The collector for authorization values for a specific organization level is /DVD/MON_GRC_CL_COL_AUTH_OC.
It collects KPIs about background jobs. The KPIs are defined through the KPI definition and the Input table /DVD/MON_GRCOCI1.
The Input table /DVD/MON_GRCOCI1 sets an extended KPI definition with the following fields:
| KPI | KPI name |
| KPI RULE NUM | KPI rule number |
| ROLE | Role name |
| ORG. LEVEL | Organizational levels |
| AUTH VAL | Authorization value |
| AUTH VAL | Authorization value |
| NOT MATCH | Regular expression which doesn't match |
| EXCLUDE | Excluding KPI rule |
| ADD TO DETAIL | Add relevant records to details |
| ACTIVE | Is KPI rule active? |
Change by | Last change by user [automatically filled] |
Change at | Last change date [automatically filled] |
The collector provides also a detailed output in the Detail table Wrong auth. for org.level - /DVD/MON_GRCOCD1:
| KPI | KPI name |
| ROLE | Role name |
| ORG. LEVEL | Organizational levels |
| AUTH VAL | Authorization value |
| AUTH VAL | Authorization value |
The following KPIs are provided in the CrystalBridge® Monitoring delivery with this collector:
| KPI name | Description | Unit |
|---|---|---|
GRC_AOC_BC_ALL | Number of SAP_BC roles having full auth. on org. level | Count |
| GRC_AOC_SEC_ALL | Number of SAP_SEC_ roles having full auth. on org. level | Count |
| GRC_AOC_ZCOM_ALL | Number of X,Y,Z* roles having full auth. on company code | Count |
All standard AUTH OC KPIs have the prefix GRC_AOC_*