Skip to Content
avatar image
Former Member

How to auto approve the first stage in GRC 10

Dear All,

We're on GRC 10 & 06 SP level.
Right now we have 2 stages of workflow, first stage is Role owner and second stage is SAP security.

The issue we are having is -
-> When I submit the workflow for new SAP account creation request it results in error.
I submit request by adding system name and then roles for assignment, it fails with error agent not found but when I add ONLY roles and then approve the first stage and at second stage I add system details and approves it works fine and the user id gets created in the backend system with roles assigned.

My requirement is I do not want to add the system details in the second stage of approval. Is there a way to auto approve the creation of SAP account when I submit the request in one go.

All I need is when I submit the request with system and role assignment details the request should move forward.

Thanks in advance.
James

Add comment
10|10000 characters needed characters exceeded

  • Get RSS Feed

2 Answers

  • Jan 24, 2017 at 08:26 AM

    Hi James,

    There are 2 ways to do this:

    1. Create an customized BRF+/ for approver of the Systems stage and put the agent as empty approver. So this will auto approve and for roles, it will be directed to the right approvers and you will not face any missing agent error.

    2. Do the way you are doing and check one of the parameters in SPRO --> GRC --> Access Control --> User Provisioning --> Maintain Provisioning Settings --> Maintain Global Provisioning Configuration CREATE USER FOR ROLE ASSIGN ACTION to "YES". This will help you achieve the desired results. But this has its own Cons, so please check the right way according to your requirement.

    I would prefer way 1, since it a good practice and can help achieve the desired results although it involves more (one-time) effort.

    I hope this helps.

    Regards,

    Vandana

    Add comment
    10|10000 characters needed characters exceeded

  • Jan 30 at 06:38 AM

    Hi James, were you able to fix this? If so, would you mind sharing the solution, please?

    Add comment
    10|10000 characters needed characters exceeded

    • Hi Claudio, we were not able to resolve the issue, so we dropped the user creation altogether, so GRC only performs role assignments.

      Not able to answer on behalf of the person who created this question though.