Scribd
Upload
261 views10 pages

GRC AC 12.0 - Sync Jobs

Uploaded by

Nithish Ranjan Gowda
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PPTX, PDF, TXT or read online on Scribd
261 views10 pages

GRC AC 12.0 - Sync Jobs

Uploaded by

Nithish Ranjan Gowda
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PPTX, PDF, TXT or read online on Scribd
You are on page 1/ 10

Mobile – 9607677796, redtab.technologies@gmail.

com
SAP GRC 12.0 – GRAC repository
Background Synchronization Jobs
Synchronization Jobs
 Path: IMG  GRC  Access Control  Synchronization Jobs.
 Synchronization jobs extract data from target connectors and store
data locally on GRC 12.0 instance.
 Types of synchronization ARA jobs: Connectors must be
 Authorization Synch correctly configured.
 Repository Object Synch
A wrongly configured
 Action Usage Sync connector may not throw an
 Role Usage Synch error during these jobs.

 Fetch Identity Management (IdM) Schema


 ARA synchronization jobs are intended for scheduling on a regular
basis.
 Daily runs are the most common choice
Synchronization Jobs (cont.)
Repository Object Sync extracts:
 Profiles (Name, Description)
 Roles (Name, Description)
 Users (First/Last Name, User Group)
 SE38 Program:
GRAC_REPOSITORY_OBJECT_SYNC
(Master synchronization program)
 GRAC_ROLEREP_PROFILE_SYNC
 GRAC_ROLEREP_ROLE_SYNC
 GRAC_ROLEREP_USER_SYNC
Synchronization Jobs (cont.)
Action Usage Synch extracts:
 Transactions run by user with time and date
 Data used primarily for alert generations and risk analysis
reporting
 SE38 Program: GRAC_ACTION_USAGE_SYNC
Role Usage Synch extracts:
 Transactions run by user with time and data—per role
 Pre-requisite for job is the Action
Usage Synch
 SE38 Program: GRAC_ROLE_USAGE_SYNC
Synchronization Jobs – IDM Schema
Fetch IDM Schema
 Updates schema for IDM system in GRC
12.0
 Perform activity whenever there is a
change in external IDM schema
 Example – Provisioning users using
IDM
 SE38 Program:
GRAC_SCHEMA_UPDATE
 Other IDM programs:
GRAC_IDMROLE_SYNC
Recommend to run the jobs in the order as listed below and and
sequence
Job Description Program Full / Frequency System /
Incremental Connectors

Authorization Data This job synchronizes the GRAC_PFCG_AUTHORIZATION_SYNC n/a Weekly Development and
PFCG master data (SU24 productive systems
values) from the backend
system.

Repository Objects This job synchronizes users, GRAC_REPOSITORY_OBJECT_SYNC Full Weekly All connected
roles and profile data to the systems
repository in Access Control.

Repository Objects This job synchronizes users, GRAC_REPOSITORY_OBJECT_SYNC Incremental Hourly All connected
roles and profile data to the systems
repository in Access Control.

Transaction Usage This job retrieves the GRAC_ACTION_USAGE_SYNC n/a Daily Productive systems
executed transactions and
usage date from the
backend system.

Role Usage This job retrieves the role GRAC_ROLE_USAGE_SYNC n/a Daily Productive systems
usage information from the
backend system.
Recommend to run the jobs in the order as listed below and sequence

Job Description Program Full / Frequency System /


Incremental Connectors

Batch Risk AnalysisThis job updates the GRAC_BATCH_RISK_ANALYSIS Full Monthly Depending on
management reports used in rule set
NWBC. definition

Batch Risk This job updates the GRAC_BATCH_RISK_ANALYSIS Incremental Daily Depending on
Analysis management reports used in rule set
NWBC. definition

EAM Master Data This job synchronizes the GRAC_SPM_SYNC n/a Hourly All systems
master data on the backend where FF is
system to the Access defined
Control repository.

EAM Logs This job synchronizes the GRAC_SPM_LOG_SYNC_UPDATE n/a Hourly All systems
logs of firefighting activities where FF is
from the backend system utilized
and store in Access Control
repository.

Email Reminders This job is used to send GRFNMW_BATCH_EMAIL_REMINDER n/a Daily For MSMP
email reminders to an processes in
approver for pending access use
requests.
THANK YOU

You might also like