PUBLIC

Installation Guide

SAP GRC Process

Control™ 2.5
Target Audience

n System Administrators
n Technical Consultants

Document version: 1.0 ‒ 01/11/2008

Document History

Caution
Before you start the implementation, make sure you have the latest version of this document. You
can find the latest version at the following location: http://service.sap.com/instguides.

The following table provides an overview of the most important document changes.
Version Date Description

1.00 1/11/2008 Initial version

Process Control 2.5 Installation Guide

2/42 PUBLIC 01/11/2008

Table of Contents

Chapter 1 Introduction . . . . . . . . . . . . . . . . . . . . . . . 5
1.1 About this Document . . . . . . . . . . . . . . . . . . . . . 5
1.2 SAP Notes for the Installation . . . . . . . . . . . . . . . . . . 5
1.3 Information Available on SAP Service Marketplace . . . . . . . . . . 6

Chapter 2 Preparing for the Installation . . . . . . . . . . . . . . . . . 9

2.1 Technical System Landscape . . . . . . . . . . . . . . . . . . 9
2.2 Preparing to Install Process Control 2.5 . . . . . . . . . . . . . . 10
2.3 Preparing to Install the CISCO Add-on Component (optional) . . . . . . 11
2.4 Preparing to Install the Real Time Agents (RTAs) . . . . . . . . . . . 11
2.5 Preparing to Install the SAP NetWeaver Business Client (NWBC) . . . . . 12

Chapter 3 Installing the Process Control 2.5 and the Cisco Components . . . . 15

Chapter 4 Installing Real Time Agents . . . . . . . . . . . . . . . . . 21

Chapter 5 Installing the SAP NetWeaver Business Client (NWBC) . . . . . . . 23

Chapter 6 Post-Installation . . . . . . . . . . . . . . . . . . . . . . 27
6.1 Activating Process Control Business Configuration (BC) Sets . . . . . . 27
6.2 Client Copy . . . . . . . . . . . . . . . . . . . . . . . . 28
6.3 Check SAP ICF Service . . . . . . . . . . . . . . . . . . . . 29
6.4 Creating the Initial Process Control 2.5 User . . . . . . . . . . . . 30
6.5 Activating the Report Buffer . . . . . . . . . . . . . . . . . . 30
6.6 Maintaining System Data . . . . . . . . . . . . . . . . . . . 31
6.7 Configuring the SAP NetWeaver Business Client . . . . . . . . . . . 32
6.8 Post-Installation RTA steps . . . . . . . . . . . . . . . . . . . 34
6.8.1 Activating the RTA BC Sets . . . . . . . . . . . . . . . . . . . 34
6.8.2 Creating the Initial RTA User . . . . . . . . . . . . . . . . . . 34

Chapter A Reference . . . . . . . . . . . . . . . . . . . . . . . . . 35
A.1 The Main SAP Documentation Types . . . . . . . . . . . . . . . 35

01/11/2008 PUBLIC 3/42

4/42 PUBLIC 01/11/2008
1 Introduction

1 Introduction

1.1 About this Document

Purpose
SAP GRC Process Control is an enterprise software solution for internal controls management. It
enables organizations to document their control environment, test and assess controls, track issues to
remediation, and certify and report on the state and quality of internal controls. Using a combination
of data forms, automated workflows, certification and interactive reports, this solution enables
members of internal control, audit and business process teams to effectively manage compliance
activities. SAP GRC Process Control features ERP integration and automated control testing and
monitoring, which may help to reduce audit cycles and cost of compliance, as well as provide a higher
degree of reliability and integrity in financial statements.
This guide describes how to install SAP GRC Process Control.

1.2 SAP Notes for the Installation

You must read the following SAP Notes before you start the installation. These SAP Notes contain the
most recent information on the installation, as well as corrections to the installation documentation.
Make sure that you have the latest version of each SAP Note, which you can find on SAP Service
Marketplace at service.sap.com/notes.

SAP Notes

SAP Note Number Title Description

1129700 Install GRC Process Control 2.5 This note provides supplemental
information to install SAP GRC Process
Control 2.5.
1129678 Installing GRCPCRTA 250_46C This note provides supplemental
on R/3 4.6C information to install SAP GRC Process
Control 2.5 RTAs on SAP R/3 4.6C
1129679 Installing GRCPCRTA 250_620 This note provides supplemental
on R/3 Enterprise 470x200 information to install SAP GRC Process
Control 2.5 RTAs on SAP R/3 Enterprise
470x200

01/11/2008 PUBLIC 5/42

1 Introduction
1.3 Information Available on SAP Service Marketplace

SAP Note Number Title Description

1129680 Installing GRCPCRTA 250_640 This note provides supplemental
on NW 04/SAP ECC 500 information to install SAP GRC Process
Control 2.5 RTAs on SAP ERP 2004 (ECC 5.0)
1129701 Installing GRCPCRTA 250_700 This note provides supplemental
on NW 7.0/SAP ECC 600 information to install SAP GRC Process
Control 2.5 RTAs on SAP ERP 2005 (ECC 6.0)
1108563 NWBC System Selection and Configuration of NetWeaver Business Client
Configuration for PC 2.5 (NWBC)
1131867 Process Control 2.5 - BI Configuration of Business Intelligence (BI)
Integration within NWBC within NetWeaver Business Client (NWBC)
1131902 Upgrade to SAP R/3 Enterprise This note provides supplemental
470x200 with GRCPCRTA information relevant for the upgrade to SAP
250_620 R/3 Enterprise 470x200.
1131903 Upgrade to SAP ECC 500 with This note provides supplemental
GRCPCRTA 250_640 information relevant for the upgrade to SAP
ECC 500.
1131904 Upgrade to SAP ECC 600 with This note provides supplemental
GRCPCRTA 250_700 information relevant for the upgrade to SAP
ECC 600.
1131905 Installing GRC Process Control This note provides supplemental
2.5-CISCO GRCSPCX 250 information to install SAP GRC Process
Control 2.5 CISCO GRCSPCX (optional).
918236 WD ABAP ALV create print This note provides supplemental
version information to create the print version in
ABAP WebDynpro ALV.
685521 Logon data for /sap/bc/ This note provides information to resolve
contentserver service the HTTP attachment issue in the Job
Monitor (HTTP Contet Server for HTTP
Attachment).

