SAP BusinessObjects GRC 10.0 is based on Web Dynpro ABAP, and the presentation layer works through SAP NetWeaver Business Client (NWBC). NWBC is SAP’s desktop client using the latest smart client technology. NWBC can host existing user interfaces (UIs), including SAP GUI and Web Dynpro, as well as any other Web-based content.
In Figure 1, My Home, Setup, Access Management, and Reports and Analytics are different work centers or Launchpads predelivered with SAP BusinessObjects Access Control 10.0. Each work center or Launchpad contains different links. Figure 1 shows different links (e.g., Work Inbox, Approver Delegation, My Profile, Request Status, and Access Request). These links are part of the My Home work center.
The SAP Access Control 10.0 Launchpad
GRC administrators can add, remove, or move links on the SAP BusinessObjects Access Control 10.0 Launchpad or work center. I walk you through all the steps that you need to know to complete this process. First, you need to know how to create a new Launchpad.
Step 1. Configure a New Launchpad
Open the Launchpad configuration screen. Execute transaction SPRO and follow IMG menu path Governance, Risk and Compliance > General Settings > Maintain Customer Specific Menus > Configure Launchpad for Menus or execute transaction code LPD_CUST. This activity brings you to the Overview of Launchpads screen (Figure 2).
Data listed in the Overview of Launchpads screen
Table 1 explains what each column in Figure 2 means.
The names listed under the Instance column correspond to the Launchpad or work center names.
The fields under this column contain descriptions of the Launchpads.
Repository means a collection of all the links pertaining to a single application (e.g., Access Control repository or Process Control repository)
You can indicate whether one Launchpad is part of another Launchpad
Change: Click the icon to change the Launchpad.
Display: Click the icon to display the Launchpad.
Delete: Click the icon to delete the Launchpad.
The listings under this column indicate the names of the users who last changed the Launchpads.
The listings under this column show the dates when the last changes to Launchpads were made.
Explanations of column headings in the
Overview of Launchpads screen
To create a copy of an existing Launchpad or work center, double-click an existing work center. For example, if you want to create a work center similar to My Home, double-click GRACHOME (Figure 2). Copy GRACHOME to the new Launchpad by clicking the Launchpad button in Figure 3.
Open the GRACHOME work center to copy its contents
Choose Save as … from the list of options (Figure 4).
Copy GRACHOME to the new Launchpad
Enter values in the fields for Role, Instance, and Description (Figure 5). Adhere to the customer naming convention to show this is a custom object.
Populate fields with values for the new Launchpad
Now you’re ready to open the newly created Launchpad. Click the enter icon (the green check mark) to create the work center. The work center screen (Figure 2) appears again. Select the newly created work center by clicking the Change button for the newly created Launchpad.
You can now add, remove, or move links to this Launchpad by clicking the buttons located at the top of the screen (Figure 6).
The new Launchpad
Remove a link from the My Profile section located under the My Home work center by right-clicking the Access Request Webdynpro link. Select Delete from the list of options (Figure 7).
Delete an existing link
Click the New Folder button and then name the folder (Figure 8).
Enter a name for the new folder
Click the Show Advanced Parameters bar, and in the field named Icon Path, enter a value for an image (Figure 9). This image appears to the left of this folder on the SAP BusinessObjects Access Control screen.
Enter a value for the image path
After you click the save icon, this folder appears in the left navigation menu (Figure 10).
The newly created folder
Now add a link from the SAP BusinessObjects Access Control Repository. You can actually use the predelivered link, but this step enables you to move links to the work center or Launchpad as you prefer. Click the Link to a Repository Application button, located right next to the Copy from the other Launchpad button (Figure 5). Under the Role column in the screen, click the name of a link to a repository application to choose a Launchpad. Double-click the first name listed in Figure 11 (GRCIAREPOS). This name stands for the predelivered SAP BusinessObjects GRC Application Repository.
Add a link from the SAP GRCIAREPOS Repository
In the next screen expand GRC Access Control for links related to SAP BusinessObjects Access Control. Click the expand icon that is located on the left of GRC_AccessControl (Figure 12).
Expand the GRC_AccessControl folder
You now see the expanded view of the GRC_AccessControl folder (Figure 13).
An expanded view of the GRC Access Control Repository and Access Request Creation folder in the ZGRAC_Home work center
Now drag and drop an application link from the SAP BusinessObjects Access Control repository into the new Launchpad. In my example, I drag and drop the Template Based Request link to the Access Request Creation folder of the ZGRACHOME Launchpad Role screen (Figure 14).
Click the save icon to save the custom Launchpad.
Drag and drop the Template Based Request to the new Launchpad
Add static links to a folder by clicking the New Application icon located next to the New Folder button at the top of the screen in Figure 13. I showed earlier how you can add or remove predelivered links to a custom Launchpad. I now show you how to add custom links to the Launchpad. Here I add a custom link (End User Training), which points to www.google.com (Figure 15).
(Note: The link to www.google.com is a random example. Users can add any links to their folders or point to the links that are in the company’s network.)
Add a custom link
The final folder structure looks like the screen shown in Figure 16.
Folder structure for a new Launchpad
Step 2. Create Web Dynpro Components
Execute transaction code SE80 and open the GRAC_UTILITIES package (Figure 17). Expand Web Dynpro.
(Note: Remember to customize objects in the customer package. Do not use the GRAC_UTILITIES package. This is a standard SAP package and it’s a common practice to use a customer package for all the customization.)
