GRC10 Pre Inst

GRC 10.0 Pre-Installation

Customer Solution Adoption

April 4th 2011

Version 1.0

Purpose of this document

To give readers an initial understanding of the GRC 10.0 technical

requirements, architecture and documentation prior to the GRC 10.0

installation especially for IT, SAP Basis and technology audience.

© 2011 SAP AG. All rights reserved. 3

Disclaimer

This presentation outlines our general product direction and should not be relied on in

making a purchase decision. This presentation is not subject to your license agreement

or any other agreement with SAP. SAP has no obligation to pursue any course of

business outlined in this presentation or to develop or release any functionality

mentioned in this presentation. This presentation and SAP's strategy and possible future

developments are subject to change and may be changed by SAP at any time for any

reason without notice. This document is provided without a warranty of any kind, either

express or implied, including but not limited to, the implied warranties of

merchantability, fitness for a particular purpose, or non-infringement. SAP assumes no

responsibility for errors or omissions in this document, except if such damages were

caused by SAP intentionally or grossly negligent.


Content

• GRC 10.0 Technical Architecture

• Pre-installation Information

• Installation


Content



• Installation

© 2011 SAP AG. All rights reserved. 6*Crystal Reports Adapter and Active Component Framework – needed for viewing GRC Crystal Reports

GRC 10.0 LandscapeSynopsis

SAP NetWeaver

AS ABAP 7.02

AC, PC & RM(Software Component:

GRCFND_A)

SAP GRC Suite 10.0

GTS(Software Component:

SLL-LEG)

Nota Fiscal Eletronica(Software Component:

SLL-NFE)

Content Lifecycle

Management (CLM)

SAP ERP (4.6C – 7.1)

Non-SAP Business

ApplicationsAdapter

NW Function Modules(Plug-in: GRCPINW)

HR Function Modules

PC Automated Cntrls(Plug-in: GRCPIERP)

GTS Plug-in(Plug-in: SLL-PI)

SAP NW Portal 7.02

GRC Portal

Content

SAP NW BW 7.02BI Content 7.06

GRC BI Content

Identity Management Solutions

(SAP or Non-SAP)

optional

optional

optional

http

RFC

web

services

RFC

optional

SAP GUI

7.10

Web Browser

Front End Client

Adobe Flash

Player

RFC

RFC

DIAGhttp

CRA*

RFCSAP NetWeaver 7.02Search/Classification

GRC Search

Recommended for GTS/SPL

SAP NW Java 7.01Adobe Document

Services

Required for GTS

SAP NetWeaver PI

Nota Fiscal Content

Required for Nota Fiscal E.

optional


Access Control 10.0 Landscape Synopsis

SAP NetWeaver

AS ABAP 7.02


GRCFND_A)

SAP GRC Suite 10.0

Content Lifecycle

Management (CLM)

SAP ERP (4.6C – 7.1)

Non-SAP Business

ApplicationsAdapter


HR Function Modules

PC Automated Ctrls(Plug-in: GRCPIERP)

SAP NW Portal 7.02

GRC Portal

Content

SAP NW BW 7.02BI Content 7.06GRC BI Content


(SAP or Non-SAP)

optional

optional

optional

http

web

services

RFC

optional

SAP GUI

7.10

Web Browser

Front End Client

Adobe Flash

Player

RFC

DIAGhttp

CRA*

RFC

SAP NW Java 7.01

Adobe Document

Services

optional optional

© 2011 SAP AG. All rights reserved. 8* Crystal Reports Adapter and Active Component Framework – needed for viewing GRC Crystal Reports

Process Control 10.0 Landscape Synopsis

SAP NetWeaver

AS ABAP 7.02

SAP GRC Suite 10.0

SAP ERP (4.6C – 7.1)

Non-SAP Business

ApplicationsAdapter

HR Function Modules


SAP NW Portal 7.02

GRC Portal Content

SAP NW BW 7.02BI Content 7.06GRC BI Content

optional

optional

http

RFC

RFC

optional

SAP GUI

7.10

Web Browser

Front End Client

Adobe Flash

Player

RFC

DIAGhttp

CRA*


GRC Search

optional

SAP NW Java 7.01

Adobe Document

Services

optional optional


GRCFND_A)

Content Lifecycle

Management (CLM)


Risk Management 10.0 Landscape Synopsis

SAP NetWeaver

AS ABAP 7.02

SAP GRC Suite 10.0

SAP ERP (4.6C – 7.1)