1.3 Information Available on SAP Service Marketplace

More information is available as follows on SAP Service Marketplace.

6/42 PUBLIC 01/11/2008

1 Introduction
1.3 Information Available on SAP Service Marketplace

Documentation

Description Internet Address Title

The security guide describes the http://service.sap.com/securityguide SAP GRC Process
settings for a medium security Control Security Guide
level and offers suggestions for
raising security levels. A collective
security guide is available for SAP
NetWeaver.
The master guide is the starting http://service.sap.com/instguides SAP GRC Process
point for implementing an Master Guide
SAP solution. It provides
scenario-specific descriptions
of preparation, execution, and
follow-up of an implementation.
It also provides references to other
documents, such as installation
guides, the technical infrastructure
guide and SAP Notes.
The operations manual is http://service.sap.com/instguides SAP GRC Process
the starting point for operating Control Operations
a system that runs on SAP Guide
NetWeaver. The manual
refers users to the tools and
documentation that are needed
to carry out various tasks,
such as monitoring, backup/
restore, master data maintenance,
transports, and tests.
The SAP Library (users guide) is On SAP Help Portal at http://help.sap.com SAP GRC Process
a collection of documentation for (also available as documentation DVD) Control Users Guide
SAP software covering functions
and processes.
The installation guide describes On SAP Service Marketplace at SAP NetWeaver
the technical implementation of http://service.sap.com/instguides Installation Guide
an installable unit, taking into
account the combinations
of operating systems and
databases. It does not describe any
business-related configuration.

General Quick Links

Description Internet Address

SAP Help Portal help.sap.com

SAP Notes service.sap.com/notes

01/11/2008 PUBLIC 7/42

1 Introduction
1.3 Information Available on SAP Service Marketplace

Description Internet Address

Released platforms and operating systems service.sap.com/platforms

System sizing service.sap.com/sizing

Security service.sap.com/security

8/42 PUBLIC 01/11/2008

2 Preparing for the Installation

2 Preparing for the Installation

To prepare for the installation, you must consider the three different aspects of the installation:
installing of the Process Control 2.5 application, the Real Time Agents (RTAs) and the NetWeaver
Business Client (NWBC).

2.1 Technical System Landscape

The following figure shows an overview of the Process Control technical system landscape.

Figure 1:

01/11/2008 PUBLIC 9/42

2 Preparing for the Installation
2.2 Preparing to Install Process Control 2.5

2.2 Preparing to Install Process Control 2.5

Prerequisites
To install Process Control 2.5, verify the following components are installed. SAP Process Control 2.5
hardware and software requirements are based on the requirements of SAP NetWeaver 7.0 (2004s).
Components delivered with SAP NetWeaver (required):
n SAP NetWeaver 7.0 (2004s) SP13
l SAP Web Application Server ABAP
l Internet Graphics Server (IGS)
l SAP Web Application Server Java for Adobe Document Services
l SAP_ABA 700, delivery
l SAP_BASIS 700, delivery
l PI_BASIS 2005_1_700
l SAP Solution Manager 4.0 SP15 or higher

Recommendation
For more information, see the SAP NetWeaver installation documentation at
service.sap.com/instguidesnw70.

n Optional component delivered separately:

l SAP Process Control Business Intelligence (BI) contents within SAP BI Content Release 7.0.3
SPS 9

Downloading the Process Control 2.5 files

Download the files from the SAP Service Marketplace at: service.sap.com.
1. From the SAP Support Portal section, click the Software Download quick link.
2. From the SAP Installations & Upgrades page, in the navigation bar on the left, click Entry by Application
Group.
3. From the Installations & Upgrades page, click the SAP Solutions for Governance, Risk, and Compliance link.
4. Under the SAP Solutions for Governance, Risk, and Compliance area, click the SAP GRC Process Control link.
5. Under the SAP GRC Process Control area, click the link for your particular system where you plan
to install Process Control.
6. Click the Installation link, then the Download tab, and follow the instructions under this tab to
download the file.
n GRCSPC 250 (SW component version: GRCSPC 250)

Recommendation
For more information, see SAP Note 1129700 for suggestions where to download the file and
other updated information.

10/42 PUBLIC 01/11/2008

2 Preparing for the Installation
2.3 Preparing to Install the CISCO Add-on Component (optional)

2.3 Preparing to Install the CISCO Add-on Component

(optional)

Prerequisites
In order to install GRC Process Control Cisco Add-on Component, verify that Process Control 2.5
is installed.

Downloading the Process Control 2.5 files

Download the files from the SAP Service Marketplace at: service.sap.com.
1. From the SAP Support Portal section, click the Software Download quick link.
2. From the SAP Installations & Upgrades page, in the navigation bar on the left, click Entry by Application
Group.
3. From the Installations & Upgrades page, click the SAP Solutions for Governance, Risk, and Compliance link.
4. Under the SAP Solutions for Governance, Risk, and Compliance area, click the SAP GRC Process Control link.
5. Under the SAP GRC Process Control area, click the link for your particular system where you plan
to install Process Control.
6. Click the Installation link, then the Download tab, and follow the instructions under this tab to
download the file.
n GRC PC 2.5 CISCO Add-on Component (GRCSPCX 250)

2.4 Preparing to Install the Real Time Agents (RTAs)

RTAs help facilitate the automated testing process and bring in data required by Process Control.

