Page tree
Skip to end of metadata
Go to start of metadata


How to configure HR Triggers in GRC Access Control 10.0.

Reference to SAP Note 1591291


HR Triggers rules can configured in the GRC 10.0, either via BRF+ rules or via complex Procedure Call via Function Module.

This document contains the step-by-step approach to build the BRF+ rules for configuring the HR Trigger rules to be used to enable the automatic request creation into the GRC system, whenever there is an activity carried out in the connected HR system.

Steps to configure the HR Triggers:

1. On GRC 10.0 system open transaction SPRO and go to node Governance, Risk and Compliance =>Access Control =>Maintain AC Applications and BRFplus Function Mapping.
2. Copy the pre-delivered BRFplus rule, mentioned against Appl Id 'HR Triggers'.

3. On GRC 10.0 system open transaction brfplus or fdt_workbench. In BRF+ menu choose Workbench =>Open Object and paste the ID copied in step 2.

Creating BRF Rule with conditions

4.   Go to ‘Assigned Rule sets’ tab and click on ‘Create Rule set’ button.

5.   Enter the details as shown below and click on ‘Create and Navigate to Object’ button.

6.   Save the Object. Press Yes, when the pop-up "Do you want to Save before exit" comes.

7.   Enable the Ruleset by clicking on ‘Enable Ruleset’ button as shown below.

8.   Assign the priority to the ruleset as shown below.

9.   Enter the priority and click on ‘OK’ button.

10. Save the Object.

11. Create the Rule as shown below. Right click on the HR_Trigger application and go to Create ->Rule.

12. Enter the details as shown below and click on ‘Create And Navigate To Object’ button.

13. Save the Rule.

14. Now Insert the Rule in the Ruleset.

15. Select the rule RULE_1.

16. Save the Ruleset.

17. Go to Rule_1 and create the Process Expression as shown below.

18. Select the Type as ‘Loop’.

19. Enter the details as shown below and click on ‘Create And Navigate To Object’ button.

20. Click on Loop_1 as shown below.

21. Save the object Rule_1.

22. Select ‘Perform Action’ value in Result Type as shown below.

23. Select Loop Mode as ‘For Each Entry in…’ as shown below.

24. Select the table by clicking on ‘Select…’ as shown below.

25. Select the ‘HR_TRIGGER_TABLE”.

26. Save the loop ‘Loop_1’.

27. Now create one more rule as shown below.

28. Enter the details as shown below and click on ‘Create And Navigate To Object’ button.

29. Save the rule ‘Rule_2’.

30. Now add the Rule_2 as shown below.

31. Click on ‘Search’ button.

32. select the ‘RULE_2’ object.

33. Save the loop ‘Loop_1’.

Creating Decision Table for conditions

34. Create the Decision Table as shown below. 

35. Enter the details as shown below and click on ‘Create And Navigate To Object’ button.

36. Click on ‘Insert Column -> From Context Data Objects’ as shown below.

37. Select the objects in the table and click on ‘Select’ button. 

38. The selected objects are displayed in the table as shown below. Now click on ‘Insert Column from Data Object’ button in the Result Columns table as shown below.

39. Click on ‘Search’ button.

40. Select the object and click on ‘Select’ button.

41. The selected objects are displayed in the table. Now click on ‘OK’ button.

42. Now we can find the columns in the table.

43. Click on ‘Insert New Row’ button to add the contents to the decision table.

44. Enter the value for the Connecter column as shown below.

45. Enter the connecter value and click on ‘OK’ button.

46. In the same way add then values to the necessary columns as shown below.



47. Select the row and click on ‘Copy Row’ button.

48. Now click on ‘Insert Copied Row’ button as shown below.



49. Save the Decision table.

50. Activate the Decision table.

51. Click on ‘Activate’ button. 

52. Add a Process Expression as shown below.

53. Select the Object ‘DECISION_TABLE’.


54. Now assign the value to the ‘Action ID’ Result data table as shown below.


55. Select ‘Insert’ as shown below.

56. Select the Context parameter as shown below.

57. Select ‘ACTION_ID’ object.


58. Save and activate the rule ‘Rule_2’.

59. Click on ‘Activate’ button as shown below.

60. Now activate the loop ‘Loop_1’.

61. Click on ‘Activate’ button as shown below.

62. Now activate the rule ‘Rule_1’.

63. Click on ‘Activate’ button as shown below.

64. Now activate the ruleset ‘Ruleset_1’.

65. Click on ‘Activate’ button as shown below.

 A. Decision table Conditions for New Hire, Terminitation and Position Change

Related Content:

KBA 1641138 , SAP Note 1602301, SAP Note 1591291


  1. Good day,
    How to deakcheck HR triggers in GRC Access Control 10.0?
    Deactivate only this setting or and others.
    Thank you for every answer.

    1. Hi Monika, I did not understand your question, can you explain in more details?

  2. Hi Luciana,

    we have an old SM 7.1 with installed Access Control GRCGND_A V100 connected to ERP systems. In 2017, we installed the new SM 7.2 and there we will no longer use Access Control. We want to cancel the old SM 7.1, but so HR has problem when changing staff master data - GRAC_HR_TRIGGER_EVENT_RECIEVER function module.
    I deleted the HR triggers configuration from our HR system but it didn't help. After switching off SM 7.1 in ERP system when changing in txt PA30 or PA40 reported dump error : CALL_FUNCTION_NOT_FOUND
    Function module "GRAC_HR_TRIGGER_EVENT_RECEIVER" not found.

    How can we disable Access Control deactivate SM 7.1 and have no links to ERP systems.

    Thank you for every answer.

    1. Hi Monika,

      If you want to completely uninstall the HR Triggers for Access Control, then you need to uninstall the add-on called GRCPIERP.

      2456300 - Uninstalling GRCPIERP - SAP Access Control, SAP Process Control

      Hope that helps!


  3. Hi Luciana,
    Thank you for the advice, but I still have a question, we have the GRCPIERP addon but also GRCPINW installed in the ERP system. Uninstallation depends on the order in which we uninstall it or it doesn't matter.
    I hope that there is no risk of data loss from the HR module after uninstallation.
    Thank you for every answer.