1. PURPOSE
The purpose of this document is to define clear steps required to implement GRC on HANA plug in to integrate GRC 10.1 with HANALIVE DB for user provisioning.
2. SCOPE
This scope applies for Basis team who support SAP GRC on HANA configuration after will go live. This procedure applied for pre requisites, installation and post installation configuration of complete SAP GRC HANA “plug in” setup.
This document does not cover security setup that required for User provisioning on HANALIVE through SAP GRC system
3. Component details
Need at least GRC 10.1 with SAP NW 7.4 system to integrate this with HANA
SAP GRC ACCESS CONTROL 11 sap.com SAP ACCESS CONTROL 10.1
SAP NETWEAVER 7.4 sap.com SAP NET WEAVER 7.4
HANACLIENT SPS 8 Rev 82 Patch level 0
HANALIVE DB SPS8 Rev 82 Patch level 0
HCO_GRC_PI SP06 Patch level 0 (GRC Plugin)
4. Install SAP HANA CLIENT on GRC source system
Download required HANA client software compatible with OS where GRC installed
Software name -> IMDB_CLIENT100_82_0-10009663.SAR
Need SUDO or root user into source GRC system
Extract the HANA Client 82 version package in /software_repo/HANA_CLIENT directory
Check the extracting files
Create directory hdbclient under /user/sap/<SID> file system
Run hdbinst to install HANA client
Install the HANA Client with hdbinst command from ROOT user
Check the install files in /usr/sap/<SID>/hdbclient location
5. Set the PATH & LD_LIBRARY_PATH variables in sapenv.sh & sapenv.csh file
Check the ENV from <sid>adm user by opening a new session
Note – Take restart / bounce of SAP GRC application
6. Connectivity test from GRC to HANALIVE DB
A. Check the GRC system connectivity from hdbsql prompt
B. Check connection from GRC application level
Create connection user GRC_DBCO_PI in HANALIVE DB with below privileges (for connection test – you can use any existing user e.g. – SYSTEM)
Later you can create this user with below roles (this role will come after plugin deployment in HANALIVE DB) for permanent connection
Create DB connection through DBCO transaction code from GRC as below
7. Deploy D e l i v e r y U n i t with Content for the SAP HANA plug-in for GRC integration with HANA
- Start HANA Studio and Open Modeler perspective.
- Add System (where HCO_GRC_PI will be deployed) in the HANA Studio by providing
- Host Name, Instance Number, Description, HANA User ID and Password.
- Note: Use SYSTEM or Any HANA User with proper authorizations as User ID to connect to the HANA System where HCO_GRC_PI will be deployed. Mandatory, No exceptions.
- After System Registration is completed and Connection verified, Use "Select System" button in the Modeler perspective to select a System you just registered in the previous step.
- In the same Modeler Perspective Click "Import" link located under "Content" label and in the
- Open dialog select "Delivery Unit" under SAP HANA Content and Click "Next" button.
- In the opened window Select file location as "Client" and use "Browse" button to navigate to the location where you save file with SAP HANA plug-in you downloaded from SMP.
- Note: You may need to use SAPCAR to extract D e l i v e r y U n i t file with extension .T G Z from the archive you downloaded from SMP.
- When .TGZ file is selected you will see D e l i v e r y U n i t details in the Object import simulation.
- Click "Finish" button to complete D e l i v e r y U n i t deployment and Object Activation process.
- Verify deployment by navigating in the "Modeler" perspective to "SAP HANA Systems" where you registered HANA Server.
- Expend from Content node, following packages sap --> grc --> pi --> a c and under ac package you should be able to see two packages ara with 16 sql objects and arq with 11 sql objects and db with 2 objects and roles with 1 object.
- In this point D e l i v e r y U n i t was deployed successfully.
Now go to HANA Studio and login in HLR system with modeler perspective: Open Modeler perspective and select Delivery unit