Prerequisites
Verify at least one of the following are installed on your SAP ERP system:
n SAP R/3 4.6C
n SAP R/3 Enterprise 470x200
n SAP ERP 2004 (ECC 5.0)
n SAP ERP 2005 (ECC 6.0)

Downloading the Real Time Agent (RTA) files

Download the GRPCRTA files based on the SAP release where you are installing the RTAs. Download
the GRPCRTA files from the SAP Service Marketplace at: service.sap.com.
1. From the SAP Support Portal section, click the Software Download quick link.
2. From the SAP Installations & Upgrades page, in the navigation bar on the left, click Entry by Application
Group.
3. From the Installations & Upgrades page, click the SAP Solutions for Governance, Risk, and Compliance link.
4. Under the SAP Solutions for Governance, Risk, and Compliance area, click the SAP GRC Process Control link.

01/11/2008 PUBLIC 11/42

2 Preparing for the Installation
2.5 Preparing to Install the SAP NetWeaver Business Client (NWBC)

5. Under the SAP GRC Process Control area, click the link for your particular system where you plan
to install Process Control.
6. Click the Installation link, then the Download tab, and follow the instructions under this tab to
download the files that pertain to your release.
n SAP Process Control RTA 46C ‒ GRCPCRTA 250_46C
n SAP Process Control RTA 620 ‒ GRCPCRTA 250_620
n SAP Process Control RTA 640 ‒ GRCPCRTA 250_640
n SAP Process Control RTA 700 ‒ GRCPCRTA 250_700

Note
For details about the service pack levels and suggestions where to download the files, refer to the
SAP Notes:
n Installing GRCPCRTA 250_46C on R/3 4.6C — 1129678
n Installing GRCPCRTA 250_620 on R/3 Enterprise 470x200 — 1129679
n Installing GRCPCRTA 250_640 on NW 04/SAP ECC 500 — 1129680
n Installing GRCPCRTA 250_700 on NW 7.0/SAP ECC 600 — 1129701

2.5 Preparing to Install the SAP NetWeaver Business Client

(NWBC)

The SAP NetWeaver Business Client (NWBC) is installed on your client machine for the User Interface
capabilities. The NWBC is the front-end interface for Process Control 2.5 and is how most users will
access the system and schedule the automated testing of controls and run the reports.

Prerequisites
In order to install the NWBC, verify the following components are installed.
n Windows platform at the client’s desktop level
n SAP GUI 7.10
n SSO2 cookie enabled. For more information, see the SAP Notes:
l Checking the SSO Configuration — 817529
l Setting-up SSL on the Web Application Server ABAP — 510007

Caution
If you use Internet Explore 7, you might have problems connecting to the back-end. In this case,
select Tools Internet Options Advanced Security and deselect Check for server certificate revocation.
Restart Internet Explorer.

12/42 PUBLIC 01/11/2008

2 Preparing for the Installation
2.5 Preparing to Install the SAP NetWeaver Business Client (NWBC)

Recommendation
For more information about the NWBC, refer to help.sap.com. For more information, see the SAP
Note: NetWeaver Business Client FAQ ‒ 900000

Downloading the NWBC files

1. Download from the SAP Marketplace: https://websmp210.sap-ag.de/patches
2. Select Entry by Application Group.
3. Select SAP Frontend Components.
4. Select NETWEAVER BUSINESS CLIENT.
5. Select NETWEAVER BUSINESS CLIENT 7.10.
6. Select NETWEAVER BUSINESS CLIENT 7.10.
7. Select Win32.
8. Download SAP NetWeaver Business Client 1.0 (No SP schedule). The filename is NWBCsetup.exe.

01/11/2008 PUBLIC 13/42

This page is intentionally left blank.
3 Installing the Process Control 2.5 and the Cisco Components

3 Installing the Process Control 2.5 and

the Cisco Components

The SAP Process Control application requires the add-on component called GRCSPC. If you intend to
interact with Cisco, you also need the Cisco add-on component. The instructions in this chapter
show you how to install these add-on components.

Note
Process Control has specific system requirements, and cannot run successfully unless these
requirements are met. The section Preparing to Install Process Control [page 10] lists all system prerequisites.
If you have not yet read this section, go back and read it now. Do not attempt to install Process
Control until you are certain that your target system meets these requirements.

1. In the SAP panel, log into Client 000 using a user account with administration privileges.
2. In the SAP Easy Access panel, execute transaction SAINT.

Figure 2:

3. The Add-On Installation Tool panel appears. From the Installation Package menu, select Load Packages
From Application Server . A dialog box appears indicating the location of the PAT file containing
the add-on component and requesting your confirmation of the PAT file upload.
4. In the dialog box, choose Yes to confirm the PAT file upload.

01/11/2008 PUBLIC 15/42

3 Installing the Process Control 2.5 and the Cisco Components

5. Verify the PAT file is uploaded successfully and shown in the list, then click the Back icon to return
to the Add-On Installation Tool panel.

Note
For details about the PAT file, refer to the SAP Note 1129700.

Recommendation
If the PAT file is not listed, the file has not been copied into the EPS inbox directory. Copy the
PAT file to the EPS directory on your application server, then continue with the Add-On Installation
Tool panel.

