Skip to Content

How to skip SAP Default role approval in Access Request Management - GRC AC 10.0

Nov 01, 2016 at 08:08 PM


avatar image
Former Member


I opened up a post on this however it was archived. Hence starting new!

We are on GRC 10.0 SP13. We have 1 default end user role configured for which GRC checks for approvals when we add roles into ARM. This Default role should go for approvals.

We have 3 stages configured 1) Manager Stage 2) Role Owner stage with BRF+ condition 3) SAP Security stage.

The default configuration of making Auto role approve to "YES" will not work neither creating a dummy path in MSMP and routing it to that path will work as I have BRF+ rule for my roles mapped to Usre Groups.

I also tried creating a DBLOOK up in Decison table of Initiator rule in BRFPLUS which also does not work. Any ideas please?


10 |10000 characters needed characters left characters exceeded
* Please Login or Register to Answer, Follow or Comment.

2 Answers

Prasant Kumar Paichha Nov 02, 2016 at 12:57 AM


May i know, do you want to configure default role should go for approval for all 3 stages or should get provision without approval.

Or you want to provision if any of the main roles gets approved.

I had situation where default roles required no approval hence sent it to dummy path, but should get provision only if any of the main roles get approved.



10 |10000 characters needed characters left characters exceeded
Sharad Parasher
Nov 22, 2016 at 06:13 AM

Hi Manoj,

One option is to have some kind of identification paramater on the role , while importing in BRM ( may be a custom field) and then routing the workflow for the default roles using this custom parameter.

Regards, Sharad

10 |10000 characters needed characters left characters exceeded