Dear Experts,
We have scheduled Email Reminders to be sent out for the process ID Access Request Approval Workflow using the program GRFNMW_BATCH_EMAIL_REMINDER. This is all working well.
But, now we do not want to send email reminders at one of the stages in the workflow.
Is this possible? If so, how can this be achieved.
We are on SAP GRC 10.1 SP05
Regards,
Yvuaraj
Hi gurus,
I am working with RM and I am analyzing the possibilities of using influences risks for the different clients. Could you please provide me with examples, real case of usage of them?
Thank you very much,
Kind regards,
We have EAM FireFighter logs configured to workflow to EAM controllers after use and although some successfully show the details of the activity (Transaction, Program, Terminal), there are times when it will occasionally show multiple rows of blank spaces where there are no Transactions and Programs, but still list the Terminal. Sometimes the blanks are right after the transaction activity. I also notice that for the blanks the date/time stamps are the same. Does this mean that the fire fighter user left the session idle?? Thanks
- D
Hello community,
The problem is that function module is in the GRCPIERP component...GRC should be ask for
Someone has the same problem? we do no want to install GRCPIERP in solman, grc, erp, gateway for this error...
Kind regards,
Claudio
With pleasure. You may wish to mark this thread as answered.
Hi Claudio,
Which MSMP workflow process did you activate? SAP_GRAC_ACCESS_REQUEST (Access Request Approval Workflow) or SAP_GRAC_ACCESS_REQUEST_HR (Access Request Approval Workflow for HR OM Objects) ?
If you are not using SAP HR you need to configure and activate the first one. If this is the case, then I agree that it would be confusing as to why the HR related function module is called.
Hi Mustafa,
GRACREQPROVLOG table will have UPDATED_ON field which will give the date on which request is approved and provisioned.
Regards,
Madhu.
We have a manager whose username changed. We've verified the username
change in the LDAP. We've also verified the manager's direct reports have
the new username as their manager. We are trying to determine where GRC
is pulling the old manager information from. Normally once the LDAP is
updated, the GRC request pulls the correct manager information specified
there.
Hi,
I used the SAP_GRAC_ACCESS_REQUEST process. The second one, is for assign objects in HR. Example, Assigns role to position, etc.
This is very strange. With the 10.0 I did not have this problem
Thanks,
Hi,
Have you ensured the FFID has been set up as a Service user type? Also ensure the user exit has been deployed om the GRC system itself.
Hi Latonya,
Has the User ID for the same person changed or has the actual manager changed?
IF you are convinced LDAP data is up to date, then you may have a case of the managers details being pulled in from another data source I.e. One of the connected SAP systems.
it is important to ensure the systems are listed in the user data source settings in the order you wish GRC to search it.
Hi Latonya,
1. manager data is pulled (online) at the moment user (for whom access request is created) is selected on access request. Further down the road - on access approval path - manager is not being updated.
2. LDAP can be setup to have off-line repository. Data is being synchronized as per your sync jobs.
Filip
hi,
To ensure a notification is sent to the approver who the forwarded request has gone to, you require to set up a Current_approver within the stage itself.
As for approval of risk based items, you can set up a SoD detour within one of your initial stages and have the risk violating items sent for additional approval in another stage/path.
There are many examples shared on this forum and some good article and blogs that may help you design a optimal workflow.
Hi experts
Please could you assist me with this issue. The customer is testing provisioning composite roles through GRC AC 10.0 and is getting the below
error. The design is that PRIVs are added in IdM 7.2 to identities and provisioning occurs from GRC AC10.0.
All GRC AC access requests are set to be auto approved.
Please could you let me know what "Illegal destination type 'H'" in the below screenshot means and how it can be fixed to allow auto provisioning of composite roles from GRC AC. What config changes are required (if any) for this?
Please advise.
Thanks
Ranjit
Hello Gurus
We have one requirement where we need to perform Risk Analysis on a legacy system in Access Control 10.1.There is no RTA available for the Legacy system that my client is using.I would like to understand if it is possible to create our own RTA without taking help from Greenlight Technologies?I was looking on some documentation regarding the existing RTA to understand how these RTAs are built and steps involved to come up with our own RTA but unfortunately could not find anything.Please let me know if anyone has faced this kind of scenario and how to build our own RTA without taking help from Greenlight technologies.I would also like to know if there is any other method than using RTA and Offline Risk analysis to perform real time Risk Analysis for Legacy Systems?I would really appreciate you guys help on this.
Thanks
Hi Ranjit,
What is your target system?
Is it IDM system or different system?
Check you RFC Connection and Connection Type ... if it is working properly as this error is related to connection issue.
Regards,
Madhu.
Hi Madhu
The target is an Abap system. Provisioning single roles works perfectly to the same system. Is there any config settings required for provisioning composite roles?
Thanks
Ranjit
Hi Rodrigo,
Email notifications of GRC requests and Risk Analysis are completely separate concepts.
Yes, you can configure FORWARD email notifications in GRC even though you are not using risk analysis in your system.
Notification Settings required at Stage level to enable forward notifications:
To understand more about email notifications please check below document
AC 10.0 - How to Customize Notification Templates for AC Workflow
Let us know if you face any issue.
Regards,
Madhu.
Hi Ranjit,
Can you please share your RFC connector screenshot?
ABAP system connection type should be 3
Regards,
Madhu.
Dear Experts,
I have submitted this issue in the ideas.sap.com place, i request if all of you login and vote up for the idea this will be helpful for development team to develop it in next release of GRC
please go to the below link and vote up
https://ideas.sap.com/ct/ct_list.bix?c=4F27C74D-5330-4569-8199-D69072C0D4AE
Thanks and Regards
Mujtaba Siddiqui