6. In the Add-On Installation Tool panel, click Start to proceed with the installation process.

Figure 3:

7. The add-on component GRCSPC is displayed. Select GRCSPC and click Continue

16/42 PUBLIC 01/11/2008

3 Installing the Process Control 2.5 and the Cisco Components

Figure 4:

8. GRCSPC is displayed under the Installation Queue tab as a new Online Correction Support (OCS)
package. Click Continue again.

Note
An OCS package can include support packages, add-on installation packages, and add-on
upgrades.

Figure 5:

9. Click Yes.

01/11/2008 PUBLIC 17/42

3 Installing the Process Control 2.5 and the Cisco Components

10. A window appears requesting you to enter your password, as well as displaying a SAP Note. This
SAP Note contains important information. Click the SAP Note button to see another window
containing your password. Enter your password and click the Continue icon.
11. A window appears indicating that GRCSPC will now be installed. Click Start Options.

Figure 6:

12. In the window, under the Preparation tab, select the Start in background immediately option and click
the Continue icon.

Figure 7:

13. A window appears indicating that GRCSPC will now be installed. Click the Continue icon.
14. The installation starts. To see the stages of the installation in progress, click the Refresh icon.

18/42 PUBLIC 01/11/2008

3 Installing the Process Control 2.5 and the Cisco Components

Figure 8:

15. After at least 30 minutes (actual time may vary depending on your system’s speed), click the
Refresh icon to see a message indicating that the add-on component was successfully imported in
the Status/Remarks pane. Click Finish to complete the installation. A message appears to indicate
that GRCSPC has been installed successfully.

01/11/2008 PUBLIC 19/42

3 Installing the Process Control 2.5 and the Cisco Components

Figure 9:

Installing the Cisco add-on component (optional)

Note
The Cisco add-on component has specific system requirements, and cannot run successfully unless
these requirements are met. The section Preparing to Install the Cisco Add-on Component [page 11] lists all
system prerequisites. If you have not yet read this section, you should go back and read it now. Do
not attempt to install the Cisco add-on component until you are certain that your target system
meets these requirements.

The steps to install the Cisco add-on component are very similar to the ones for the Process Control
2.5 add-on component. Therefore, follow the steps above, but install the component GRCSPCX 250.

20/42 PUBLIC 01/11/2008

4 Installing Real Time Agents

4 Installing Real Time Agents

The SAP Process Control Real Time Agents (RTAs) are delivered as an add-on component called
GRPCRTA. The instructions in this chapter show you how to install this add-on. The steps from
this chapter are for SAP ERP 2005 (ECC 6.0). If you have another SAP version, your user interface
might look different.

Note
Installing the RTAs requires specific system requirements, and cannot run successfully unless these
requirements are met. The section Preparing to Install Real Time Agents (RTAs) [page 11] lists all system
prerequisites. If you have not yet read this section, go back and read it now. Do not attempt to install
the RTAs until you are certain that your target system meets these requirements.

Procedure
1. In the SAP panel, log into Client 000 using a user account with administration privileges.
2. In the SAP Easy Access panel, execute transaction SAINT. The Add-On Installation Tool panel appears.
3. Choose Installation Package Load Packages From Application Server . A dialog box indicates the
location of the PAT file containing the add-on component and requesting confirmation of the
PAT file upload.
4. In the dialog box, choose Yes to confirm the PAT file upload.
5. All PAT files stored in the indicated path location are listed. Verify the appropriate PAT file for
your system is uploaded successfully and shown in the list, then click the Back icon to return
to the Add-On Installation Tool panel.

Recommendation
If the PAT file is not listed, the file has not been copied into the EPS inbox directory. Copy the
PAT file to the EPS directory on your application server, then continue with the Add-On Installation
Tool panel.

Note
The PAT file name varies for each system. For more information, see the SAP Notes:
n Installing GRCPCRTA 250_46C on R/3 4.6C — 1129678
n Installing GRCPCRTA 250_620 on R/3 Enterprise — 1129679
n Installing GRCPCRTA 250_640 on NW 04/SAP ECC 500 — 1129680
n Installing GRCPCRTA 250_700 on NW 7.0/SAP ECC 600 — 1129701

01/11/2008 PUBLIC 21/42

4 Installing Real Time Agents

6. In the Add-On Installation Tool panel, click Start to proceed with the installation process.
7. The add-on component GRPCRTA is displayed. Select the add-on component GRPCRTA and
click Continue
8. The add-on component GRPCRTA is displayed under the Installation Queue tab as a new Online
Correction Support (OCS) component. Click Continue again.

Note
An OCS package can include support packages, add-on installation packages, and add-on
upgrades.

9. Click Yes.
10. A window appears requesting you to enter your password, as well as displaying a SAP Note. This
SAP Note contains important information. Click the SAP Note button to see another window
containing your password. Enter your password and click the Continue icon.
11. A window appears indicating the add-on component GRPCRTA will now be installed. Click
Start Options.
12. In the window, under the Preparation tab, select the Start in background immediately option and click
the Continue icon.
13. A window appears indicating that the add-on component GRPCRTA will now be installed. Click
the Continue icon.
14. The add-on component installation starts. To see the stages of the installation in progress, click
the Refresh icon.
15. After about 20 minutes (actual time may vary depending on your system’s speed), click the Refresh
icon and you will see a message indicating that the add-on component was successfully imported
in the Status/Remarks pane. Click Finish to complete the installation. A message appears to indicate
that the add-on component GRPCRTA has been installed successfully.

22/42 PUBLIC 01/11/2008

5 Installing the SAP NetWeaver Business Client (NWBC)

5 Installing the SAP NetWeaver Business

Client (NWBC)

The SAP NetWeaver Business Client (NWBC) is required for the User Interface capabilities. This is
installed on the client.

