A technical role is referred to by two (2) business roles. A request is submitted to REMOVE one business role while ASSIGNing the other to the same user. It is expected to see that the technical role, common to both business roles, have an entry in the audit log showing that it is REMOVED then ASSIGNED, but no entry for this activity was found after autoprovisioning.
The GRACUSERROLE and GRACREQPROVLOG tables are updated correctly with the change information. This KBA gives and explanation why there is no entry for that technical role in the audit log.
SAP GRC Access Control 10.1
KBA , reporting , features and functionality , GRC-SAC-ARQ , Access Request , How To
About this pageThis is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP ONE Support launchpad (Login required).
Search for additional results
Visit SAP Support Portal's SAP Notes and KBA Search.