Skip to Content
0

How to skip SAP Default role approval in Access Request Management - GRC AC 10.0

Nov 01, 2016 at 08:08 PM

104

avatar image

Hello,

I opened up a post on this however it was archived. Hence starting new!

We are on GRC 10.0 SP13. We have 1 default end user role configured for which GRC checks for approvals when we add roles into ARM. This Default role should go for approvals.

We have 3 stages configured 1) Manager Stage 2) Role Owner stage with BRF+ condition 3) SAP Security stage.

The default configuration of making Auto role approve to "YES" will not work neither creating a dummy path in MSMP and routing it to that path will work as I have BRF+ rule for my roles mapped to Usre Groups.

I also tried creating a DBLOOK up in Decison table of Initiator rule in BRFPLUS which also does not work. Any ideas please?

Kamesh

10 |10000 characters needed characters left characters exceeded
* Please Login or Register to Answer, Follow or Comment.

2 Answers

Prasant Kumar Paichha Nov 02, 2016 at 12:57 AM
0

Hello,

May i know, do you want to configure default role should go for approval for all 3 stages or should get provision without approval.

Or you want to provision if any of the main roles gets approved.

I had situation where default roles required no approval hence sent it to dummy path, but should get provision only if any of the main roles get approved.

REgards,

Prasant

Share
10 |10000 characters needed characters left characters exceeded
Sharad Parasher
Nov 22, 2016 at 06:13 AM
0

Hi Manoj,

One option is to have some kind of identification paramater on the role , while importing in BRM ( may be a custom field) and then routing the workflow for the default roles using this custom parameter.

Regards, Sharad

Share
10 |10000 characters needed characters left characters exceeded