Approver not found,Applied Escape route, Role owner missing

[Former Member]

Hi,

Iam working GRC Access control 10.1, Iam facing one issue, when I select CUA system.  In approver stage, Approver not found, Applied Escape route, Role Owner missing.

Any one will help on this issue. Its very helpful for me.

Regards

Suresh

[former_member190727]

Suresh,

If you want to provision the role request in Child system then please select child system you dont have to select CUA system , When you select child system when submitting access request it will automatically provision the same role in both child and CUA system.if child system is maintained under CUA

Also go to CUA settings and check if the child system is maintained there or not

hope this helps

[Former Member]

Hi Rafi,

Thanks for your reply, actually my concerns related to

Role Owner approver stage. It audit log, it showing "Approver not found, Applied Escape Route.

But users are created in CUA and child systems and skip the Role Owner stage.

Please find the Audit log details:

Regards

Suresh

[alessandr0]

Suresh,

since you use the stage GRAC_ROLEOWNER and I assume agent GRAC_ROLEOWNER the issue comes from the role. Please check whether a role approver has been maintained. If a role has no approver then the request will take the escape route which is configred to REQ_ESACAPE.

Regards

Alessandro

[Former Member]

Hi Alessandra,

Thanks for your reply,

GRAC_ROLEOWNER maintained in NWBC-Role Owners and Access Control Owners node and maintained in REQ_DEFAULT path. Request routing to REQ_ESCAPE path and stage to POC.

Regards

Suresh

[Former Member]

Hi Alessandra,

When I was selected CUA system, then only Iam facing issue.

If I selected  Individual systems like ECC/BW systems, Iam not facing any issue.

Regards

Suresh

[surya_appala]

Hello Suresh,

Could you please check for SLG1 logs and let us know. Thanks.

Regards,

Surya

[Former Member]

Hi Surya,

Iam getting same Audit log information in SLG1 log.

Regards

Suresh

[surya_appala]

Hello Suresh,

Could you please check for BRF+ conditions set. Which result it is getting and corresponding to the result which path it is choosing ?

Please let us know the results. Thanks.

Regards,

Surya

[plaban_sahoo6]

Hi ,

to create/provision id in CUA parent system itself, the parent system(with client), should also be a child to the parent system.

Then import and sync., roles of parent system and assign Role owners.

So,

[Former Member]

Hi Surya,

Role Owner choosing the REQ_DEFAULT, But routing to REQ_ESCAPE Path and choosing POC.

Please find the log file.

[Former Member]

Hi Plaban,

I did Repository/Action Usage/Authorization/Role Usage Sync and In NWBC update the Role Import with Role Approvers also.

Regards

Suresh

[surya_appala]

Hi Suresh,

Thanks for the screen shot.

Kindly let us also know the Agent ID configuration in stage GRAC_ROLEOWNER. Thanks.

Regards,

Surya

[former_member193066]

Hello Suresh,

could you provide little bit more information.

if you have maintained role owner than they should be role assignment approver.

Please check inside role if they are maintained as role assignment approver as well.

Regards,

Prasant

[Former Member]

Hi Prasant Kumar,

Thanks for your reply. I already maintained role owner/approver in NWBC and update the role import. Iam facing issue when I select the CUA system.

Regards

Suresh

[former_member193066]

could you go to MSP for that path,

go to stage for role owner and provide screenshots?

Regards,

Prasant

[former_member184114]

Suresh,

I assume that while importing the roles through BRM, it is missed to maintain the Role Owner(s). Therefore you are getting this.

That is what Alessandro meant. Please see the attached screen shot for your reference.

Regards,

Faisal

[surya_appala]

Hello Suresh,

I think the configuration is done such a way that in case of any failures in workflow, it takes default path REQ_ESCAPE and the stage is YGRAC_POC.

The agents in this stage approved the request.

Approver ID is given as DPOC.

After the approval the request got processed and finished.

For further investigation you may check the stage GRAC_ROLEOWNER why no approver is maintained.

Please let me know in case of any questions.

Regards,

Surya