Non-SAP Business

Applications

SAP NW Portal 7.02

GRC Portal Content


GRC BI Content

optional

optional

http

RFC

RFC

optional

SAP GUI

7.10

Web Browser

Front End Client

Adobe Flash

Player

RFC

DIAGhttp

CRA*


GRC Search

optional

SAP NW Java 7.01

Adobe Document

Services

recommended for offline RM surveys

optional

web

services


GRCFND_A)

Content Lifecycle

Management (CLM)


Global Trade Services 10.0 Synopsis

SAP NetWeaver

AS ABAP 7.02

SAP GRC Suite 10.0

GTS(Software Component: SLL-LEG)

Content Lifecycle

Management (CLM)

http

RFC

RFC

SAP GUI

7.10

Web Browser

Front End Client

Adobe Flash

Player

RFC

DIAGhttp

CRA*


GRC Search

SAP NW Java 7.01

Adobe Document

Services

required for GTS

RFC &

web

services

recommended for GTS/SPL

SAP ERP (4.6C – 7.1)

Non-SAP Logistics

Systems

SAP NW Portal 7.02

GRC Portal Content


GRC BI Content

optional

optional

optional

optional



Electronic Invoicing for Brazil (Nota Fiscal Eletronica) 10.0

Synopsis

SAP NetWeaver

AS ABAP 7.02

SAP GRC Suite 10.0

http

RFC

SAP GUI

7.10

Web Browser

Front End Client

Adobe Flash

Player

RFC

DIAGhttp

CRA*

RFC

SAP NetWeaver PI

Nota Fiscal Content

Required for Nota Fiscal Eletronica

RFC

Nota Fiscal Eletronica(Software Component:

SLL-NFE)

Content Lifecycle

Management (CLM)

SAP ERP (4.6C – 7.1)

Non-SAP Logistics

Systems

SAP NW Portal 7.02

GRC Portal Content


GRC BI Content

optional

optional

optional

optional


GRC Suite

The GRC 10.0 suite runs on AS ABAP 7.02 SP6 or higher

Access Control, Process Control and Risk Management

are contained in one ABAP add-on “GRCFND_A”

Global Trade Services resides in a separate add-on “SLL-

LEG”

So does Nota Fiscal Eletronica have its own add-on “SLL-

NFE”

The Content Lifecycle Management (CLM) contains

functions for transporting GRC business data e.g. AC

Rules or PC Controls

CLM has the same (version) requirements as the GRC

10.0 suite and is installed during the GRC installation

(CLM can be disabled if not required)

GRC configuration/customizing is transported using the

standard ABAP transport system

SAP NetWeaver

AS ABAP 7.02


GRCFND_A)

SAP BusinessObjects

GRC 10.0 Suite

GTS(Software Component: SLL-LEG)

Nota Fiscal Eletronica

(Software Component: SLL-NFE)

Content Lifecycle

Management (CLM)


Front End

The front-end needs a web browser or (optionally) a client

installation of the NetWeaver Business Client 3.0 (NWBC)

The web browser can be used to access the embedded

NWBC or GRC via the NetWeaver Portal

The Adobe flash player 10 is used for displaying

dashboards e.g. RM heat map

SAPGUI 7.10 PL 15 or higher is required for administration

or customizing tasks – note that SAPGUI 7.20 is

recommended due to the end-of-maintenance of SAPGUI

7.10

The Crystal Reports Adapter (CRA) is required for viewing

(GRC) Crystal Reports

For version specifics (regarding Browser etc.) please refer

to the PAM: http://service.sap.com/pam

SAP GUI 7.10

Web Browser

Front End Client

Adobe Flash Player

CRA

http://service.sap.com/pam


Portal

The NetWeaver Portal 7.02 can be used optionally

The GRC Portal Content contains the GRC Portal UI elements

to access the GRC suite

The Portal’s AS Java can contain an Adobe Document

Services instance, in effect Portal and ADS may be shared on

one AS Java instance

SAP NW Portal 7.02

GRC Portal

Content

optional


ERP and Non-SAP Business Applications

The GRC solutions can communicate with SAP ERP and

non-SAP business applications via plug-ins

NW Function Modules hold the AC functions for ERP

systems without HR (former non-HR RTA)

PC relevant features are contained in the plug-in

GRCPIERP, for example, for running automated controls

and the HR relevant functions for AC (former HR RTA)

GTS functions are part of the SLL-PI plug-in, for example,

for GTS integration into the Logistics, HR, FI/CO and/or

HCM processes in SAP ERP

Non-SAP ERP systems can also be connected via adapters

from an SAP Partner company

SAP ERP (4.6C – 7.1)

Non-SAP Business

Applications


HR Function Modules



optional

optional


BI Content

NetWeaver BW can be used for reporting via the GRC BI

Content

The GRC BI Content is part of BI Content 7.06

NetWeaver BW 7.02 is used for the GRC BI Content

SAP NetWeaver BW

GRC BI Content

optional


NetWeaver PI

NetWeaver PI is required for Nota Fiscal Eletronica for

exchanging data with authorities in Brazil

PI 7.00 SP14 or any higher version is used for NFe 10.0 like

for previous NFe releases, so you do not need to upgrade your

PI to use NFe 10.0

SAP NetWeaver PI

Nota Fiscal Content

Required for Nota Fiscal E.


