role removal not working in SOD Review workflow

[sreekanth_sunkara]

Hi,

I configured SOD Review workflow with the Parameter 2023(is Actual removal of role allowed) set as "Yes". When the Risk Owner click on "Actual Removal" and approves/submits the request. The request is getting closed with out removing the roles. Error Msg in SLG1 " Role <BR> AR Processor is not assigned to user XXXXX.

please help.

Thanks in Advance.

Sri.

[vijayakumarsuth]

Sri, As I am not sure about your version and support pack I would suggest you to review KBA 2256366 and validate note 2321105 for your environment to fix the issue

[sreekanth_sunkara]

Hi Vijayakumar,

we are on SP23. verified the notes referred by you. Parameter setting looks good. I opened OSS Msg to SAP and will let you know once i hear back from them.

Thanks,

Sri.

[sreekanth_sunkara]

Thanks all. SAP responded back saying that SOD risk review process do not support Business roles (Cannot remove Business roles with removal option)

Thank you,

Sri

[RameshVithanala]

Sri,

How does the following parameter looks your system?

2016 15 Request Type for SoD
2017 15 Default priority for SoD
2018 15 Who are the reviewers?
2019 15 Admin. review required before sending tasks to reviewers
2020 15 Number of unique line items per SOD request.(Maximum 9999)
2023 15 Is actual removal of role allowed

Thanks

Ramesh

[RameshVithanala]

Hi Sri,

Can you share screenshot of the task level setting for the SOD review workflow, approval at request or role or role & system?can you please share details on your global provisioning settings aswell.

Thanks

Ramesh

[sreekanth_sunkara]

Thanks Ramesh,

Please find the attached provisioning settings and also the Task settings for the SOD Risk review WF.

prov-settings.png

task-settings.png

Thank you,

Sri.

[RameshVithanala]

Sri,

Is BR : AR Processor is assigned to the user from GRC AC?And you are trying to remove a TR from the user?if so it will break the relationship of the User2BR2TR

Thanks

Ramesh

[sreekanth_sunkara]

Hi Ramesh,

Yes, the mentioned BR is assigned to the user via GRC. I tried removing the same Business role from the user.

Thank you,

Sri.