GRC 10.0 Pre-Installation

Transcription

1 GRC 10.0 Pre-Installation Customer Solution Adoption April 4 th 2011 Version 1.1

2 Purpose of this document To give readers an initial understanding of the GRC 10.0 technical requirements, architecture and documentation prior to the GRC 10.0 installation especially for IT, SAP Basis and technology audience.

3 Disclaimer This presentation outlines our general product direction and should not be relied on in making a purchase decision. This presentation is not subject to your license agreement or any other agreement with SAP. SAP has no obligation to pursue any course of business outlined in this presentation or to develop or release any functionality mentioned in this presentation. This presentation and SAP's strategy and possible future developments are subject to change and may be changed by SAP at any time for any reason without notice. This document is provided without a warranty of any kind, either express or implied, including but not limited to, the implied warranties of merchantability, fitness for a particular purpose, or non-infringement. SAP assumes no responsibility for errors or omissions in this document, except if such damages were caused by SAP intentionally or grossly negligent SAP AG. All rights reserved. 3

6 GRC 10.0 Landscape Synopsis Front End Client Adobe Flash Player Web Browser SAP GUI 7.10 CRA* http SAP NW Portal 7.02 GRC Portal Content Recommended for GTS/SPL SAP NetWeaver 7.02 Search/Classification GRC Search Required for GTS SAP NW Java 7.02 Adobe Document Services Required for Nota Fiscal E. SAP NetWeaver PI Nota Fiscal Content Identity Management Solutions (SAP or Non-SAP) web services http DIAG AC, PC & RM (Software Component: GRCFND_A) GTS (Software Component: SLL-LEG) Nota Fiscal Eletronica (Software Component: SLL-NFE) Content Lifecycle Management (CLM) SAP NetWeaver AS ABAP 7.02 SAP GRC Suite 10.0 Adapter SAP NW BW 7.02 BI Content 7.06 GRC BI Content SAP ERP (4.6C 7.1) NW Function Modules (Plug-in: GRCPINW) HR Function Modules PC Automated Cntrls (Plug-in: GRCPIERP) GTS Plug-in (Plug-in: SLL-PI) Non-SAP Business Applications *Crystal 2011 Reports SAP AG. All Adapter rights reserved. and Active Component Framework needed for viewing GRC Crystal Reports 6

7 Access Control 10.0 Landscape Synopsis Front End Client Adobe Flash Player Web Browser SAP GUI 7.10 CRA* http SAP NW Portal 7.02 GRC Portal Content http DIAG AC, PC & RM (Software Component: GRCFND_A) SAP NW BW 7.02 BI Content 7.06 GRC BI Content SAP NW Java 7.02 Adobe Document Services Content Lifecycle Management (CLM) SAP ERP (4.6C 7.1) NW Function Modules (Plug-in: GRCPINW) HR Function Modules PC Automated Ctrls (Plug-in: GRCPIERP) Identity Management Solutions (SAP or Non-SAP) web services SAP NetWeaver AS ABAP 7.02 SAP GRC Suite 10.0 Adapter Non-SAP Business Applications *Crystal 2011 Reports SAP AG. All Adapter rights reserved. and Active Component Framework needed for viewing GRC Crystal Reports 7

8 Process Control 10.0 Landscape Synopsis Front End Client Adobe Flash Player Web Browser SAP GUI 7.10 CRA* http SAP NW Portal 7.02 GRC Portal Content SAP NetWeaver 7.02 Search/Classification GRC Search http DIAG AC, PC & RM (Software Component: GRCFND_A) SAP NW BW 7.02 BI Content 7.06 GRC BI Content SAP NW Java 7.02 Adobe Document Services Content Lifecycle Management (CLM) SAP ERP (4.6C 7.1) HR Function Modules PC Automated Ctrls (Plug-in: GRCPIERP) SAP NetWeaver AS ABAP 7.02 SAP GRC Suite 10.0 Adapter Non-SAP Business Applications * Crystal 2011 Reports SAP AG. All Adapter rights reserved. and Active Component Framework needed for viewing GRC Crystal Reports 8

9 Risk Management 10.0 Landscape Synopsis Front End Client Adobe Flash Player Web Browser SAP GUI 7.10 CRA* http SAP NW Portal 7.02 GRC Portal Content http DIAG SAP NetWeaver 7.02 Search/Classification GRC Search AC, PC & RM (Software Component: GRCFND_A) SAP NW BW 7.02 BI Content 7.06 GRC BI Content recommended for offline RM surveys SAP NW Java 7.02 Adobe Document Services Content Lifecycle Management (CLM) SAP ERP (4.6C 7.1) SAP NetWeaver AS ABAP 7.02 SAP GRC Suite 10.0 web services Non-SAP Business Applications * Crystal 2011 Reports SAP AG. All Adapter rights reserved. and Active Component Framework needed for viewing GRC Crystal Reports 9

