SAPSQL_PARSE_ERROR during groups aggreation - SAP GRC

Hi experts,

We are configuring SAP GRC - Access Management. and we getting the following error during Role aggregation

[23/05/23 17:52:15:669 CEST] 0000009b SystemOut O 2023-05-23T17:52:15,669 WARN QuartzScheduler_Worker-3 connector.sapgrc.service.SAPGRCRFCServiceProvider:2147 - Exception while getting attribute details for roles
sailpoint.connector.ConnectorException: Caused by class com.sap.conn.jco.JCoException: (104) An error has occurred while parsing a dynamic entry.: Message 341 of class 00 type X: SAPSQL_PARSE_ERROR.

When we try account ggregation, there is not error, so, account aggregation works properly.

We are using RFC_READ_TABLE as function module in the connector.

Any idea about this error?

Thanks!

GRC is a bit of a beast. I’d first suggest taking a 2nd pass at the GRC Integration Guide with your GRC team and make sure that they completed all the service account config on their side correctly - there’s a lot to do in that regard and it’s not too uncommon for them to miss a step/permission.

1 Like

Finally, we raised a ticket to Sailpoint Support, and it appear that this issue is regarding a know incident.
This error is caused due to the limitations of the RFC_READ_TABLE module, you cannot run data requests containing a filter that exceeds the length of 72 characters:

Public Knowledge Base - Entitlement aggregations failing for SAP GRC connector (sailpoint.com)

In this case, Sailpoint suggest upgrade to the SailPoint Add-On to replace the use of BAPI RFC_READ_TABLE and remove this limitation. The steps to install this Add on are described in the following link:

SailPoint Add-On to replace the use of RFC_READ_TABLE

From other side, Sailpoint will deprecate RFC_READ_TABLE module on Dec 2023

SAP: Deprecation of RFC_READ_TABLE Integration Function Module - Compass (sailpoint.com)

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.