I really liked the thought of AB( Alessandro Banzer) when i first worked on GRC 10.. i was not sure what i was going to do.. in fact first saw screen at Switzerland at my client side. then posted few question and realized its not stable.. and SCN & Sap Support team helped me lot.. now learning new thing from reading peoples query.
      
      you may have done many implementation but every implementation may be different when it comes to client’s requirement.
      
      till today everyday is learning and SCN has everything in fact faster then SAP Support.
      
      AB: lets add more ..
      
      LDAP,
      
      Portal integration.
      
      Colleen: Do you have BRM stuff?
      
      Regards,
      
      Prasant
      
      like (0)
    2. S A August 20, 2014 at 3:37 pm
      
      Spot on Colleen! Its fair Dinkum Ozzie slang alright!
      
      Just finished reading your ‘NWBC screen layout options for GRC’ and I totally agree with you in regards to the layout. I like the 5.3 layout way better as everything is structured (All 4 modules are separate) and in a particular order, just the way I like things.
      
      However 10.x is all over the place. Having said that there are a few good things about the new layout too, so I was pondering how to get the best of both the worlds and thanks to your article and a couple of others I might just know how to go about it.
      
      Regards,
      
      Leo..
      
      like (0)
  2. S A August 20, 2014 at 3:59 pm
    
    Liking your ‘posts’ is an understatement Alessandro and yes I am enjoying reading your posts. In fact I’ve got the next week or so sorted thanks to all the documents you’ve got here.
    
    Cheers
    
    Leo..
    
    like (0)
Frank Koehntopp August 25, 2014 at 8:23 am

Hi Alessandro,

this is a great collection!

Can I ask for some additions: I was researching access configuration to mobile apps last week, and this was really hard to find (it’s in a post somewhere). Maybe you can add links to those as well as the official product dosumentation, which seems to have moved around as well.

Thanks,

Frank.

like (0)
1. Colleen Hebbert August 25, 2014 at 8:25 am
  
  Hi Frank
  
  I think Alessandro opened it up for us all to edit
  
  Regards
  
  Colleen
  
  like (0)
2. Alessandro Banzer Post authorAugust 25, 2014 at 8:27 am
  
  Hi Frank,
  
  thanks for your input. I will update accordingly (already following that thread).
  
  Regards,
  
  Alessandro
  
  like (0)
Former Member August 28, 2014 at 1:04 am

Great job Alessandro!!

Next step is creating a document for Process Control. 🙂 We have also a wiki page in GRC space just with debugging tips for technical people. It would be interesting to add it.

Again, great work.

Fernando

like (0)
1. Colleen Hebbert August 28, 2014 at 1:21 am
  
  Fernando… you could add that to our project 😉
  
  As well as Risk Management and Fraud Management 🙂
  
  I forgot you had the debugging tips – that is definitely worth advertising!
  
  like (0)
Former Member August 30, 2014 at 8:25 am

Hi Alessandro,

Really a great work.

It is more of a GRCyclopedia 🙂

You can add some inputs on BRF+ and IDM as well.

Thanks,

Ameet

like (0)
S A September 8, 2014 at 6:47 am

Hello Alessandro,

I’ve got no idea why my previous message here went kaput but thought I’ll try again.

Considering how often this document is getting updated and given its importance, I was wondering if it would help to put a time stamp and the change, at the end of the document every time something is changed/added.

Most of the time it is glaringly obvious what has changed however there are times we have to go through the entire document a couple of times to figure out what was changed/added.

The version comparison isn’t working either because of the sheer size of the document. Thought I’ll put it out there.

Regards,

Leo..

like (0)
1. Alessandro Banzer Post authorSeptember 8, 2014 at 7:00 am
  
  Hi Leo,
  
  thanks for your feedback. It’s a pity that version comparison is not working as the document isn’t large either.
  
  I will come back to your query.
  
  Regards,
  
  Alessandro
  
  like (0)
  1. Former Member October 15, 2014 at 12:47 pm
    
    Great stuff Alessandro
    
    Anything on GRC 10.1
    
    Lessons learnt?
    
    Regards
    
    Mustafa
    
    like (0)
    1. Colleen Hebbert October 15, 2014 at 12:55 pm
      
      Hi Mustafa
      
      I have just added the blog: SAP GRC AC 10.1 – Enhancements
      
      This one was written by Amit and goes through the differences between 10.0 and 10.1. Most of the other documents here are GRC 10.0 but for most parts capture 10.X.
      
