Roles are not getting tagged to workflow while creation upload

[former_member91276]

Hi All,

IDM 7.2, SP8

While trying to upload the role creation file, i have entered the workflow no. But none of the roles get tagged to the workflow.

Could you please suggest on the reason

Regards

Plaban

[devaprakash_b]

Hi Plaban,

Basically SAP Idm Provisioning tool can be customized in many ways and the implementation strategy would be varying from customer to customer. I have come across the approval strategy being maintained as one of the attribute to the MX_ROLE Entry type. Usually this solution is delivered as part of the SAP IDM RDS packages.

As you are stating for new repository it is not working, i am assuming you have created a new repository and connected to idm and mapped the newly created repository privileges to IDM business Roles. So when you assign the role to the users it not triggering approval process. IF this is the case, then i would suggest you to look at your role creation job.

If thats not the case then try to share the below info

1. what is the input values you are passing to the job / script etc.,
2. what is the values maintained in source or destination tab
3. and most importantly job log or error message screenshot.
4. if you believe there is customer related info kindly mask it and share it.

The members of the community will always be looking forward to help others. Kindly share the complete information which already requested by aryanraj in most of your questions.

Please take a moment and go through one of the matt.pollicove posts.(link)

Regards,

Deva

[Ckumar]

Hello Plaban,

As informed in your earlier questions on SAP IDM SCN, please do provide the complete issue details with the necessary screenshots.
We are happy to help each other here but for this, we need the complete info, errors details (if any). Please avoid just a one-liner question rather explain the issue in details and if possible share the example too.

Regards,

C Kumar

[former_member91276]

Hi Kumar,

I thought it was a standard error. Let me detail it now.

i am trying to create new roles through a job, where hundreds of roles get created, which are mentioned in an excel. The excel contains the MSKEYVALUE, Privilege name, Approver id, Workflow , MX_VALIDATE_ADD_TASK and Role Approval strategy.

Only for a new SAP repository, are the roles not getting tagged to the new workflow. There is a new workflow created, for this new repository.

By tagged i mean, the role is not having the Workflow no., after upload. So, when this role is requested, workflow is not trigerred.

I hope this can help you understand my query

BR, Plaban

[former_member91276]

Hi Kumar,

Would you be able to suggest on my comments.

Regards

Plaban

[Ckumar]

Hello Plaban,

What is Role Approval strategy in your excel file and could you please share the screenshots from ASCII pass - destination as well To Identity Store pass - destination as Role Approval strategy seems a custom field, not the standard one.

Regards,

C Kumar

[normann]

Hi Plaban,

could you be little more specific please.

• What do you mean with "i have entered the workflow no"?
• Is the workflow defined as MX_VALIDATE_ADD_TASK on the roles?
• What state are the assignments in (OK, Pending,...)?
• If they are pending, what can you see in idmv_link_ext as mcValidateAddAudit?
• If there is mcValidateAddAudit, can you please check whether the according entries to that audit id are in the provisioning queue and if so whether the action ID from mxp_provision is the workflow task you expect.

Regards

Norman

[former_member91276]

Hi Norman,

1.i am trying to create new roles through a job, where hundreds of roles get created, which are mentioned in an excel.

2.The excel contains the MSKEYVALUE, Privilege name, Approver id, Workflow , MX_VALIDATE_ADD_TASK and Role Approval strategy.

Only for a new SAP repository, are the roles not getting tagged to the new workflow. There is a new workflow created, for this new repository.

By tagged i mean, the role is not having the Workflow no., after upload. So, when this role is requested, workflow is not trigerred.

3. There is no assignment of the role, that is requested now

So, that answers your remaining questions

I hope this can help you understand my query

BR, Plaban

[normann]

Hi Plaban,

When you say roles you mean business roles? Could you just be a little more specific please, I still don't even understand whether you upload business roles or privileges cos you say roles first and than privilege name...

If it is privileges and the approval workflow is defined on the repository, you would delete MX_VALIDATE_ADD_TASK from the privilege in order to inherit from the repository.

Thanks

Norman