SAP GRC Access Control 10.1 - Field Mapping (Functional Area mapped to User Group) for Provisioning

[former_member292357]

Hi Team,

In my current GRC AC 10.1 implementation project, we are mapping the functional area field to user group using "Maintain Mapping for Actions and Connector Groups" (AC Field - FUNCTIONAL_AREA, System Field - CLASS). The expectation from us is that when users choose functional area in Access Request form (we have disabled User group field under system details tab), the same (functional area) will need to be assigned to users in the backend connected system (ECC) as User Group under Logon Data tab in SU01.

This functionality is working properly for existing users,

- if existing users don't have user group mapped and if we submit a new access request with functional area, the chosen functional area is getting assigned to user

- If users are already mapped with some user group and if they choose different functional area, this is time also updated functional is getting assigned to user by overwriting the existing user group.

However, when it's a new user creation, it is not updating accordingly, the user group field is coming as blank instead of being updated with Functional Area value.

I've noticed looking at the GRACREQPROVLOG of course I'm seeing 001 and 002 as the actions depending on if the user exists or not.

Btw, we have the request type 002 that we have used in BRF+ and cater for both create/change users. We've maintained the actions "Assign Objects and User defaults" for this request type.

Am I missing something?

Any help on this much appreciated..

Thank you very much!