Skip to Content
avatar image
Gustavo Soares

If escape routing is enabled, escape path and stage are required.

Apr 03, 2017 at 04:33 AM | 476 Views

Hi guys,

In GRC10.1 MSMP, we are getting this message when trying to set a Escape Path for "Auto Provisioning Failure":

If escape routing is enabled, escape path and stage are required.

We are able to enter the new path we created, but the stage is read-only with 000.

Any idea on what could the problem be, please?

Thanks and regards.

msmp-escape-conditions.jpg (136.0 kB)
SAP Access Control
SAP GRC Access Enforcer for SAP NetWeaver | grc 10.1 | msmp | escape routing
Add comment
10|10000 characters needed characters exceeded

  • Get RSS Feed

4 Answers

  • Best Answer
    avatar image
    Shivendra Kumar Pandey
    Apr 07, 2017 at 02:14 AM

    Hi Gustavo,

    Select escape path from the list by press F4 instead of entering the path manually, then issue will be resolve.

    Thanks and regards,

    Shivendra

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Gustavo Soares
    Apr 07, 2017 at 11:29 PM

    Thanks Shivendra.

    Now I am able to enter the escape path and save it with the first stage.

    However, we are not able to select another stage of the escape path (let's say the 3rd one).

    Any ideas?

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Deepa Joshi
    Oct 04 at 07:12 PM

    Hello Gustavo,

    We are trying to achieve the same. Got any inputs?

    REgards

    Deepa

    Add comment
    10|10000 characters needed characters exceeded

    • Gustavo Soares
      Oct 08 at 03:06 AM

      Hello Deepa,

      It is not possible to define another stage, it will automatically go to the first stage. We saw the following options:

      1. Ensure all users, especially managers, are created in GRC after being added to the HR org structure;

      2. Most of the cases of failure will happen in the first approval, because the second and third approvals are higher levels in the company (i.e. rarely change). Then you can:

      a) copy the whole path into the escape path and add one stage before that for Basis to create the id in GRC; or

      b) create a function call BRF+ rule to call the initiator again, like a re-initiator.

      3. Create an BRF+ initiator to check all users in the beginning, then basically do 2.b above.

      Due to time constraints, we implemented only 1 and 2.a.

      Cheers,
      Gustavo

  • avatar image
    Deepa Joshi
    Oct 11 at 08:55 PM

    Many thanks Gustavo!

    Add comment
    10|10000 characters needed characters exceeded