SAP GRC10 - Role Owner Stage

[Former Member]

Hello All,

We have successfully configured BRF Rule and MSMP workflow , Request is taking path define by us but its getting stuck in 2nd stage that is role owner stage.

we have already define role agent GRAC_ROLEOWNER and Role owner to a role , But still we are getting following error :-

Approver not found at Path SUMP_PATH Stage GRAC_ROLEOWNER; escape path is not enabled

No agent found, canceling path SUMP_PATH (in stage no. 002 - GRAC_ROLEOWNER)

Thanks,

Jagat

Edited by: JagatBir Singh on Jun 29, 2011 7:31 AM

[Former Member · Accepted solution]

Hi ,

I think you have added a System to your request along with roles . In this case when request goes to role owner stage, the agent for roles is found by your agent rule but for the systems present in the request no agent is found and request goes to error state .

One possible solution would be to have seperate path for system and roles .

Best Regards,

Aman

[Former Member · Accepted solution]

Hi Jagat,

Can you tell me the request type for which you are configuring the workflow.

You have mentioned SUPM_PATH. Is this related to Super User Privilege Management. If this is the case then its a known bug and SAP is working on the same

Regards

Rajan Arora

[Former Member · Accepted solution]

Hi Experts,

could you be a bit more specific on the solution please as this is exactly my current problem. (non FF, but entries above)

I use the model user in request creation, auto the system is added as well. Next stage is role approver and gives error as "no role approver agent for the system".

How was this solved??

Thx!!

[Former Member · Accepted solution]

Kraell ,

Even I had the similar issue as when I was trying to change accounts i.e. add role to existing user I was using both the role and system and it was erroring out in the role owner stage but after wards when i was submitting the request i removed the system and just added the role as it was already linked to the system and it went through fine.

Uday

[Former Member · Accepted solution]

Yes I understand, also new users will be created anyway (direct provisioning settings). But the point is that it is not user friendly this way.

We use it for model-user scenario which per default also include the model-user's system. This system line should then be manually removed from the request in order to make everything work.

I will try to escape/detour with the "no approver found" options