How To Create Connectors in SAP GRC

SAP Governance, Risk, and Compliance (GRC) is a powerful suite of tools that allows companies to manage their risk landscape. GRC includes functionality for access control, process control, and risk management. To effectively use GRC, connections must be established between GRC and the target systems you wish to monitor or manage. This is achieved through connectors.

What is a Connector in SAP GRC?

A connector facilitates the communication between a GRC system and a target system (e.g., SAP ERP, SAP SuccessFactors, a database, etc.). This allows you to pull data from target systems into the GRC system for tasks like risk analysis, compliance checks, role provisioning, and more.

Types of Connectors

SAP provides pre-built connectors for many systems, and there are also options for custom connectors. Here are some common connector types:

• ABAP Connections: These connect to SAP systems using RFC (Remote Function Call) connections.
• HTTP Connections: For web-based systems with an application programming interface (API).
• IDM Connections: Connectors used with SAP Identity Management for user provisioning.
• Database Connections: To connect GRC with different database systems.

Steps for Creating a Connector

Let’s walk through creating an ABAP connector to an SAP ERP system.

1. Access the Configuration:
   • Navigating via Transaction Code: Execute TCODE SM59 or
   • Navigating via SPRO Menu: Go to SPRO > SAP Reference IMG > Governance Risk and Compliance > Common Component Settings > Integration Framework > Create Connectors.
2. Create an RFC Connection (If needed):
   • Click the’ Create’ icon on the ‘Configuration of RFC Connections’ screen.
   • Provide a name for your RFC connection, set the connection type to ‘3’ (for ABAP connections), and supply the target system details (server, instance, etc.).
3. Create a Connector:
   • Click the ‘Create Connectors’ icon on the ‘Create’ screen.
   • Enter a short description and the connector type (e.g., ‘ABAP’).
   • Please provide details such as the technical name, target system, RFC destination (if using one), user ID, and password.
4. Create a Connection Type:
   • Navigate to SPRO > Governance, Risk, and Compliance > Common Components > Integration Framework > Maintain Connectors and Connection Types.
   • Click the ‘New Entries’ button to create a new connection type, giving it an appropriate name and description.
5. Define a Connector Group:
   • Create a descriptive name for your connector group in the ‘Define Connector Groups’ screen.
   • Set the ‘Con—type’ to the connection type you created in step 4.
6. Assign the Connector and Connector Group:
   • Choose the ‘Assign Connector Groups to Group Types’ option.
   • Select your newly created connector group.
   • Add your connector to this group.
7. Maintain Connection Settings:
   • Go to SPRO > Governance, Risk, and Compliance > Common Components > Integration Framework > Maintain Connection Settings.
   • Select your connector and make any required setup adjustments (attributes, parameters, etc.).

Important Considerations

• Ensure proper authorization is given to the user ID used for the connector.
• Network configurations must allow for communication between GRC and target systems.
• Custom connectors might involve development efforts if SAP needs to provide a suitable pre-built connector.
• Refer to the SAP GRC configuration guide for more complex setups and specific connector types.