10 Global Trade Services 10.0 Synopsis Front End Client Adobe Flash Player Web Browser SAP GUI 7.10 CRA* http SAP NW Portal 7.02 GRC Portal Content recommended for GTS/SPL SAP NetWeaver 7.02 Search/Classification GRC Search http DIAG GTS (Software Component: SLL-LEG) SAP NW BW 7.02 BI Content 7.06 GRC BI Content required for GTS SAP NW Java 7.02 Adobe Document Services Content Lifecycle Management (CLM) SAP ERP (4.6C 7.1) GTS Plug-in (Plug-in: SLL-PI) SAP NetWeaver AS ABAP 7.02 SAP GRC Suite 10.0 & web services Non-SAP Logistics Systems * Crystal 2011 Reports SAP AG. All Adapter rights reserved. and Active Component Framework needed for viewing GRC Crystal Reports 10

11 Electronic Invoicing for Brazil (Nota Fiscal Eletronica) 10.0 Synopsis Front End Client Adobe Flash Player Web Browser SAP GUI 7.10 CRA* http SAP NW Portal 7.02 GRC Portal Content http DIAG SAP NW BW 7.02 BI Content 7.06 GRC BI Content Required for Nota Fiscal Eletronica Nota Fiscal Eletronica (Software Component: SLL-NFE) SAP ERP (4.6C 7.1) SAP NetWeaver PI Nota Fiscal Content Content Lifecycle Management (CLM) SAP NetWeaver AS ABAP 7.02 SAP GRC Suite 10.0 Non-SAP Logistics Systems *Crystal 2011 Reports SAP AG. All Adapter rights reserved. and Active Component Framework needed for viewing GRC Crystal Reports 11

12 GRC Suite The GRC 10.0 suite runs on AS ABAP 7.02 SP6 or higher AC, PC & RM (Software Component: GRCFND_A) GTS (Software Component: SLL-LEG) Nota Fiscal Eletronica (Software Component: SLL-NFE) Content Lifecycle Management (CLM) SAP NetWeaver AS ABAP 7.02 SAP BusinessObjects GRC 10.0 Suite Access Control, Process Control and Risk Management are contained in one ABAP add-on GRCFND_A Global Trade Services resides in a separate add-on SLL- LEG So does Nota Fiscal Eletronica have its own add-on SLL- NFE The Content Lifecycle Management (CLM) contains functions for transporting GRC business data e.g. AC Rules or PC Controls CLM has the same (version) requirements as the GRC 10.0 suite and is installed during the GRC installation (CLM can be disabled if not required) GRC configuration/customizing is transported using the standard ABAP transport system 2011 SAP AG. All rights reserved. 12

13 Front End Front End Client Adobe Flash Player SAP GUI 7.10 Web Browser CRA The front-end needs a web browser or (ly) a client installation of the NetWeaver Business Client 3.0 (NWBC) The web browser can be used to access the embedded NWBC or GRC via the NetWeaver Portal The Adobe flash player 10 is used for displaying dashboards e.g. RM heat map SAPGUI 7.10 PL 15 or higher is required for administration or customizing tasks note that SAPGUI 7.20 is recommended due to the end-of-maintenance of SAPGUI 7.10 The Crystal Reports Adapter (CRA) is required for viewing (GRC) Crystal Reports For version specifics (regarding Browser etc.) please refer to the PAM: SAP AG. All rights reserved. 13

14 Portal SAP NW Portal 7.02 GRC Portal Content The NetWeaver Portal 7.02 can be used ly The GRC Portal Content contains the GRC Portal UI elements to access the GRC suite The Portal s AS Java can contain an Adobe Document Services instance, in effect Portal and ADS may be shared on one AS Java instance 2011 SAP AG. All rights reserved. 14

15 ERP and Non-SAP Business Applications SAP ERP (4.6C 7.1) NW Function Modules (Plug-in: GRCPINW) HR Function Modules PC Automated Ctrls (Plug-in: GRCPIERP) GTS Plug-in (Plug-in: SLL-PI) Non-SAP Business Applications The GRC solutions can communicate with SAP ERP and non-sap business applications via plug-ins NW Function Modules hold the AC functions for ERP systems without HR (former non-hr RTA) PC relevant features are contained in the plug-in GRCPIERP, for example, for running automated controls and the HR relevant functions for AC (former HR RTA) GTS functions are part of the SLL-PI plug-in, for example, for GTS integration into the Logistics, HR, FI/CO and/or HCM processes in SAP ERP Non-SAP ERP systems can also be connected via adapters from an SAP Partner company 2011 SAP AG. All rights reserved. 15

