Skip to Content
avatar image
Former Member

CUP: Notification Mail after Role Approval

Dear SAP Experts

We are running GRC AC 5.3 SP11.2 and facing a problem with the CUP workflow behavior.

Each time we change a existing user in the system and assign him at least two new roles with diffrent role owners, we get some problems at the role owner approval stage.

As soon as the first role owner provides his role approval a message is sent out to the requestor, manager and user that all changes to the user profile are done. This behavior repeats for each role owner which has to provide a approval to that request. The roles it self are assigned to the user account when the last role owner approved the request.

Under AC 5.2 we had only one mail beeing sent out to the requestor, manager and user when all roles were approved.

The role owner stage has following settings:

Approval Type --> All Approvers

Do we have to customize some more settings as well?

Many thanks for your help Jeffrey

Add comment
10|10000 characters needed characters exceeded

  • Get RSS Feed

5 Answers

  • avatar image
    Former Member
    Jul 22, 2010 at 11:31 AM

    Hi Ranjiv

    That means in case a request has 5 roles owners the defined persons (defined in the role owner stage to get a message after the approval) get 5 time a mail telling them that a approval on role level has been done in this particular stage? Under AC 5.2 we had only one mail beeing sent out to the defined persons after the hole stage was approved.

    Thanks for clarification

    Jeffrey

    Add comment
    10|10000 characters needed characters exceeded

    • It really depends on the stage level settings.

      How are notofications configured at the role owner stage - are the boxes for "requester" or "user" ticked?

      If so, as the request splits up for each role owner, each approval will trigger an email. If you don't want that, don't configure it that way. 😉

      And I'm pretty sure it worked the same way in 5.2...

      Frank.

  • Jul 20, 2010 at 02:18 PM

    Please check your stage settings: is the "Approval Level" at "Role" or "Request" ...?

    Frank.

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Jul 20, 2010 at 02:22 PM

    Hi Frank

    The approval level is role.

    Regards Jeffrey

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Jul 22, 2010 at 10:57 AM

    Hi Jeffrey,

    A mail will be send (to the recipients configured in the "stage") after each approver approves the request ,

    End of the mail will have a link similar to this http://server:port/AE/index.jsp?loadRequestStatusSearch.do which takes the user directly to search the status of his request where he can check if the request is completely or partially approved.

    And once the request is completely approved the "Request provisioned " mail is send to the user .

    Regards

    -Ranjiv

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Jul 22, 2010 at 12:10 PM

    Hi Frank

    Following settings are implemented at the role owner stage (last stage before auto provisioning):

    Notification Configuration:

    Approved --> User / Requestor / Manager

    Rejected --> Requestor / Manager

    Different text for mails are maintained

    Additional Configuration

    Risk Analysis Mandatory -> No

    Change Request Content --> Yes

    Add Role --> No

    Path Revaluation for New Roles --> All Roles in Evaluation Path

    Approval Level --> Role

    Rejection Level --> Role

    Approval Type --> All Approvers

    E-mail Group --> BLank

    Comments Mandatory --> Yes / Rejected

    Request Rejection --> No

    Reroute --> No

    Confirm Approval --> No

    Confirm Rejection --> No

    Reject by E-mail --> No

    Approve by E-mail --> No

    Forward Allowed --> No

    Approve Request Despite Risks -> Yes

    Display Review Screen--> Yes

    Additional Security Configuration (Approval Reaffirm)

    Approve --> No

    Reject --> No

    Create User --> No

    Under AC 5.2 we used the Notification Configuration / Approved Mail to inform the defined persons that the request is approved and provisioning is done. This mail has been sent out only once to the persons after all role owners worked on the request. Obviously AC 5.3 behaves different after we have done the migration:-))

    Jeffrey

    Add comment
    10|10000 characters needed characters exceeded

    • Former Member

      Hello Jeffrey,

      If you don't want the user to get mails after approval of each role , uncheck the Approved field in notification configuration.

      The user will still get a mail at the end of successfull provisioning ( auto provisioning) with the subject "Request <number> provisioned" and with user id & password details.

      Regards

      -Ranjiv