Note
NWBC has specific system requirements, and cannot run successfully unless these requirements
are met. The section Preparing to Install NetWeaver Business Client (NWBC) [page 12] lists all system
prerequisites. If you have not yet read this section, go back and read it now. Do not attempt to install
NWBC until you are certain that your system meets these requirements.

Procedure
1. Download the NWBC file as instructed in the Preparation for the Installation [page 9] chapter.
2. Double-click the file NWBCSetup.exe.

Figure 10:

3. Click Next.

01/11/2008 PUBLIC 23/42

5 Installing the SAP NetWeaver Business Client (NWBC)

Figure 11:

4. Select the checkbox next to SAP NetWeaver Business Client and click Next.

Figure 12:

5. Click Finish.

24/42 PUBLIC 01/11/2008

5 Installing the SAP NetWeaver Business Client (NWBC)

Figure 13:

Recommendation
To use the NWBC, you must also configure the client on each desktop. For these instructions,
proceed to the Configuring the SAP NetWeaver Business Client [page 32] section in the Post-Installation
chapter.

01/11/2008 PUBLIC 25/42

This page is intentionally left blank.
6 Post-Installation

6 Post-Installation

After you have downloaded and installed the different files according to the previous chapters, follow
these post-installation steps in the order they are presented. These steps enable the customization
for the configuration of the product.

6.1 Activating Process Control Business Configuration (BC)

Sets

BC Sets are an official implementation toolset used to simplify the customization process. There are
certain BC Sets that are delivered with Process Control 2.5 that need to be activated. You can only
activate a BC Set if that client is not a production client in the system. When you activate a BC Set, all
data in the BC Set is transferred into the corresponding original tables. Any entries already in the
original tables are overwritten in this process.

Recommendation
Refer to the Implementation Guide (IMG) for more information about activating the BC Set and
using the SPRO transaction. Also, see the SAP Library for the SAP Web Application Server under
Customizing Business Configuration Set .

1. Choose Existing BC Sets from the toolbar in the Implementation Guide. This identifies all the IMG
activities for which a BC Set exists.
2. Select one of these IMG activities and choose BC Sets for Activation to display the contents of the
BC Set.
3. To activate the BC Set, choose Goto BC Set Activation Transaction.

Process Control BC Sets

BC Tables Name
GRPC-ROLES Edit Roles
GRPC-ATTR-ASSERTION Financial Assertions
GRPC-ATTR-CTRL_FREQUENCY Frequency of Control Operation
GRPC-ATTR-CTRL_OBJ_CATEGORY Control Objective Category and Control Type
GRPC-ATTR-INDUSTRY Industry

01/11/2008 PUBLIC 27/42

6 Post-Installation
6.2 Client Copy

BC Tables Name
GRPC-ATTR-NATURE Nature of Control
GRPC-ATTR-PURPOSE Control Purpose
GRPC-ATTR-RELEVANCE Control Relevance
GRPC-ATTR-RISK_IMPACT Qualitative Risk Impact
GRPC-ATTR-SAMPLE_METHOD GRPC: Add New Sampling Method to BC Set
GRPC-ATTR-SCHED_FREQUENCY Scheduling Frequency
GRPC-ATTR-SIGNIFICANCE Control Significance
GRPC-ATTR-TEST_TECH Test Technique
GRPC-ATTR-TRANSTYPE Transaction Type
GRPC-FREQUENCY-TIMEFRAME Frequency Timeframes for Scheduling

Caution
When activating the BC Set tables that begin with GRPC-ATTR-*, there could be errors listed in
the progress column. The errors stating System table GRPCATTR* cannot be put in a BC Set
can be safely ignored.

Figure 14: BC Set Error that can be ignored

6.2 Client Copy

Use the Client Copy feature to create a copy. This is done to bring the Process Control 2.5
client-specific data from client 000 to the specified target client.
1. For the client copy, choose Copy through the Customizing Piece List Transport option.
2. Use Piece List Transport SAPK-250COINGRCSPC .
3. Copy using Client Specific Objects option.

28/42 PUBLIC 01/11/2008

6 Post-Installation
6.3 Check SAP ICF Service

Recommendation
Refer to http://help.sap.com and search for Client Copy.

6.3 Check SAP ICF Service

Specific Internet Communication Framework (ICF) SAP and Process Control services have to be
activated. They are inactive by default after installation or support pack upgrade.

Note
Check that all the relevant services are active.

Recommendation
For more information about activating these services, see the following SAP Notes:
n 517484: Inactive services in the Internet Communication Framework.
n 1088717: Active services for Web Dynpro ABAP in transaction.

Procedure
1. Check the ICF nodes:/sap/public/bc and /sap/public/bc/ur
2. Activate, at a minimum, the following ICF service nodes:
n /sap/public/bc/icons
n /sap/public/bc/icons_rtl
n /sap/public/bc/webicons
n /sap/public/bc/pictograms
n /sap/public/bc/myssocntl
n /sap/public/bc/webdynpro
n /sap/public/bc/webdynpro/mimes
n /sap/public/bc/webdynpro/adobeChallenge
n /sap/public/bc/webdynpro/ssr

Note
You can also activate all ICF services within:
n /sap/public
n /sap/bc
3. Activate all GRPC Service at /sap/bc/webdynpro/sap and /sap/grc/nwbc/pc.

