Skip to Content
avatar image
Former Member

Restrict managers to create user access request in GRC.

We have a requirement to restrict managers to create user access request in GRC.

How can this done ?

Thanks in advance.

Add comment
10|10000 characters needed characters exceeded

  • Get RSS Feed

3 Answers

  • May 21, 2015 at 06:07 AM

    Dear Vijay,

    personally I would recommend to remove activity 01 from GRAC_REQ for managers, so they cannot create access requests.

    If a user does not have activity 01 the access request form is not visible and hence the user cannot submit a request. For all others it still works.

    Let us know if you need further information.

    Regards,

    Alessandro

    Add comment
    10|10000 characters needed characters exceeded

  • May 21, 2015 at 05:14 AM

    Hi Vijay

    Have you looked at using the normal ARQ form instead of the End User one? The Managers would then need SU01 account and security roles to use NWBC

    If employees are required display, you would edit the End User Page and remove access request form creation links (if not using at all, deactivate the services)

    It might be easier to let all request access and route the workflow to the Manager for review and approval first?

    Regards

    Colleen

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    May 21, 2015 at 09:32 AM

    Hi Vijay,

    Restriction on 'Create and Approve own request' is available through EUP. So,apply this EUP at manager Stage. This will primarily restrict a manager to approve his own created requests. This is the normal scenario.

    Is a Manager not allowed to create any requests at all?, i.e for others for whom he is not the manager, also?If so, As Colleen said, if EUL is not used, then User creation can be restricted at many levels. - 1. Create A Manager page/tab(through Webdynpro), where user creation link is not available.

    2. GRAC_REQ can be also be used to display requests only.

    Regards

    plaban

    Add comment
    10|10000 characters needed characters exceeded

    • Former Member

      Hi Plaban,

      I cannot see 'Create and Approve own request' field in EUP. Can you let me know how to do this.

      Thanks.