Program Name: Access Control Monitoring tool

Team: Manisha Tejashri Arun

In charge: Sanjay Pawar

Requirement: To develop tool which will show the manual activities in Production server for USER MANAGEMENT

About Program

1. The purpose of this development is to monitor the server wise Manual activities done in Production Server.
2. This tool will exclude Background User ID which are used today to perform activity i.e. GRCUSER, HRBATCH etc.
3. Data will be stored in our Output Custom Table which will be regularly updated by our Daily/Weekly/Monthly SYNC JOB.
4. On daily Basis as per Output Received in Custom Table an Email Notification to GRC AUTHORITY will also get trigger.
5. We also schedule a WEEKLY REPO SYNC Job in order to redundant the dependency on Daily Sync Job this will also
trigger an Email for any new line item found.
6. Valid EVIDENCES will be updated against open line item
7. Tool Administrator responsibility is to validate the evidence which are uploaded and approve it.
8. After the Open line is approved it will saved in our same CUSTOM table with Flag “X”. This will helps us to segregate the
line item.
9. Approved line item will not be displayed in OUTPUT.
Input Screen

Output Screen
Technical DETAILS

System

If program is executed without any input then all PRDUCTION server will be selected (For which
Variant is created).

Fetch list of Servers from “ZGRAC_SYSTEMS” where LANDSCAPE = “Production”.

Date

If program run default without any input then System date - 1 range will be selected.

Activities

Output data can be viewed by selecting only required check box which are mentioned in User
Management.

Function Module

Use Standard Function module “SUSR_CHANGE_DOC_USERS”.

Filed “IT_CDUSERNAME” will have below input

 S(Sign)= “E” (Exclude)

 OP(Operation) = “EQ” (Equals to)
 LOW= from existing Custom Table “ZGRAC_SYST_PARAM” with Comment check as
“Access Control Monitoring” the list of user ID maintained under Column
“PARAM_VALUE” should be excluded from output list. High=Blank

 IV_FDATE = System date -1

 IV_TDATE = System date
 IV_FTIME = 00:00:00
 IV_TTIME = 23:59:59
 IV_USER_CRT = X
 IV_USER_DEL = X
 IV_PASS = X
 IV_TYPE = X
 IV_ALOCK_S = X
 IV_ALOCK_D = X
 IV_FLOCK_D = X
 IV_TVAL = X
 IV_GROUP = X
 IV_PROF_ASS = X
Above filed will help us to fetch output for all manual activity with Exclude Background user ID.
Custom Table “ZAC_CHNGDOC”

After calibrating all data will be stored in our CUSTOM TABLE “ZAC_CHNGDOC”
Server User ID User Name Date of Modification Modification Time Modified By Modifier Name Action Old Value Text New Value Text for Value Tcode Evidence Approver ID Approver name Ageing days Proposal Flag Proposed By Date of Proposal Approval Flag Approved by Date of Approval

Email Notification

Output Screen will have a functionality to trigger mail to GRC authority with all output displayed on
Screen.

Evidence

Evidence is received, updated against respective line item in editable Column name as “EVIDENCE”
and click on “PROPOSE EXECTIONAL APPROVAL”.

Updated evidences will be validated and approved by GRC ADMINISTRATOR clicking desired line
item & selecting “APPROVE EXCEPTION” & it will not get displayed in open line item.