MSMP - workflow in GRC AC10.0 (SP13)

[adesa28]

Dear Experts:

One question: Access Request Creation: As per current MSMP settings we have; escalation after 4 days for the role owners. Our roles have no alternate approvers - so, I am sending the escalation requests to the same role owners again. (GRAC_MSMP_ROLEOWNER_AGENT) - If I use GRAC_AR_ROLE_ALT_APPR agent - it takes escape route. (Message: Approver not found; Applied Escape route)

Issue: NOW, if a request is created for 3 roles and 2 of them has approved before escalation and one is still pending, - after escalation, the request goes to all 3 of them again - instead of PENDING approver only. So, all the role owners have to approve the same request again - which is double work for them.

What agent should I use in MSMP? Any idea? OR - what should I be doing to send the escalations to the remaining approvers only??

Please advise.

Regards

Ashish

[alessandr0 · Accepted solution]

Hi Ashish,

did you consider the access request reminder instead of the escalation? You can use the program GRFNMW_BATCH_EMAIL_REMINDER for that. The reminder gets only sent to approvers who don't have given their approval.

Regards,

Alessandro

[adesa28 · Accepted solution]

Hello Alessandro:

Quick Q: If we use GRFNMW_BATCH_EMAIL_REMINDER program - than we do not need to have escalation in MSMP at all? ALSO: This program send the emails to only remaining approvers only?

Please advise. BTW - I liked your idea if that works.

Regards

Ashish

[alessandr0 · Accepted solution]

Hi Ashish,

yes - exactly. The functionality serves email reminders to approvers who missed to approve in time. It's not an escalation to a further approver, it's a reminder only.

Personally I recommend to schedule the program to be run once a day. You can define that a reminder is sent only once within a time frame. In the example below the reminder is sent after 7 days (Period in days: 7). With "dont remind again in days" you can define when the next reminder will be sent. That means that after 7 days the first reminder is sent, after 14, 21, 28, etc. the next.

Let me know if you need further details.

Regards,

Alessandro

[Former Member · Accepted solution]

Hi Alessandro/Madhu/Ashish,

I am about to post a similar query . I also have same issue regarding escalation and reminder mails. Below is my requirement

1. Requirement is to escalate to Alternate approver after 7 days. I have maintained my stage settings accordingly.

Does this sends the Email now after 7 days to Alternate approver? I think for this also we should have Email reminder Job.

2. If I have stage settings to send request to alternate approver after 7 days, then how should I set my Email reminders?

3. Does the escalation takes only the roles or Lineitems which are not approved to alternate role owner or entire request ?

Thanks in advance

~ Madan

[Former Member · Accepted solution]

Hi Madan,

1. User to whom request will be escalated can receive email notification on request escalation. Just configure MSMP to send notification to current approvers when escalation event will be triggered.

2. You can change period for sending reminders to other value - it depends on your business needs. But it sill should be executed at least daily.

3. You can configure escalation not to escalate approved line items - see SAP note: 2008881

Regards,

Rafał

[adesa28 · Accepted solution]

Thanks Rafal:

I believe when you receive the answer it seems so simple.

Thanks a lot.

Regards

Ashish

[Former Member · Accepted solution]

Hi Rafal,

Thank you so much for detailed explanation.

So, if I have escalation settings at Stage and escalation notification settings at stage, then no need to schedule Email reminder job for sending mails as my settings will automatically trigger emails to alternate approver.

Email reminder job is generally applicable for all access requests which sends a Email reminder based on number of days for which we configure.

Correct me if my understanding is incorrect.

~ Madan

[Former Member · Accepted solution]

Hi Madan,

Application can send notification when request escalation is triggered.

Email reminder job will remind users that they have pending requests in their inbox.

Eg. if escalation is set to 7 days and email reminder job is set to 4 days (scheduled to run daily) aplication will:

1. send reminder to approver after 4 days after last action

2. escalate request after 7 days of inactivity

Best Regards,

Rafal

[Former Member · Accepted solution]

Hi Rafal/Ashish,

Thank you so much, I understood the concept now clearly for Escalations and Email Reminders.

Now the issue for which this thread has been opened is that after escalation even the approved Line Items are going to Alternate role owners.