16 BI Content SAP NetWeaver BW GRC BI Content NetWeaver BW can be used for reporting via the GRC BI Content The GRC BI Content is part of BI Content 7.06 NetWeaver BW 7.02 is used for the GRC BI Content 2011 SAP AG. All rights reserved. 16

17 NetWeaver PI Required for Nota Fiscal E. SAP NetWeaver PI Nota Fiscal Content NetWeaver PI is required for Nota Fiscal Eletronica for exchanging data with authorities in Brazil PI 7.00 SP14 or any higher version is used for NFe 10.0 like for previous NFe releases, so you do not need to upgrade your PI to use NFe SAP AG. All rights reserved. 17

18 Identity Management (IdM) Identity Management Solutions (SAP or Non-SAP) AC can be integrated bi-directionally to IdM solutions for provisioning and risk analysis NetWeaver IdM 7.2 is required for integrating with AC SAP AG. All rights reserved. 18

19 Adobe Document Services SAP NW Java 7.02 Adobe Document Services An instance of Adobe Document Services (ADS) should be accessible from the GRC AS ABAP for generating offline forms (for example, for PC and RM) Although it is technically, it is highly recommended for generating PDF reports Adobe Document Services is recommend for offline RM surveys GTS requires the Adobe Document Services for various forms in Customs Management This ADS can be an existing instance and can also be shared with other applications The Portal s AS Java can contain an Adobe Document Services instance, so Portal and ADS may be shared on one AS Java instance 2011 SAP AG. All rights reserved. 19

20 SAP NetWeaver 7.02 Search & Classification SAP NetWeaver 7.02 Search/Classification GRC Search SAP NetWeaver 7.02 Search & Classification may be used for searching documents attached to objects in some GRC solutions, such as Process Control or Risk Management SAP recommends a TREX instance for the GTS function Sanctioned Party List Screening Access Control does not make use of this search functionality 2011 SAP AG. All rights reserved. 20

23 Installation Prerequisites Back-end For ERP systems that will install Access Control Plug-In the following prerequisites must be met: For SAP ERP system 4.6C, the system must be at SAP_BASIS Support Pack 55 For SAP ERP 4.70 system, the system must be at SAP_BASIS Support Pack 63 For ERP 2004 system, the system must be at SAP_Basis Support Pack 18 For ERP 6.0 system, the system mut be at SAP_BASIS Support Pack 13 For NetWeaver systems that will install Access Control Plug-In the following prerequisites must be met: For SAP Basis 4.6C, the system must be at SAP_BASIS Support Pack 55 For NW 6.20 system, the system must be at SAP_BASIS Support Pack 63 For NW 6.40 system, the system must be at SAP_BASIS Support Pack 18 For NW 7.00 system, the system must be at SAP_BASIS Support Pack 13 For NW 7.01, the system must be at SAP_BASIS Support Pack 02 For NW 7.02, the system must be at SAP_BASIS Support Pack 01 For SAP Basis 710 system, the system must be at SAP_BASIS Support Pack SAP AG. All rights reserved. 23

24 Installation Prerequisites Client The front-end needs a web browser or (ly) a client installation of the NetWeaver Business Client 3.0 ( NWBC - see SAP Note ) Minimum SAPGUI 7.10 PL15 or higher for customizing and administration tasks, however SAPGUI 7.20 is recommended due to end-of-maintenance* of SAPGUI 7.10, see SAP Note Adobe Flash 10 plug-in for GRC dashboards (for the browser and/or NWBC) Crystal Reports Adapter for viewing (GRC) Crystal Reports, see SAP Note Adobe Acrobat Reader 9 for filling offline forms (e.g. in PC) For details please refer to the PAM: * SAP GUI for Windows 7.10 is supported until 12th of April SAP AG. All rights reserved. 24

26 Content of the Installation ZIP The GRC 10.0 Installation ZIP file zip contains the following structure: GRC 10.0 ABAP add-on AC/PC ERP plug-ins (with back-end R/3 or ERP version e.g. 46C or 700 ) AC ERP plug-ins (with back-end R/3 or ERP version e.g. 46C or 700 ) GRC 10.0 Java Components (Portal Content, AC 5.3 Migration Tool and AC Portal plug-in) Content Lifecycle Management ABAP add-on 2011 SAP AG. All rights reserved. 26