01/11/2008 PUBLIC 29/42

6 Post-Installation
6.4 Creating the Initial Process Control 2.5 User

6.4 Creating the Initial Process Control 2.5 User

SAP GRC Process Control 2.5 uses various roles to interface with the SAP system. Initially, assign the
SAP_GRC_SPC_ALL role to the person doing the customization of the product. This gives that
person the ability to see and do everything without being assigned to a Process Control role in NWBC.
This role is the power user role. This role is typically assigned to the user setting up the organization
structures and assigning business roles to all the other users. It contains all of the authorizations
from the role SAP_GRC_SPC_BUSINESS_USER, in addition to the following authorizations:
Administration functions in the Process Control Implementation Guide (IMG), structure setup in
expert mode, data upload for structure setup, customizing table maintenance for GRC Process
Control and start of role assignment procedure. The role does not contain the authorizations for
Workflow Customizing, Case Management, or Web services activation. For these authorizations,
use the role SAP_GRC_SPC_CUSTOMIZING.

Caution
Assign the SAP_GRC_SPC_ALL role with caution, since this role can make pervasive changes.
For more information regarding the SAP_GRC_SPC_ALL role and its authorizations, refer to the
SAP GRC Process Control 2.5 Security Guide

Procedure
1. Using transaction SU01, create a user.
2. On the Address data tab, assign the communications type of Email and provide an email address
if this user needs to receive workflow notifications via email.
3. On the Roles tab, assign the SAP_GRC_SPC_ALL role to this user.
4. This user can now go to the Implementation Guide (IMG) using transaction code SPRO and
complete the configuration, including such steps as activating the Business Configuration (BC)
Sets. This user can now also assign roles to other users.

6.5 Activating the Report Buffer

If there are no buffers available for the Process Control reports, there can be performance issues in the
length of time it takes to run reports. This can cause error messages when using the Analytics Dashboard.
1. Log on through your SAP Logon.
2. Input transaction GRPCR_Maintain to access the Make Settings for Improved Performance screen.
3. Select Report Buffer Setting.
4. Select Execute.
5. Verify the Reporting Buffer says Activate.
6. Select the type of Error Handling that is appropriate for your environment.

30/42 PUBLIC 01/11/2008

6 Post-Installation
6.6 Maintaining System Data

7. (Optional) Select the Number of Days until Cleanup.

8. (Optional) Select the Number of Versions in Buffer Unit. This option allows you to keep a few versions in
the buffer. If no number is designated, each report will overwrite the material in the buffer.
9. Select Save. This step brings you back to the Make Settings for Improved Performance screen.
10. Select the Create icon to create a reporting buffer.
11. Select Execute. This step produces the Reporting Buffer screen.
12. Select Create to create a new buffer.
13. Choose the Timeframe and Year for the buffer and choose OK.
14. Click Save and go back to the Make Settings for Improved Performance screen.
15. On the Report Buffer Setup screen, select either Fill Report Buffer (online) or Fill Reporting Buffer (batch) in
order to keep the data contained in the buffer up to date.
n If you select Fill Reporting Buffer (online), complete the Selection Criteria. The User ID is of the user that
created the buffer. Report Type is optional. The Date ranges refer to the creation date of the buffer.
n If you select Fill Reporting Buffer (batch), select Execute to produce the Define Background Job screen.
Select the Job Name. Click Start Condition to assign the time it will start. Click Step. Click Check.
Click Save.
16. Return to the Report Buffer Setup screen. Select the buffer you just created. Choose Display Requested
Report.

6.6 Maintaining System Data

For Customer Support to understand which GRC applications have been implemented in your
environment, it is necessary to fill out the Add-On Product Version in your System Data.

Recommendation
For more information see the SAP Note 1049638, System Data Maintenance for GRC Applications.

1. Locate the System Data application in the Support Portal in SAP Service Marketplace under Data
Administration, System Data (http://service.sap.com/system-data).
2. Use one of the search functions provided to select an installed SAP system.
3. On the System tab, scroll down to the Add-On Product Version section.
4. Insert a line.
5. Select the SAP GRC Process Control application and support package from the list.
6. Save your changes.
7. Repeat this procedure for all SAP systems.

01/11/2008 PUBLIC 31/42

6 Post-Installation
6.7 Configuring the SAP NetWeaver Business Client

6.7 Configuring the SAP NetWeaver Business Client

The following SAP NetWeaver Business Client (NWBC) dialog box must be completed on every client
computer. Complete the dialog box as follows:

Recommendation
For more information about the NWBC configuration, see the SAP Note 1108563.

Procedure
1. Open NWBC by clicking on the SAP NetWeaver Business Client shortcut on the desktop.

Figure 15:

2. In the top navigation menu, click System and then Preferences. This opens the NWBC configuration
dialog.

Figure 16:

32/42 PUBLIC 01/11/2008

6 Post-Installation
6.7 Configuring the SAP NetWeaver Business Client

3. Click on Add.

Figure 17:

4. Type in the details provided by your System Administrator.

Field Explanation
Name Name of the system
Type PORTAL or ERP. In a pure ABAP environment, only ERP is relevant.
Protocol HTTP or HTTPS. This setting is located in transaction SMICM under Goto
Services.
Host Host name. This setting is located in transaction SMICM under Goto Services.
Port Port number: This setting is located in transaction SMICM under Goto Services.
Path Path specification in the ICF service tree. This setting is located in
transaction SICF at /sap/grc/nwbc/pc
Client System Client
Language System Language
User User name of person logging into system

5. Click OK. This takes you back to the preferences screen. NWBC is now configured.

01/11/2008 PUBLIC 33/42

6 Post-Installation
6.8 Post-Installation RTA steps

6.8 Post-Installation RTA steps

The following steps must be performed on the system where your RTAs reside. You must have
completed the RTA installation detailed in the Installing Real Time Agents [page 21] chapter before
attempting these post-installation steps.
n Activating the Real Time Agent (RTA) BC Sets [page 34]
n Creating the Initial RTA User [page 34]

6.8.1 Activating the RTA BC Sets

Process Control 2.5 requires a Business Configuration (BC) Set called GRPCRTA-SCRIPT-TABLE to
work with the Real Time Agents (RTAs). The instructions in this section show you how to activate
this BC Set. The steps from this section are for SAP ERP 2005 (ECC 6.0). If you have another SAP
version, your user interface might look different.