      The list is a living document. If you discover new documents then please let us know. I think everyone has edit rights to this document. If not, add it to the comments and we can incorporate it.
      
      Regards
      
      Colleen
      
      like (0)
      1. Prasant Kumar Paichha November 9, 2014 at 12:40 pm
        
        Apart from functionality, there are differences in screen but no major difference if you are good in 10.0 then 10.1 is ok.
        
        BRF+ screen has differences.
        
        REgards,
        
        Prasant
        
        like (0)
        
        Colleen Hebbert November 9, 2014 at 10:56 pm
        
        Hi Prasant
        
        I was under the impression that there were quite a few differences to 10.1 (such as simplified user access forms).
        
        BRF+ differences would be due to the change in Basis Stack (731 to 740) since BRF+ is not specific to GRC
        
        Regards
        
        Colleen
        
        like (0)
2. Alessandro Banzer Post authorMarch 4, 2015 at 4:30 pm
  
  Hi Leo,
  
  I have added a symbol ( ➕ ) to new documents 😉 a bit late, but better later than never 🙂
  
  Cheers,
  
  Ale
  
  like (0)
  1. S A March 4, 2015 at 4:45 pm
    
    Awesome Ale. It will definitely help scanning the document. Also looking forward to your document on Direct/Indirect role assignment. We’ve had quite a few problems with indirect roles being pulled into Model User, so I’ll send you the notes that fixed the issue. Maybe you can add it in your document so it could help others!!
    
    P.S: Just noticed you already added that document, so let me go through it and get back to you.
    
    Cheers
    
    Leo..
    
    like (0)
    1. Alessandro Banzer Post authorMarch 4, 2015 at 4:53 pm
      
      That would be great! I will implement the notes in the respective documents.
      
      Thanks and cheers,
      
      Ale
      
      like (0)
Former Member November 17, 2014 at 8:06 am

Hi Alessandro,

Thanks you so much for accumulating all GRC documents in a single place.

It’s really saving time in looking for GRC documnet in SCN and keep me more focus going through it.

I’m also going through your firefighter blog which is awesome.I have actually became fan of yours in SCN.

🙂

Regards

Girish Almiya

like (0)
1. Alessandro Banzer Post authorNovember 17, 2014 at 8:09 am
  
  Hi Girish,
  
  thanks for your feedback. Really appreciate. I’m trying to make it easier for everyone, also for me 🙂
  
  Looking forward to your contribution.
  
  Regards,
  
  Alessandro
  
  like (0)
  1. Former Member January 28, 2015 at 6:43 pm
    
    Hi Alessandro,
    
    I created a document, would it be possible to add it you your summary list.
    
    Also your feedback about the article would be appreciated.
    
    EAM: Requesting emergency access via access request workflow in SAP GRC – step by step.
    
    Regards,
    Filip
    
    like (0)
    1. Alessandro Banzer Post authorJanuary 28, 2015 at 8:36 pm
      
      Hi Filip,
      
      have added your document to the collection. Thanks for your input. I will give feedback as soon as I find the time 🙂
      
      Thanks and regards,
      
      Alessandro
      
      like (0)
Alessandro Banzer Post authorMarch 4, 2015 at 4:28 pm

Dear all,

I have added a symbol ➕ to newly added documents (the symbol is selected from the smileys). For everyone contributing please attach the “plus” symbol to the new link so that it can easily be identified.

Thanks for your contribution.

Best regards,

Alessandro

like (0)
Former Member March 24, 2015 at 2:46 pm

Dear Alessandro,

It is always fresh look and inspiring more to learn with your collection and thoughts in your Blog

really it is an wonderful idea.

Regards

Baithi

like (0)
Former Member March 31, 2015 at 1:17 pm

Dear Alessandro,

Can you also add here Howto guide “How to Assign SAP Business Planning & Consolidation Authorizations via the SAP GRC Access Control Compliance User Provisioning Product”? This is regarding BPC and GRC integration.

Thanks,

Valentyn

like (0)
1. Alessandro Banzer Post authorMarch 31, 2015 at 1:35 pm
  
  Hi Valentyn,
  
  has been added. Thanks for your input.
  