We are also on GRC SP13 and has the same issue.

Below note is the pre-requisite for implementing Note 2008881. But since we are on SP13, it was mentioned we can directly implement the note 2008881

1603140  - GRC AC 10.0 - Workflow - Escape a Escalation Improvements

As mentioned in the Note 2008881 , We have created a class interface ZCL_BADI_ESCLATE_OVERRIDE

http://service.sap.com/sap/support/notes/2008881

I have completed all required settings

1. Escalation Settings at stage level for my request to go to Alternate approver after 5 minutes is set

2. Created an access request with 2 roles. One role is approved. After 5 minutes, alternate role owners for both the roles got escalation notification.

3. I checked the request and found that already approved role also got escalated to its alternate role owner.

I reviewed all the below SAP notes relevant to this issue and none of them are helpful as all of them are already implemented in our system

1586596  - Escalation notification to current approvers

1603469  - GRC AC 10.0 - Workflow - Escape a Escalation - BADI enhaanc.

1695496  - UAM:Rejected assignments are also getting escalated

2008881  - Approved request items are also escalated alongwith unapproved items

1801662  - Request getting esclated even though the request has been forwarded.

http://service.sap.com/sap/support/notes/2000779

Help me if I am missing anything.

~ Madan

[adesa28 · Accepted solution]

May be you need to create another custom agent in BRF plus. This agent will look at the approved line items, and ignore them when sending out the remainder of approvers?

I have not done this but was aksked to and a little confused as well.

[adesa28 · Accepted solution]

I just completed te tests in DEV environment - THIS WORKS.

No need for escalation unless you are maintaining Alternate role owners - for whom you can escalate the request.

Great.

Thanks guys.

You are truly exprts.

Regards

Ashish

[Former Member · Accepted solution]

Hi Ashish.

So how did you solve the error? just by implementing note 2008881?

Kind regards and thank you.

Sara.

[adesa28 · Accepted solution]

Hello Sara:

If you have alternate approvers, you need to schedule escalate in 4 days or 7 days. If there are no alternate approvers, you may send a reminder in 4 to 7 days to the current apporover - so, the reminder will goto only remaining approvers and the workflow is not sent again to those approvers who have already approved the request.

Hope this helps.

Regards

Ashish Desai

[Former Member · Accepted solution]

Hi Sara,

We are on GRC SP13 and we have implelemented 2008881 BADi with the method given in the note and still the issue persists where approved items are getting escalated.

I have raised a OSS message for the same and yet to get reply from SAP. I will update the details based on their response here.

Hi Ashish,

As per your thread initial issue was that even in your scenario approved Line Items are getting escalated. Are you able to solve this issue?

Reminders - Can be scheduled to send to notification to approvers after certain number of days.

Escalation to Alternate Role Owner - No need to schedule anything. Based on stage settings and duration mentioned at stage level request goes to alternate owner if the main owner didn't respond within this time.

I assume you are using reminder notifications now using Email reminder job. But the escalation issue which you have raised was that resolved? Please let us know if you already have fix for that issue.

~ Madan.

[Former Member · Accepted solution]

Hi Madan.

I have already raised a OSS note but i am still awaiting for a good response.

Kind regards and thank you.

Sara.

[adesa28 · Accepted solution]

Hello Sara:

Since I dont have any alternate approver, and I had set escalattion to existing approvers (AGENT) it was going to all the approvers - even if tey had approved the same earlier. So, in my case, escallation is not required.

Now I have only email reminders - set in the sytem at every 4 days and these reminders will only go to remaining approvers and workflow is not distrbed.

Hope this helps. (If you still need to use escallation, you need to choose the correct agent - in notification on step 5 - which should be GRAC_OTHER_APPROVERS - please try this in dev and make sure it is working as you have expected)

Regards

Ashish

[madhusap]

Hi Ashish,

Since you wanted to escalate it to the same role owner, can you maintain the same Approver as both Role Owner and Alternate Role owner and then mention in your stage settings to escalate to Alternate Role owner after 4 days and check?

Regards,

Madhu.

[adesa28]

Hi Madhu:

I have 9000 roles - very difficult to upload all of them again. I am also not sure if this will resolve my issue of sending the reminder to only remaining approvers.