Procedure
1. Execute transaction SCPR20.
2. Enter GRPCRTA-SCRIPT-TABLE in the BC Set field, then click the Activate icon.
3. Create a new transport utility. The table of contents in the BC Set GRPCRTA-SCRIPT-TABLE is
stored under this transport.
4. Enter the transport description and click the Save icon. A dialog box confirms that the transport
request is created.
5. Click the Continue icon. Another window indicates that new data records are generated or existing
records are overwritten if you continue with the BC Set activation.
6. Click the Continue icon. A final window indicates that the BC Set activation is in progress.

6.8.2 Creating the Initial RTA User

The Real Time Agents (RTAs) use one role to interface with the Process Control 2.5 system. Assign
the SAP_GRPCRTA_PC_ROLE role to the person doing the customization of the product.

Procedure
1. Using transaction SU01, create a user.
2. On the Address data tab, assign the communications type of email and provide an email address if
this user must receive workflow notifications via email..
3. On the Roles tab, assign the SAP_GRPCRTA_PC_ROLE role to this user.

34/42 PUBLIC 01/11/2008

A Reference

A Reference

A.1 The Main SAP Documentation Types

The following is an overview of the most important documentation types that you need in the
various phases in the life cycle of SAP software.

Figure 18: Documentation Types in the Software Life Cycle

Cross-Phase Documentation
SAPterm is SAP’s terminology database. It contains SAP-specific vocabulary in over 30 labout
anguages, as well as many glossary entries in English and German.
n Target group:
l Relevant for all target groups
n Current version:
l On SAP Help Portal at http://help.sap.com Additional Information Glossary (direct access)
or Terminology (as terminology CD)
l In the SAP system in transaction STERM

01/11/2008 PUBLIC 35/42

A Reference
A.1 The Main SAP Documentation Types

SAP Library is a collection of documentation for SAP software covering functions and processes.
n Target group:
l Consultants
l System administrators
l Project teams for implementations or upgrades
n Current version:
l On SAP Help Portal at http://help.sap.com (also available as documentation DVD)
The security guide describes the settings for a medium security level and offers suggestions for
raising security levels. A collective security guide is available for SAP NetWeaver. This document
contains general guidelines and suggestions. SAP applications have a security guide of their own.
n Target group:
l System administrators
l Technology consultants
l Solution consultants
n Current version:
l On SAP Service Marketplace at http://service.sap.com/securityguide

Implementation
The master guide is the starting point for implementing an SAP solution. It lists the required
installable units for each business or IT scenario. It provides scenario-specific descriptions of
preparation, execution, and follow-up of an implementation. It also provides references to other
documents, such as installation guides, the technical infrastructure guide and SAP Notes.
n Target group:
l Technology consultants
l Project teams for implementations
n Current version:
l On SAP Service Marketplace at http://service.sap.com/instguides
The installation guide describes the technical implementation of an installable unit, taking
into account the combinations of operating systems and databases. It does not describe any
business-related configuration.
n Target group:
l Technology consultants
l Project teams for implementations
n Current version:
l On SAP Service Marketplace at http://service.sap.com/instguides
Configuration Documentation in SAP Solution Manager—SAP Solution Manager is a life-cycle
platform. One of its main functions is the configuration of business and IT scenarios. It contains IMG
activities, transactions, and so on, as well as documentation.

36/42 PUBLIC 01/11/2008

A Reference
A.1 The Main SAP Documentation Types

n Target group:
l Technology consultants
l Solution consultants
l Project teams for implementations
n Current version:
l In SAP Solution Manager
The Implementation Guide (IMG) is a tool for configuring a single SAP system. The IMG activities
and their documentation are structured from a functional perspective. (In order to configure a
whole system landscape from a process-oriented perspective, SAP Solution Manager, which refers to
the relevant IMG activities in the individual SAP systems, is used.)
n Target group:
l Solution consultants
l Project teams for implementations or upgrades
n Current version:
l In the SAP menu of the SAP system under Tools Customizing IMG

Production Operation
The technical operations manual is the starting point for operating a system that runs on SAP
NetWeaver, and precedes the solution operations guide. The manual refers users to the tools and
documentation that are needed to carry out various tasks, such as monitoring, backup/restore,
master data maintenance, transports, and tests.
n Target group:
l System administrators
n Current version:
l On SAP Service Marketplace at http://service.sap.com/instguides
The solution operations guide is used for operating an SAP application once all tasks in the
technical operations manual have been completed. It refers users to the tools and documentation
that are needed to carry out the various operations-related tasks.
n Target group:
l System administrators
l Technology consultants
l Solution consultants
n Current version:
l On SAP Service Marketplace at http://service.sap.com/instguides

Upgrade
The upgrade master guide is the starting point for upgrading the business and IT scenarios of an
SAP solution. It provides scenario-specific descriptions of preparation, execution, and follow-up of an
upgrade. It also refers to other documents, such as the upgrade guides and SAP Notes.

