Hi All,
I need some clarifications on:
1. Number of Users Analyzed
in Management Report in ARA.
Anybody who looks at this report and finds "Number of Users Analyzed" (of course for a specific period), will interpret as: "Okay, xxx number of users have been analyzed during a specific period for risk analysis". Until now it is good. But just hold on, SAP Note#1179717 says:
Under Management Report Heading (Excerpt from the note):
- Management Reports
Running this piece of the job is what ultimately updates the numbers you see on the Management Report. A couple of things to note:
- Again, how this works is dependent on the configuration option "Enable Offline Risk Analysis".
- If this configuration option is set to YES, when you run Management Report, it summarizes the detail data from table virsa_cc_prmvl, puts it into the Intermediate Table and then finally summarizes it in the Management Report tables.
- If the configuration option is set to NO, when you run this report, it is taking the data from the intermediate table and summarizing into the Management Report level.
- Regardless of configuration, the management report numbers are dependent on the last Batch Risk Analysis performed.
Other frequently asked questions about Management Reports:
- You can run Management reports multiple times every month. However, what will show on the report for that month is only the data from the LAST time you ran management reports. So if you run multiple times during a month, it is overwriting the summary data with the most recent data.
- At the end of the month, RAR will "archive" the management report total information into the Management Report historical table. This is what will allow you to view a comparison across months.
- Please note that this data is only the Summary data. The detailed data that is kept in the Intermediate and Detail tables are only available for the current month.
Next, we'll explain at a lower level how each field in the Management report is calculated:
- Number of Users Analyzed - This is the total number of UNIQUE user ID's that have been synchronized into RAR. The following is key to understand:
- This number is the total number of users synchronized. Prior to 5.3 SP4, this number is NOT changed to reflect any kind of configuration that is set. For example, if you set configuration option "Exclude Locked Users" to YES, these locked users are still included in the Number of users Analyzed number. After 5.3 SP4 as outlined in sap note 1168120, this configuration option does impact the number of users analyzed.
- The configuration options impact only the detailed information of the number of conflicts actually found. Therefore, if you exclude locked users, these users will not be included in the batch risk analysis itself so their conflicts would not be counted in the Total Number of Violations section.
- Each user ID is counted once, even if it exists on multiple system. So if you have ID JANEDOE on 5 systems, it is only reflected as "1" in the Number of Users Analyzed.
Here it is a bit confusing! Now after reading above note, I am forced to interpret "Number of Users Analyzed" = Number of Users synchronized.
Can anybody please help me understand this?
If for example, I have 100 users and for the first time I synchronized "Full" and run "FULL" batch risk analysis. Ideally, this time "Number of Users Analyzed" must show 100 (assuming that there are not expired and locked users). This number would consider dialog and non-dialog users.
Next, lets say 10 users are modified in the back end system. This time "Incremental" sync and batch risk analysis are run (again lets say these users are not locked and expired and this number constitutes dialog and non-dialog users).
What should "Number of users Analyzed" show?
Please advise.
Regards,
Faisal