Identity Management (IdM)

AC can be integrated bi-directionally to IdM solutions for

provisioning and risk analysis

NetWeaver IdM 7.2 is required for integrating with AC

10.0


(SAP or Non-SAP)

optional


Adobe Document Services

An instance of Adobe Document Services (ADS) should be

accessible from the GRC AS ABAP for generating offline forms

(for example, for PC and RM)

Although it is technically optional, it is highly recommended for

generating PDF reports

Adobe Document Services is recommend for offline RM surveys

GTS requires the Adobe Document Services for various forms in

Customs Management

This ADS can be an existing instance and can also be shared

with other applications

The Portal’s AS Java can contain an Adobe Document Services

instance, so Portal and ADS may be shared on one AS Java

instance

SAP NW Java 7.01

Adobe Document

Services

optional


SAP NetWeaver 7.02 Search & Classification

SAP NetWeaver 7.02 Search & Classification may be used for

searching documents attached to objects in some GRC

solutions, such as Process Control or Risk Management

SAP recommends a TREX instance for the GTS function

Sanctioned Party List Screening

Access Control does not make use of this search functionality

SAP NetWeaver 7.02Search/Classification

GRC Search

optional


Content



• Installation


Installation Prerequisites – Server

NetWeaver AS ABAP 7.02 SP6 or higher

For details please refer to the PAM:


Install Guide for NetWeaver 7.02:

http://service.sap.com/~form/sapnet?_SHORTKEY=01100035870000733140&






Installation Prerequisites – Back-end

For ERP systems that will install Access Control Plug-In the following prerequisites

must be met:

For SAP ERP system 4.6C, the system must be at SAP_BASIS Support Pack 55

For SAP ERP 4.70 system, the system must be at SAP_BASIS Support Pack 26

For ERP 2004 system, the system must be at SAP_Basis Support Pack 18

For ERP 6.0 system, the system mut be at SAP_BASIS Support Pack 13

For NetWeaver systems that will install Access Control Plug-In the following

prerequisites must be met:

For SAP Basis 4.6C, the system must be at SAP_BASIS Support Pack 55

For NW 6.20 system, the system must be at SAP_BASIS Support Pack 26



– For NW 7.01, the system must be at SAP_BASIS Support Pack 02

– For NW 7.02, the system must be at SAP_BASIS Support Pack 01

For SAP Basis 710 system, the system must be at SAP_BASIS Support Pack 04


Installation Prerequisites – Client

• The front-end needs a web browser or (optionally) a client installation of the

NetWeaver Business Client 3.0 (“NWBC” - see SAP Note 1029940)

• Minimum SAPGUI 7.10 PL15 or higher for customizing and administration

tasks, however SAPGUI 7.20 is recommended due to end-of-maintenance* of

SAPGUI 7.10, see SAP Note 147519

• Adobe Flash 10 plug-in for GRC dashboards (for the browser and/or NWBC)

• Crystal Reports Adapter for viewing (GRC) Crystal Reports, see SAP Note

1353044

• Adobe Acrobat Reader 9 optional for filling offline forms (e.g. in PC)

• For details please refer to the PAM:

– http://service.sap.com/pam

* SAP GUI for Windows 7.10 is supported until 12th of April 2011

https://service.sap.com/sap/support/notes/1029940






Where to obtain the GRC 10.0 softwarehttp://service.sap.com/swdc

Installations and Upgrades – A – Z Index Installations and Upgrades – G SAP GRC ACCESS CONTROL SAP

ACCESS CONTROL 10.0

http://service.sap.com/swdc


Content of the Installation ZIP

The GRC 10.0 Installation ZIP file “01200314692000001255.zip“ contains the following

structure:

GRC 10.0 ABAP add-on

Content Lifecycle

Management ABAP add-on

GRC 10.0 Java Components (Portal

Content, AC 5.3 Migration Tool and AC Portal plug-in)

AC/PC ERP plug-ins(with back-end R/3 or ERP version e.g. “46C“ or “700“)

AC ERP plug-ins(with back-end R/3 or ERP version e.g. “46C“ or “700“)


