SAP GRC Entitlement aggregation is failing

Identity Security Cloud (ISC) ISC Discussion and Questions
,
1

Hello Sailors,

I would like to reach out to the community to inquire if anyone has encountered the issue of being unable to aggregate groups from SAP GRC, resulting in failed aggregations and the error having generic message which is shown below .

If so, I would greatly appreciate any insights or solutions you have found to address this challenge.

Exception during aggregation of Object Type group on Application SAP GRC [source]. Reason: java.lang.RuntimeException: An error occurred while aggregating Application SAP GRC [source]

In further , I saw the CCG logs the webservice which is calling the group API is working (WS ROLEDETAILS) and sending response code with 200 (HTTP STATUS OK) with 440 bytes of data, but -
It is failing to create group resourceObject in SAPGRC connector showing message as - "Unable to find resource object for provided root path"

Thank you in advance for your assistance.

2

Hi @IAMpdu

Have you try test connection and does it working fine?
From other side, what Function Module are you using? RFC_READ_TABLE, SAILPOINT/SAIL_READ_TABLE…?
Are you using a filter to aggregate roles?

3

Is tracing enabled to gather more information about this error? Additionally, is the account aggregation process running smoothly without any reported errors?

4

Thanks @ismaelmoreno1 for your reply !!
Tried but not working and I am not using any filter in roles.

5

Thanks @sunnyajmera, for you response !!

Account aggregation is working smoothly and it is bringing entitlements with that.

6

Can you provide Error returned when you try Test Connection?

7

Test connection & account aggregation is working only group aggregation is not working.

8

Enable trace on the connector class and dump the logs, so we know what could possibly block from creating entitlement objects. Also verify the entitlement schema and native identifier are set appropriately.

9

@suresh1_munuswamy @ismaelmoreno1

I am facing the same issue in ServiceNow connector. I have checked all configurations, they look good.

Any leads would be helpful.

10

Can you enable trace on ServiceNow connector and share logs here

11

I am also facing same issue for ServiceNow entitlement aggregation.

12

Can you please provide screenshot for the error on the UI for the aggregation ?

Even we have ServiceNow connectors and it is working fine

Thanks

13

@IAMpdu

After enabling the logs, it seems the access issue for the service account we have for ServiceNow. Loggers state that “User is unauthorized to access table”.

Check on your end too if this would be a cause for your failed aggregation.

14

@ashish_kumar3284

I saw same error log in CCG logs and I asked client to assign the proper permissions to the service account and the issue got resolved !!

Thanks !!

15

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.