Skip to Content
avatar image
Former Member

How to skip SAP Default role approval in Access Request Management - GRC AC 10.0

Hello,

I opened up a post on this however it was archived. Hence starting new!

We are on GRC 10.0 SP13. We have 1 default end user role configured for which GRC checks for approvals when we add roles into ARM. This Default role should go for approvals.

We have 3 stages configured 1) Manager Stage 2) Role Owner stage with BRF+ condition 3) SAP Security stage.

The default configuration of making Auto role approve to "YES" will not work neither creating a dummy path in MSMP and routing it to that path will work as I have BRF+ rule for my roles mapped to Usre Groups.

I also tried creating a DBLOOK up in Decison table of Initiator rule in BRFPLUS which also does not work. Any ideas please?

Kamesh

Add comment
10|10000 characters needed characters exceeded

  • Get RSS Feed

2 Answers

  • Nov 02, 2016 at 12:57 AM

    Hello,

    May i know, do you want to configure default role should go for approval for all 3 stages or should get provision without approval.

    Or you want to provision if any of the main roles gets approved.

    I had situation where default roles required no approval hence sent it to dummy path, but should get provision only if any of the main roles get approved.

    REgards,

    Prasant

    Add comment
    10|10000 characters needed characters exceeded

  • Nov 22, 2016 at 06:13 AM

    Hi Manoj,

    One option is to have some kind of identification paramater on the role , while importing in BRM ( may be a custom field) and then routing the workflow for the default roles using this custom parameter.

    Regards, Sharad

    Add comment
    10|10000 characters needed characters exceeded