Access Control Installation Notes

Installation Notes

SAP Note 1490996: Install SAP GRC Access Control 10.0 on SAP NW 7.02

SAP Note 1500168: Install SAP GRC Access Control 10.0 Plug-In on SAP BASIS 46C NW

SAP Note 1497971: Install SAP GRC Access Control 10.0 Plug-In on SAP BASIS 620 NW




SAP Note 1500169: Install SAP GRC Access Control 10.0 Plug-In on SAP BASIS 46C ERP

SAP Note 1497972: Install SAP GRC Access Control 10.0 Plug-In on SAP BASIS 620 ERP



https://websmp209.sap-ag.de/~form/handler?_APP=01100107900000000342&_EVENT=DISPL_TXT&_NNUM=<1490996>













Process Control and Risk Management Installation Notes

See SAP Notes for implementing SAP BusinessObjects Process Control 10.0:

SAP Note 1509999 - Installing SAP GRC Shared Components 10.0

SAP Note 1510000 - Upgrading to SAP GRC Shared Components 10.0

SAP Note 1510001 - Installing SAP POA Shared Business Components

SAP Note 1510002 - Installing SAP GRC Portal 10.0

SAP Note 1510053 - Install/Upgrade RTA for GRC Process Control 10.0

SAP Note 1510055 - Upgrading SAP NW with GRC 10.0 Plugin for Process Control

SAP Note 1503796 - Release Restrictions for GRC Process Control 10.0

SAP Note for implementing SAP BusinessObjects Risk Management 10.0:

SAP Note 1486768 - SAP GRC RM 10.0 Release Restriction Note

Note: ERP 4.6C is not supported for Continuous Monitoring (Sub scenario Configurable) in PC 10

(see help.sap.com)








https://websmp107.sap-ag.de/~form/handler?_APP=01100107900000000342&_EVENT=DISPL_TXT&_NNUM=1486768/~form/handler?_APP=01100107900000000342&_EVENT=DISPL_TXT&_NNUM=1486768

http://help.sap.com/saphelp_grcpc10/helpdata/en/9a/35bde07054476ead120eb81251f10a/content.htm


Where to find the GRC 10.0 Documentation (1)

http://service.sap.com/instguides

http://service.sap.com/instguides



http://help.sap.com

http://help.sap.com/



http://service.sap.com/RKT

http://service.sap.com/RKT


Additional Documentation on BPX

http://www.sdn.sap.com/irj/scn/articles-grc-all







Support via Customer Messages

Customer Support

If you experience problems with the installation or any other aspect of Access

Control 10.0, create a customer message on the SAP Service Marketplace at

http://service.sap.com/message using the following components:

GRC-SAC for Access Control

GRC-SPC for Process Control

GRC-RM for Risk Management

XAP-SBC for Content Lifecycle Management

Please prefix the short text of your Access Control customer message with

“RUAC10”, e.g. short text “RUAC10: provisioning error“

For Process Control use RUPC10 and for Risk Management RURM10

https://websmp209.sap-ag.de/message


Content



• Installation


Installation of Main Components of

AC/PC/RM 10.0

General Steps:

1. Main installation components:

GRCFND_A

2. Download the installation packages

from Service Marketplace

3. Install with the transaction SAINT

4. Follow the detailed instructions from

the SAP Note 1490996

5. Apply the most recent Support

Packages


Installation of Plug-In for AC/PC 10.0 on ERP

General Steps:


GRCPINW

GRCPIERP


from SMP


4. Follow the detailed instructions from

the SAP Notes 1500689 and 1500690

5. Apply the necessary Support

Packages if there is any

Note: Plug-Ins vary depending on back

end ERP system.

Attention:The AC 10.0 plug-ins will upgrade any existing RTA from previous AC releases.

This means that any AC instance on running 5.X will stop working after the plug-ins

are installed.


Installation of GTS 10.0

General Steps:

1. Main installation component:

SLL-LEG

2. Download the installation

packages from SMP

3. Install with the transaction

SAINT

4. Follow the detailed instructions

from the SAP Note 1492738


Packages


Installation of Plug-In for GTS 10.0

General Steps:

1. Two main installation components:

SLL_PI


from SMP



from the SAP Note 1492741


Packages


Installation of NFe 10.0

General Steps:


SLL-NFE

2. Download the installation

packages from SMP



from install guide


Packages


Installation of POA Shared Business Components /

Content Lifecycle Management (1)

General Steps:


GRFD_STRUCTURE

2. Download the installation packages from SMP


4. Follow the detailed instructions in the GRC 10.0 install guide (Chapter 10)

5. Apply the necessary Support Packages if there is any

See also note on next slide!