27 Access Control Installation Notes Installation Notes SAP Note : Install SAP GRC Access Control 10.0 on SAP NW 7.02 SAP Note : Install SAP GRC Access Control 10.0 Plug-In on SAP BASIS 46C NW SAP Note : Install SAP GRC Access Control 10.0 Plug-In on SAP BASIS 620 NW SAP Note : Install SAP GRC Access Control 10.0 Plug-In on SAP BASIS 640 NW SAP Note : Install SAP GRC Access Control 10.0 Plug-In on SAP BASIS 700 NW SAP Note : Install SAP GRC Access Control 10.0 Plug-In on SAP BASIS 710 NW SAP Note : Install SAP GRC Access Control 10.0 Plug-In on SAP BASIS 46C ERP SAP Note : Install SAP GRC Access Control 10.0 Plug-In on SAP BASIS 620 ERP SAP Note : Install SAP GRC Access Control 10.0 Plug-In on SAP BASIS 640 ERP SAP Note : Install SAP GRC Access Control 10.0 Plug-In on SAP BASIS 700 ERP 2011 SAP AG. All rights reserved. 27

28 Process Control and Risk Management Installation Notes See SAP Notes for implementing SAP BusinessObjects Process Control 10.0: SAP Note Installing SAP GRC Shared Components 10.0 SAP Note Upgrading to SAP GRC Shared Components 10.0 SAP Note Installing SAP POA Shared Business Components SAP Note Installing SAP GRC Portal 10.0 SAP Note Install/Upgrade RTA for GRC Process Control 10.0 SAP Note Upgrading SAP NW with GRC 10.0 Plugin for Process Control SAP Note Release Restrictions for GRC Process Control 10.0 SAP Note for implementing SAP BusinessObjects Risk Management 10.0: SAP Note SAP GRC RM 10.0 Release Restriction Note Note: ERP 4.6C is not supported for Continuous Monitoring (Sub scenario Configurable) in PC 10 (see help.sap.com) 2011 SAP AG. All rights reserved. 28

33 Support via Customer Messages Customer Support If you experience problems with the installation or any other aspect of Access Control 10.0, create a customer message on the SAP Service Marketplace at using the following components: GRC-SAC for Access Control GRC-SPC for Process Control GRC-RM for Risk Management XAP-SBC for Content Lifecycle Management Please prefix the short text of your Access Control customer message with RUAC10, e.g. short text RUAC10: provisioning error For Process Control use RUPC10 and for Risk Management RURM SAP AG. All rights reserved. 33

35 Installation of Main Components of AC/PC/RM 10.0 General Steps: 1. Main installation components: GRCFND_A 2. Download the installation packages from Service Marketplace 3. Install with the transaction SAINT 4. Follow the detailed instructions from the SAP Note Apply the most recent Support Packages 2011 SAP AG. All rights reserved. 35

36 Installation of Plug-In for AC/PC 10.0 on ERP General Steps: 1. Main installation components: GRCPINW GRCPIERP 2. Download the installation packages from SMP 3. Install with the transaction SAINT 4. Follow the detailed instructions from the SAP Notes and Apply the necessary Support Packages if there is any Note: Plug-Ins vary depending on back end ERP system. Attention:The AC 10.0 plug-ins will upgrade any existing RTA from previous AC releases. This means that any AC instance on running 5.X will stop working after the plug-ins are installed SAP AG. All rights reserved. 36

37 Installation of GTS 10.0 General Steps: 1. Main installation component: SLL-LEG 2. Download the installation packages from SMP 3. Install with the transaction SAINT 4. Follow the detailed instructions from the SAP Note Apply the most recent Support Packages 2011 SAP AG. All rights reserved. 37

38 Installation of Plug-In for GTS 10.0 General Steps: 1. Two main installation components: SLL_PI 2. Download the installation packages from SMP 3. Install with the transaction SAINT 4. Follow the detailed instructions from the SAP Note Apply the most recent Support Packages 2011 SAP AG. All rights reserved. 38

39 Installation of NFe 10.0 General Steps: 1. Main installation components: SLL-NFE 2. Download the installation packages from SMP 3. Install with the transaction SAINT 4. Follow the detailed instructions from install guide 5. Apply the most recent Support Packages 2011 SAP AG. All rights reserved. 39

40 Installation of POA Shared Business Components / Content Lifecycle Management (1) General Steps: 1. Main installation components: GRFD_STRUCTURE 2. Download the installation packages from SMP 3. Install with the transaction SAINT 4. Follow the detailed instructions in the GRC 10.0 install guide (Chapter 10) 5. Apply the necessary Support Packages if there is any See also note on next slide! 2011 SAP AG. All rights reserved. 40

