GRC AC Access Request

[Former Member]

Hello all!

1 - We are implementing GRC AC for a client and this is our first project. Basically the client needs the default workflow to add new roles for a user (Change Account) with only one extra need, add a "Manager Approval". In this case, to concede a role for a user he need 3 approvals, firstly the Manager Approval, if he approves the request, then the "Role Content Approver"  and "Assignment Approver" are requested. In my thoughts, probably we should add a new step for the "Manager Approval" in the workflow.

I´m a little lost. Someone can clarify for me if I can do this trough MSMP, BRF+. Am I thinking right? Any suggestion is really appreciated.

Thanks in advance,

SAP Legend

[Former Member]

"SAP Legend,"

Is your question answered? If so, please close it so that it cannot be further hijacked by other members for their own random questions. This helps the search tool return only pertinent results in the future.

Thanks,

Gretchen

[Former Member]

not not yet, waiting for the correct answer.

[Colleen]

are you and "SAP Legend" the same person on different accounts or working together"? It's a bit confusing. If so, perhaps you could elaborate on what you still require assistance with?

[Former Member]

Hi Colleen Lee,

Thanks for your responses!!! sahil hi isn´t me, definitely not... Maybe he´s just a fish and doesn´t like your new picture, but just maybe. Not sure if a fish could access this forum.

I liked the picture...

Really thanks for your effort answering the questions.

Regards,

The True Sap Legend (is not sahil hi)

[Colleen]

Hi SAP person who is an apparent legend,

You might find it easier to figure this out if you draw a process flow for your scenarios. You are right - MSMP/BRF+ will achieve this for you but by doing a process you can figure out what your initiator rule should be and which paths need which approval steps. From there you can build it up.

Regards

Colleen

[Former Member]

Hi Colleen,

Thanks for your reponse! Do you know if normally the MSMP/BRF+ work is done by the GRC AC consultant or other professional, like a ABAP professional? I know almost nothing about them, so I´m wondering if I (as a GRC AC consultant) should acquire this knowledge or work together with other specialist. Can you please give me your opinion about this?

Regards,

SAP person who is an apparent legend

[Colleen]

You are a legend Made me laugh too!

certification wise it is expected that the GRC consultant knows MSMP And BRF+

However, if doing complex workflows - complex rules - then a BRF+ skilled person and/or workflow abap person would be beneficial. Just depends on your project team

Cheers

Col

[Former Member]

Dear Col,

I´m glad to have made you smile.Unfortunately you made me sad. Couln´t you simply say this is other person´s job? Certainly things would be easy for me.

Well... Thanks for your help! Really appreciate it. Time to start learning. See you soon.

Regards,

The True Sap Legend (check post above for evidences)

[Colleen]

Dear The True SAP Legend

GRC component has a program in the IMG that automates the creation of the rules (including BRF+). The GRC300 and solutions encourage the use of decision tables. Within the GRC space some solution and steps have been posted for more complex BRF+ via use of decision tables. Once you start getting towards more complex rules, then having an ABAPer or a Workflow specialist would be of benefit. What takes you days may take them minutes. At the same time, if you're on a project and don't have resources available then the more you teach yourself the better you will be to deliver.

MSMP is designed to be configured by the GRC consultant. Again, someone who can work with you to map out process flows for decision points will help you to identify the best way to create the initiator rule and route the requests.

Regards

Colleen

[Former Member]

This message was moderated.