Installation of POA Shared Business Components /

Content Lifecycle Management (2)

Notes:

• CLM is not supported in AC only installations for AC 10.0 SP3 and earlier SPs

• CLM works with

• AC 10.0 SP4 or higher

• PC 10.0 SP3 or higher

• RM 10.0 SP1 or higher

• GTS 10.0 SP1 or higher

• Please also watch out for SAP Note 1536594 to not install CLM SP1 and SP2 in

one queue!


No part of this publication may be reproduced or transmitted in any form or for any purpose without the express permission of SAP AG. The information contained herein may be changed without prior notice.

Some software products marketed by SAP AG and its distributors contain proprietary software components of other software vendors.

Microsoft, Windows, Excel, Outlook, and PowerPoint are registered trademarks of Microsoft Corporation.

IBM, DB2, DB2 Universal Database, System i, System i5, System p, System p5, System x, System z, System z10, System z9, z10, z9, iSeries, pSeries, xSeries, zSeries, eServer, z/VM, z/OS, i5/OS, S/390, OS/390, OS/400, AS/400, S/390 Parallel Enterprise Server, PowerVM, Power Architecture, POWER6+, POWER6, POWER5+, POWER5, POWER, OpenPower, PowerPC, BatchPipes, BladeCenter, System Storage, GPFS, HACMP, RETAIN, DB2 Connect, RACF, Redbooks, OS/2, Parallel Sysplex, MVS/ESA, AIX, Intelligent Miner, WebSphere, Netfinity, Tivoli and Informix are trademarks or registered trademarks of IBM Corporation.

Linux is the registered trademark of Linus Torvalds in the U.S. and other countries.

Adobe, the Adobe logo, Acrobat, PostScript, and Reader are either trademarks or registered trademarks of Adobe Systems Incorporated in the United States and/or other countries.

Oracle is a registered trademark of Oracle Corporation.

UNIX, X/Open, OSF/1, and Motif are registered trademarks of the Open Group.

Citrix, ICA, Program Neighborhood, MetaFrame, WinFrame, VideoFrame, and MultiWin are trademarks or registered trademarks of Citrix Systems, Inc.

HTML, XML, XHTML and W3C are trademarks or registered trademarks of W3C®, World Wide Web Consortium, Massachusetts Institute of Technology.

Java is a registered trademark of Sun Microsystems, Inc.

JavaScript is a registered trademark of Sun Microsystems, Inc., used under license for technology invented and implemented by Netscape.

SAP, R/3, SAP NetWeaver, Duet, PartnerEdge, ByDesign, SAP BusinessObjects Explorer, StreamWork, and other SAP products and services mentioned herein as well as their respective logos are trademarks or registered trademarks of SAP AG in Germany and other countries.

© 2011 SAP AG. All rights reserved

Business Objects and the Business Objects logo, BusinessObjects, Crystal Reports, Crystal Decisions, Web Intelligence, Xcelsius, and other Business Objects products and services mentioned herein as well as their respective logos are trademarks or registered trademarks of Business Objects Software Ltd. Business Objects is an SAP company.

Sybase and Adaptive Server, iAnywhere, Sybase 365, SQL Anywhere, and other Sybase products and services mentioned herein as well as their respective logos are trademarks or registered trademarks of Sybase, Inc. Sybase is an SAP company.

All other product and service names mentioned are the trademarks of their respective companies. Data contained in this document serves informational purposes only. National product specifications may vary.

The information in this document is proprietary to SAP. No part of this document may be reproduced, copied, or transmitted in any form or for any purpose without the express prior written permission of SAP AG.

This document is a preliminary version and not subject to your license agreement or any other agreement with SAP. This document contains only intended strategies, developments, and functionalities of the SAP® product and is not intended to be binding upon SAP to any particular course of business, product strategy, and/or development. Please note that this document is subject to change and may be changed by SAP at any time without notice.

SAP assumes no responsibility for errors or omissions in this document. SAP does not warrant the accuracy or completeness of the information, text, graphics, links, or other items contained within this material. This document is provided without a warranty of any kind, either express or implied, including but not limited to the implied warranties of merchantability, fitness for a particular purpose, or non-infringement.

SAP shall have no liability for damages of any kind including without limitation direct, special, indirect, or consequential damages that may result from the use of these materials. This limitation shall not apply in cases of intent or gross negligence.

The statutory liability for personal injury and defective products is not affected. SAP has no control over the information that you may access through the use of hot links contained in these materials and does not endorse your use of third-party Web pages nor provide any warranty whatsoever relating to third-party Web pages.

GRC10 Pre Inst

Documents

Transcript of GRC10 Pre Inst