The GRAC Utilities Package
Create an FPM (Floor Plan Manager) UIBB (UI Building Block) component. FPM is a Web Dynpro ABAP application that provides a framework for developing new Web Dynpro ABAP application interfaces consistent with SAP UI guidelines. NWBC needs the FPM UIBB component to be able to draw the work center in the UI. Double-click the corresponding existing component (e.g., GRAC_FPM_UIBB_LPD_HOME) as shown in Figure 18.
Predelivered FPM UIBB component
Click the Start Configurator button to open a new browser window. Click the Copy button to copy this UIBB component to a custom UIBB component (Figure 19).
Predelivered component and configuration ID relationship
Click OK to associate to a transport (Figure 20). For any changes users make to standard SAP components, the SAP system asks for a transport request. This request is to make sure that you can move your changes to another system (e.g., quality assurance or production) in the transport path via transports.
Copy predelivered component configuration to the new custom component configuration
Click the Change button to modify properties for the newly created component (ZGRAC_FPM_UIBB_LPD_HOME) as shown in Figure 21.
Modify the properties for the new component
Go to the Component-Defined tab and double-click the Launchpad (Figure 22).
Role and Instance values are displayed on the right
Change the role and instance values to pick up the custom role and instance you created earlier. First choose ZGRACHOME by pressing F4 while in the Role field (Figure 23).
Now choose ZGRAC_HOME by pressing F4 while in the Instance field (Figure 24).
Save the components by clicking the Save button and close the browser window. In the next screen, you see a message indicating that the Launchpad configuration is saved (Figure 25).
Launchpad component configuration is saved
Refresh the tree in transaction SE80, and it displays the newly created component (Figure 26).
The newly created application and component configurations are displayed
Now double-click ZGRAC_FPM_UIBB_LPD_HOME. The next screen appears (Figure 27).
The custom FPM UIBB object
Create FPM CC (configuration component) by following the same steps as you did when creating the UIBB component.
Open an existing component controller such as GRAC_FPM_CC_LPD_HOME to create ZGRAC_FPM_CC_LPD_HOME.
First, double-click GRAC_FPM_CC_LPD_HOME (Figure 28).
The predelivered FPM CC component
Click the Start Configurator button to open a new browser window. Click the Copy button to copy this CC component to a custom component (Figure 29).
Component configuration for GRAC_FPM_CC_LPD_HOME
Click OK to associate to a transport (Figure 30).
Copy a component to the ZGRAC_FPM_CC_LPD_HOME component
In the next screen that appears (Figure 31), click the Change button to modify properties for the newly created component (ZGRAC_FPM_CC_LPD_HOME) as shown in Figure 32.
Saved ZGRAC_FPM_CC_LPD_HOME configuration component
Change view of ZGRAC_FPM_CC_LPD_HOME
Click the Attributes button under the Home section in the right panel (View: LPD_MAIN_WINDOW) as shown in Figure 33.
Attributes for LPD_MAIN_WINDOW
Change the configuration name to ZGRAC_FPM_UIBB_LPD_HOME. Save the component by clicking the Save button located at the top left of the screen (Figure 34). Close the browser window.
Change the configuration name
After you refresh the tree in transaction SE80, the newly created component appears (Figure 35).
The newly created component
Create an application component. Expand the Application Configurations folder and double-click an existing component such as GRAC_FPM_AC_UPD_HOME to create ZGRAC_FPM_AC_UPD_HOME (Figure 36).
Click the Start Configurator button to open a new browser window. Click the Copy button to copy this application component to a new component (Figure 37).
Configuration screen for GRAC_FPM_AC_LPD_HOME
Click the OK button (Figure 38).
Copy GRAC_FPM_AC_LPD_HOME to ZGRAC_FPM_AC_LPD_HOME
Now associate ZGRAC_FPM_AC_LPD_HOME with a transport request (Figure 39).
Associate the change with a transport request
Click the Change button (Figure 40) to modify properties for the newly created component (ZGRAC_FPM_AC_LPD_HOME).
The configuration ID copied to a new component
Change the configuration from GRAC_FPM_CC_LPD_HOME to ZGRAC_FPM_CC_LPD_HOME (Figure 41).
Change the configuration ID to ZGRAC_FPM_AC_LPD_HOME
Click the Save button (Figure 42) and close the browser window.
Save the configuration
Refresh the tree in transaction SE80 to display the newly created component (Figure 43).
The custom application component
Step 3. Create a Role and Assign It to the User
Execute transaction PFCG and copy the predelivered SAP_GRAC_NWBC role to ZGX_GRAC_NWBC1_MY_HOME (Figure 44).
Copy the predelivered role to a new role
Click the Copy All button and then click the Change button. Go to change mode for ZGX_GRAC_NWBC1_MY_HOME role (Figure 45).
Change view for ZGX_GRAC_NWBC1_MY_HOME
Remove unnecessary folders by right-clicking whichever folder you want to remove (E.g. Setup etc.) and selecting Delete file from the list of options (Figure 46). Remove unnecessary links by right-clicking the links you want to remove (e.g., Rule Setup) and selecting the Delete node from the list of options (Figure 47).
Remove unnecessary folders
Remove unnecessary links
The final role with only the Home tab looks like the screen shown in Figure 48.
The role with a Home work center
Assign the role to the user with other necessary roles (Figure 49).
Role assignment to the user
Log in to your GRC server by going to http://<server>:<port>/nwbc/ as the end user. You should be able to see the modified My Home work center (Figure 50).
You removed links from Access Request Creation and added Template based Request under Access Request creation and the End User Training link under the Training section as shown in Figure 16.
Modify My Home work center (notice the Template Based Request link under the Access Request Creation section and the End User Training link under the Training section)
Click End User Training to open the custom link that you added when you created the custom Launchpad (Figure 51).
The custom link