  Regards,
  
  Alessandro
  
  like (0)
  1. Former Member March 31, 2015 at 2:37 pm
    
    Dear Alessandro,
    
    Can you add the below document in blog,which helps for portal integration with GRC10
    
    Portal Integration with GRC10.0-Issues,Notes
    
    Regards
    
    Baithi
    
    like (0)
    1. Gustavo Soares November 20, 2017 at 12:07 am
      
      This looks good. Would you have anything on UWL integration for GRC work items, please?
      
      like (0)
  2. Former Member August 5, 2015 at 5:52 pm
    
    Hi Alessandro,
    
    Can you add the GRC Weekly News under the heading Product Support? It contains SAP Notes and KBAs published weekly by IMS and GRC Product support.
    
    http://wiki.scn.sap.com/wiki/display/GRC/GRC+Weekly+News
    
    Thanks,
    
    Bernie
    
    like (0)
    1. Colleen Hebbert August 6, 2015 at 9:49 pm
      
      Hi Bernie
      
      I’ve added the link under Product Support 🙂
      
      Regards
      
      Colleen
      
      like (0)
      1. Former Member August 24, 2015 at 9:25 pm
        
        Hi Colleen,
        
        Can you post a link to the “Top 10 Most Viewed KBAs for GRC” under the heading for Product Support?
        
        Here is the wiki page link:
        http://wiki.scn.sap.com/wiki/x/5wLFGQ
        
        Thanks,
        Bernie
        
        like (0)
        
        Colleen Hebbert August 24, 2015 at 11:47 pm
        
        done 🙂
        
        like (0)
Former Member April 2, 2015 at 9:41 am

Hi,

The documents collaboration is very help full and use full for starters like me!

Thank you very much

Thanks

GRC Admin

like (0)
Pradeep Agarwal August 9, 2015 at 1:12 pm

Hi Alessandro,

Please add something with Integration with Enterprise Portal and LDAP. To start with I have posted this document can be used and can be modified accordingly.

Enterprise Portal Integration with SAP GRC 10.0

Regards

Pradeep

like (0)
1. Colleen Hebbert August 10, 2015 at 10:30 pm
  
  HI Pradeep
  
  Before its’ added to the list could you consider putting a bit of an introduction to the article and explain some of the steps. Right now this seems more of a Wiki step by step configuraiton guide.
  
  For example, in Step 11 are you able to explain where you got the field mappings from in case someone needs to map it differently or trying to solve an issue similar to what you are doing (just a guess there). This would add a lot more substance to your content
  
  Regards
  
  Colleen
  
  like (0)
  1. Pradeep Agarwal August 13, 2015 at 10:59 am
    
    Hi Colleen,
    
    Thanks for the feedback ,I will modify the document and will keep you posted once it’s done.
    
    Regards
    
    Pradeep
    
    like (0)
    1. Prasant Kumar Paichha August 14, 2015 at 1:13 pm
      
      Hello Pradeep,
      
      i think you can also change initial screen as well, since thats not applicable anymore,
      
      like your WS navigator screen its different now in new versions.
      
      Regards,
      
      Prasant
      
      like (0)
Former Member August 19, 2015 at 8:34 pm

Thank you very much Allesandro for all the documents,

Its really helpful and informative and as always SDN site is awesome with the experts like you, Colleen, Prashant , Madhu … in providing the expert guidance to resolve.

I have resolved most of the issues just by browsing SDN site .

Regards,

Sindhu

like (0)
Former Member September 24, 2015 at 9:34 am

Thank you for the list of articles. This is a really helpful guide, and has enabled me to quickly find much needed information. I hope you can continue to add to this already expansive list.

Regards,

Raphael

like (0)
Mohammed Bafakyh September 29, 2015 at 9:31 pm

http://wiki.scn.sap.com/wiki/x/1oD3GQ

Hello Moderator,

Please add this link under the section : GRC General with the Title:

FAQ for GRC Access Control 10.x Installation, Upgrades and Compatibility

Thanks

Mohammed

like (0)
Former Member October 8, 2015 at 2:25 pm

Hello Alessandro,

Very very useful documentation 🙂

Regards,

Vinaya

like (0)
1. Alessandro Banzer Post authorOctober 8, 2015 at 2:27 pm
  
  Thanks Vinaya 🙂 see you next week 🙂
  
  like (0)
Former Member November 1, 2015 at 10:18 am

Hi Alessandro,

Thank you for Preparing Such a Awesome Document. Very Helpful. 🙂

Thanks
,
Prateek

like (0)
Former Member January 27, 2016 at 2:48 pm

Hi Ale,

Can you share latest document of GRC 10.1 guide?