01/11/2008 PUBLIC 37/42

A Reference
A.1 The Main SAP Documentation Types

n Target group:
l Technology consultants
l Project teams for upgrades
n Current version:
l On SAP Service Marketplace at http://service.sap.com/instguides
The upgrade guide describes the technical upgrade of an installable unit, taking into account
the combinations of operating systems and databases. It does not describe any business-related
configuration.
n Target group:
l Technology consultants
l Project teams for upgrades
n Current version:
l On SAP Service Marketplace at http://service.sap.com/instguides
Release notes are documents that contain short descriptions of new features or changes in SAP
NetWeaver or an SAP application since the previous release. Release notes about ABAP developments
enable the SAP system to generate delta and upgrade IMGs.
n Target group:
l Consultants
l Project teams for upgrades
n Current version:
l On SAP Service Marketplace at http://service.sap.com/releasenotes
l In the SAP menu of the SAP system under Help Release Notes (only ABAP developments)

38/42 PUBLIC 01/11/2008

Typographic Conventions

Example Description

< > Angle brackets indicate that you replace these words or characters with appropriate
entries to make entries in the system, for example, “Enter your <User Name>”.
Arrows separating the parts of a navigation path, for example, menu options
Example Emphasized words or expressions
Example Words or characters that you enter in the system exactly as they appear in the
documentation
Example Textual cross-references to an internet address, for example, http://www.sap.com
/example Quicklinks added to the internet address of a homepage to enable quick access to
specific content on the Web
123456 Hyperlink to an SAP Note, for example, SAP Note 123456
Example n Words or characters quoted from the screen. These include field labels, screen titles,
pushbutton labels, menu names, and menu options.
n Cross-references to other documentation or published works
Example n Output on the screen following a user action, for example, messages
n Source code or syntax quoted directly from a program
n File and directory names and their paths, names of variables and parameters, and
names of installation, upgrade, and database tools
EXAMPLE Technical names of system objects. These include report names, program names,
transaction codes, database table names, and key concepts of a programming language
when they are surrounded by body text, for example, SELECT and INCLUDE
EXAMPLE Keys on the keyboard

01/11/2008 PUBLIC 39/42

 SAP AG
Dietmar-Hopp-Allee 16
69190 Walldorf
Germany
T +49/18 05/34 34 34
F +49/18 05/34 34 20
www.sap.com

© Copyright 2008 SAP AG. All rights reserved.

No part of this publication may be reproduced or transmitted in any form or for any purpose without the express permission
of SAP AG. The information contained herein may be changed without prior notice.
Some software products marketed by SAP AG and its distributors contain proprietary software components of other
software vendors.
Microsoft, Windows, Outlook, and PowerPoint are registered trademarks of Microsoft Corporation.
IBM, DB2, DB2 Universal Database, OS/2, Parallel Sysplex, MVS/ESA, AIX, S/390, AS/400, OS/390, OS/400, iSeries, pSeries,
xSeries, zSeries, System i, System i5, System p, System p5, System x, System z, System z9, z/OS, AFP, Intelligent Miner,
WebSphere, Netfinity, Tivoli, Informix, i5/OS, POWER, POWER5, POWER5+, OpenPower and PowerPC are trademarks or
registered trademarks of IBM Corporation.
Adobe, the Adobe logo, Acrobat, PostScript, and Reader are either trademarks or registered trademarks of Adobe Systems
Incorporated in the United States and/or other countries.
Oracle is a registered trademark of Oracle Corporation.
UNIX, X/Open, OSF/1, and Motif are registered trademarks of the Open Group.
Citrix, ICA, Program Neighborhood, MetaFrame, WinFrame, VideoFrame, and MultiWin are trademarks or registered
trademarks of Citrix Systems, Inc.
HTML, XML, XHTML and W3C are trademarks or registered trademarks of W3C®, World Wide Web Consortium,
Massachusetts Institute of Technology.
Java is a registered trademark of Sun Microsystems, Inc.
JavaScript is a registered trademark of Sun Microsystems, Inc., used under license for technology invented and implemented
by Netscape.
MaxDB is a trademark of MySQL AB, Sweden.
SAP, R/3, mySAP, mySAP.com, xApps, xApp, SAP NetWeaver, and other SAP products and services mentioned herein as well
as their respective logos are trademarks or registered trademarks of SAP AG in Germany and in several other countries all
over the world. All other product and service names mentioned are the trademarks of their respective companies. Data
contained in this document serves informational purposes only. National product specifications may vary.
These materials are subject to change without notice. These materials are provided by SAP AG and its affiliated companies
(“SAP Group”) for informational purposes only, without representation or warranty of any kind, and SAP Group shall not
be liable for errors or omissions with respect to the materials. The only warranties for SAP Group products and services are
those that are set forth in the express warranty statements accompanying such products and services, if any. Nothing herein
should be construed as constituting an additional warranty.
This document was created using stylesheet 2006-12-31 (V5.1beta [= 6.0 for E3]) and XSLT processor SAXON 6.5.2 from
Michael Kay (http://saxon.sf.net/), XSLT version 1.

Disclaimer
Some components of this product are based on Java™. Any code change in these components may cause unpredictable and
severe malfunctions and is therefore expressively prohibited, as is any decompilation of these components.
Any Java™ Source Code delivered with this product is only to be used by SAP’s Support Services and may not be modified or
altered in any way.

40/42 PUBLIC 01/11/2008

Documentation in the SAP Service Marketplace
You can find this document at the following address: https://service.sap.com/instguidesinstguides

01/11/2008 PUBLIC 41/42

 SAP AG
Dietmar-Hopp-Allee 16
69190 Walldorf
Germany
T +49/18 05/34 34 34
F +49/18 05/34 34 20
www.sap.com

© Copyright 2008 SAP AG. All rights reserved.

No part of this publication may be reproduced or transmitted in any form or for any purpose without the express permission of SAP AG. The information contained herein may be
changed without prior notice.