Skip to Content

Configuring GRC to not update certain SU01 fields

In Access Control have configured Set User Defaults successfully to populate User Group, Time/Date/Decimal, PIDs and the like. The issue I have is that other fields like Department and Cost Center are being updated as well, and we use them for "other purposes". How can I turn off the updates of these fields? Is it thru configuration in GRC or would we have to do an enhancement on the plug-in? One more piece of information is that we use web services (GRAC_USER_ACCES_WS) to provision roles, as opposed to using Access Request. We also do not create users with AC in our ECC system, as this is handled by a home grown process kicked off in HR. It is in that process that we update the Department and other fields with our own data - which is being overwritten when we provision roles to these users.

Thanks in advance for any helpful tips.

James

Add a comment
10|10000 characters needed characters exceeded

Assigned Tags

Related questions

3 Answers

  • Posted on Jul 02, 2019 at 06:21 PM

    Hi James,

    I have never faced this situation with web service AR, but one thing I would try is changing the Default End User Personalization. Go to SPRO -> IMG -> GRC -> Access Control -> User Provisioning -> Maintain End User Personalization, and maintain the Default EUP. Try to make those fields non visible or/and non editable, and see if there is any difference in the result.

    Regards,

    -Pau


    spro-eup.png (15.4 kB)
    Add a comment
    10|10000 characters needed characters exceeded

  • Posted on Jul 03, 2019 at 03:06 AM

    Hi James,

    Can you let us know what is your User Data Source?

    As per your description, HR system employee details were used for assigning Cost Centre and Department during employee events like HIRING, TRANSFERS and TERMINATIONS which means that GRC access request fields were mapped to relevant HR employee data.

    However, when you submit request for assigning roles to the users using web service "GRAC_USER_ACCES_WS", can you check if you are overwriting the Department and Cost Centre data in the access request? Based on your user data source, user details will be picked and populated in the access request. Hence, please check which system is being used as User Data source (HR or LDAP or Any other system).

    In short User Defaults does not affect your Cost Centre or Department values, they must have been passed to webservice incorrectly or being retrieved from a wrong data source.

    Regards,

    Madhu

    Add a comment
    10|10000 characters needed characters exceeded

  • Posted on Jul 03, 2019 at 07:35 PM

    Madhu,

    Sorry but I gave you some incorrect information. The Department and Cost Center gets overwritten only when submitting an Access Request, not from the web service. In that case I do not care since we will not be using this method. The only remaining issue is the email address getting updated. This is passed via the web service, but we do not want it to update SU01 in certain systems. The data source is HR. This is not a show stopper, but it would be nice if we could block the change in some systems, while allowing it to update in others. I set the EUP to all NO values, but that had no effect. Do you think it is something that can be configured in GRC? Regards,

    James

    Add a comment
    10|10000 characters needed characters exceeded

Before answering

You should only submit an answer when you are proposing a solution to the poster's problem. If you want the poster to clarify the question or provide more information, please leave a comment instead, requesting additional details. When answering, please include specifics, such as step-by-step instructions, context for the solution, and links to useful resources. Also, please make sure that you answer complies with our Rules of Engagement.
You must be Logged in to submit an answer.

Up to 10 attachments (including images) can be used with a maximum of 1.0 MB each and 10.5 MB total.