Regards,

Ram

like (0)
1. Former Member January 27, 2016 at 3:33 pm
  
  Hi Ram,
  
  you can find the latest documents provided from SAP under this path: SAP Access Control 10.1 – SAP Help Portal Page
  
  Regards,
  
  Dirk
  
  like (0)
Former Member April 7, 2016 at 12:37 pm

Dear All,

Is there recommended sizing in terms of memory, disk storage and CPU for GRC Access Control 10.1 based on an actual running system?

We’re planning to integrate 10 ABAP systems plus 1 portal system.

We have performed initial sizing analysis based on the GRC sizing guideline from SAP.

Any inputs from your actual experience is most welcome.

Thanks a lot,

Jen

like (0)
1. Alessandro Banzer Post authorApril 7, 2016 at 3:30 pm
  
  Jen,
  
  thanks for reaching out. What was the outcome from the sizing? Why you don’t trust it? The memory, disk and CPU is calculated in regard to the numbers of users, roles, etc. and what you are going to use. Having 10 ABAP sytstems connected doesn’t increase the sizing much if you just use provisioning. If you analyze roles and users on all systems connected this will require additional resources. I recommend to check what you are going to use (ARA; EAM; BRM; ARM) and for how many users/roles per connected system.
  
  Regards,
  
  Alessandro
  
  like (0)
  1. Former Member April 8, 2016 at 5:51 am
    
    Thanks Alessandro for the feedback. It’s not that we don’t trust. 🙂
    
    We just wanted to validated with those who have actual experience with implementing and running a GRC AC 10.1 system if the guideline is really sufficient and if there’s no surprise in the long run in terms of storage and performance.
    
    Thank you.
    
    Best Regards,
    
    Jen
    
    like (0)
Former Member May 6, 2016 at 12:17 pm

Hello Alessandro,

I have added my newdocument to the LDAP section. Your feedback about it would be really appreciated. Also I have added the two new documents of Artem Ivashkin.

Best Regards,

Zoltan

like (0)
Vijayakumar Suthanthiran May 16, 2016 at 8:52 pm

Hello Alesandro / Collen Hebber,

I have added a new document in a pictorial format on troubleshooting EAM Login issue, Can you please update the document in SCN so that, everyone can get benefited, thanks.

https://wiki.scn.sap.com/wiki/display/GRC/EAM+Login+Pictorial+Troubleshooting+Guide

Regards,

Vijay.

like (0)
1. Rakesh Ram May 17, 2016 at 1:44 am
  
  Hello Vijayakumar,
  
  One of the best document on EAM troubleshooting guide.
  
  Great work.
  
  5 out of 5
  
  Regards,
  
  Rakesh M
  
  like (0)
  1. Vijayakumar Suthanthiran May 17, 2016 at 2:22 pm
    
    thanks Rakesh will try to create more such documents in future too
    
    like (0)
2. Former Member May 17, 2016 at 10:06 am
  
  Hi Vijay,
  
  Excellent document on EAM troubleshooting.
  
  Thanks a lot for sharing.
  
  Regards,
  
  Manju
  
  like (0)
  1. Vijayakumar Suthanthiran May 17, 2016 at 2:22 pm
    
    Thanks Manju
    
    like (0)
Pradeep Agarwal May 17, 2016 at 11:26 am

Hi Alessandro,

I have one document created for EP Integration with GRC. Can this document be added to the above detailed list?

Enterprise Portal Integration with SAP GRC 10.0

Regards

Pradeep

like (0)
Former Member September 27, 2016 at 2:26 pm

Dear All,

I have added Escalation only on workdays in the MSMP workflow under the MSMP workflow section of the collection.

Best Regards,

Zoltan

like (0)
Former Member August 24, 2017 at 7:13 pm

Hi Experts.

Can any body tell what is procedure/ Steps should we follow to Decommission SAP GRC Access Control 10.0 System.

Any info is greatly appreciated.

like (0)