41 Installation of POA Shared Business Components / Content Lifecycle Management (2) Notes: CLM is not supported in AC only installations for AC 10.0 SP3 and earlier SPs CLM works with AC 10.0 SP4 or higher PC 10.0 SP3 or higher RM 10.0 SP1 or higher GTS 10.0 SP1 or higher Please also watch out for SAP Note to not install CLM SP1 and SP2 in one queue! 2011 SAP AG. All rights reserved. 41

42 2011 SAP AG. All rights reserved No part of this publication may be reproduced or transmitted in any form or for any purpose without the express permission of SAP AG. The information contained herein may be changed without prior notice. Some software products marketed by SAP AG and its distributors contain proprietary software components of other software vendors. Microsoft, Windows, Excel, Outlook, and PowerPoint are registered trademarks of Microsoft Corporation. IBM, DB2, DB2 Universal Database, System i, System i5, System p, System p5, System x, System z, System z10, System z9, z10, z9, iseries, pseries, xseries, zseries, eserver, z/vm, z/os, i5/os, S/390, OS/390, OS/400, AS/400, S/390 Parallel Enterprise Server, PowerVM, Power Architecture, POWER6+, POWER6, POWER5+, POWER5, POWER, OpenPower, PowerPC, BatchPipes, BladeCenter, System Storage, GPFS, HACMP, RETAIN, DB2 Connect, RACF, Redbooks, OS/2, Parallel Sysplex, MVS/ESA, AIX, Intelligent Miner, WebSphere, Netfinity, Tivoli and Informix are trademarks or registered trademarks of IBM Corporation. Linux is the registered trademark of Linus Torvalds in the U.S. and other countries. Adobe, the Adobe logo, Acrobat, PostScript, and Reader are either trademarks or registered trademarks of Adobe Systems Incorporated in the United States and/or other countries. Oracle is a registered trademark of Oracle Corporation. UNIX, X/Open, OSF/1, and Motif are registered trademarks of the Open Group. Citrix, ICA, Program Neighborhood, MetaFrame, WinFrame, VideoFrame, and MultiWin are trademarks or registered trademarks of Citrix Systems, Inc. HTML, XML, XHTML and W3C are trademarks or registered trademarks of W3C, World Wide Web Consortium, Massachusetts Institute of Technology. Java is a registered trademark of Sun Microsystems, Inc. JavaScript is a registered trademark of Sun Microsystems, Inc., used under license for technology invented and implemented by Netscape. SAP, R/3, SAP NetWeaver, Duet, PartnerEdge, ByDesign, SAP BusinessObjects Explorer, StreamWork, and other SAP products and services mentioned herein as well as their respective logos are trademarks or registered trademarks of SAP AG in Germany and other countries. Business Objects and the Business Objects logo, BusinessObjects, Crystal Reports, Crystal Decisions, Web Intelligence, Xcelsius, and other Business Objects products and services mentioned herein as well as their respective logos are trademarks or registered trademarks of Business Objects Software Ltd. Business Objects is an SAP company. Sybase and Adaptive Server, ianywhere, Sybase 365, SQL Anywhere, and other Sybase products and services mentioned herein as well as their respective logos are trademarks or registered trademarks of Sybase, Inc. Sybase is an SAP company. All other product and service names mentioned are the trademarks of their respective companies. Data contained in this document serves informational purposes only. National product specifications may vary. The information in this document is proprietary to SAP. No part of this document may be reproduced, copied, or transmitted in any form or for any purpose without the express prior written permission of SAP AG. This document is a preliminary version and not subject to your license agreement or any other agreement with SAP. This document contains only intended strategies, developments, and functionalities of the SAP product and is not intended to be binding upon SAP to any particular course of business, product strategy, and/or development. Please note that this document is subject to change and may be changed by SAP at any time without notice. SAP assumes no responsibility for errors or omissions in this document. SAP does not warrant the accuracy or completeness of the information, text, graphics, links, or other items contained within this material. This document is provided without a warranty of any kind, either express or implied, including but not limited to the implied warranties of merchantability, fitness for a particular purpose, or non-infringement. SAP shall have no liability for damages of any kind including without limitation direct, special, indirect, or consequential damages that may result from the use of these materials. This limitation shall not apply in cases of intent or gross negligence. The statutory liability for personal injury and defective products is not affected. SAP has no control over the information that you may access through the use of hot links contained in these materials and does not endorse your use of third-party Web pages nor provide any warranty whatsoever relating to third-party Web pages SAP AG. All rights reserved. 42