Access request creation - select roles screen - field boxes were not aligned

I'm not sure if this is really the screen of SAP GRC 10.1 access request creation. The field boxes were not aligned. Is there a note to fix this issue? Thank you.
Regards,
Jenilyn

Hi Mohamed,
Even I used Google Chrome, it's the same. Still facing the same issue. Is there any other way to solve this issue?
Thank you.
Regards,
Jenilyn

Similar Messages

GRC 10.0: Access Request Creation - LDAP user advanced search not working

Dear Experts,
We are implementing SAP GRC Access Control and we have an issue in Access Request Creation. If we put the user name in “User” field and press intro, the user details are updated, but if we want to make an "Advanced search" the user is not found and the application give us the following message: “No records found for the search criteria entered.”
Scenario 1: If we put the user name in “User” field and press intro, the user details are updated:
Scenario 2: If we want to make an "Advanced search" the user is not found and the application give us the following message: “No records found for the search criteria entered.”
We are using the Active Directory as Data Source.
Thanks and Regards.

Hi Jose,
Try maintaning the parameter 2050 as YES and check once.
Kindly, also make refer to the below list of SAP notes:
1757906 - GRC 10.0 - LDAP user search does not work in NWBC
1745370 - LDAP search in GRC does not work anonymously
1718242- UAM: User search not working in Access Request.
Regards,
Neeraj Agarwal

GRC 10.0 Access Request Creation- Data Source of User Details

Hi Experts,
I was doing GRC 10.0 Configuration and found a query which I am not able to resolve.
While creation of any kind of Access Request in GRC through NWBC> Acces Management Tab>Access Request>Access Request Creation.
In the user details section, I can see the HR records( like Pernr, position, manager) have been visible to some extent.
My question is where from these details came in GRC. What configuration we should maintain to achieve these HR records?
Hope to get a quick response as this is one of the requirement of the implementation which I am doing with my customer.
Thanks,
Atanu

Alessandro,
Thanks for your response. It helped me to know certain things.
But when I am navigating to SPRO > GRC > Access Control > Maintain Data Sources Configuration > [User Detail Data Source], it is configured with a ECC system in target connector and User data type is maintained as "SU01".
Now my question is where from in my case the GRC is pulling the HR records (PA20) like PERNR, POSITION,PERSONEL AREA etc? SU01 does not provide these information. My ECC box is integrated with HR module, so is it taking the data from HR directly?
Thanks in advance!
Atanu

Access Request "Model User" - Role Type "Role" disabled in "Select Model Access" screen.

Hi All,
I am implementing GRC AC 10.0 - ARM for provisioning in SAP R/3 and Enterprise Portal systems.
While using "Model User" access request, I find that UME portal groups are coming as disabled and are not available for selection in tab 'Select Model Access'.
Also only Type "Single Roles" appear for assignment or selection in the "Model User" form. Type "Role" appears disabled.
Request help, thanks.
Regards,
Piyush.

Thanks all for the suggestions but issue persists.
I ran repository object sync in full sync mode for the portal system.
I re-imported the portal groups.
Still as earlier while using "Model User" request, I can see the groups with the reference user but it is grayed out and not available for selection.
The other three scenarios (Access request, Copy Request & Template) work fine. In those request I can select the portal groups as well.

Access Request Creation - Role or System Required at Creation

Hi - We are installing GRC 10.1 SP6. When I create a request it is forcing me to include at least one system or role. Is there a system setting that I'm missing to not enforce the requirmenet to add either a system or a role at the time you create a request?
This is not a huge deal to me as I created templates that include the systems we provision to by default. However, if I don't need to include a system or role at time of request creation I would prefer that this requirement be turned off.
Thanks,
Rich

Hi Richard,
additionally to what Colleen has already mentioned you can set up the provisioning configuration in the way that you don't have to select a system in the access request. So basically a requests requires either a system or a role. Most of the time (best practice) users select a role without a system. Personally I also recommend that way as the system comes with the role automatically.
In the global provisioning configuration (SPRO > AC > User Provisioning > Maintain Provisioning Settings) you have to define that the user gets created when the role gets assigned.
Alternatively, as you would like to remove both, you can check if it is workable via the request type settings. I don't have a system to test, but you might be lucky. Remove the "Assign object" action from the request type and check if it is still mandatory to add at least one assignment.
SPRO > GRC > AC > User Provisionign > Define Request Type
Please let me know if this helps.
Regards,
Alessandro

GRC 10 Not able to search roles in Access Request Creation

Hello Experts,
I am unable to search for roles while creating access request by giving system name.
I am able to search with any other search criteria except system.
When I look for valid entries for System I get the following connector group values:
ECC - (Custom Connector Group)
SAP_BAS_LG
SAP_ECC_LG
SAP_HR_LG
SAP_R3_LG
All the above connector groups are pointing to the same system XXXCLNT100. I want to get only ECC as the result when I search for the system (Probably then it might work right).
Others that start with SAP are linked to the XXXCLNT100 for generating rules after activating BC Sets.
Any ideas how to get this work !!
Thanks and Regards,
Ajesh Raju.

Found Note:
Note 1654033 - Role search by System is giving same result
Regards,
Ajesh.

Re: Changes to screen field date was not updated

Hi,
I had a dialog screen showing a valid from date as 10.10.2007. I changed it to 15.10.2007 and click on other details tab. when I returned, it is still showing the old values.
When I did a DEBUG, upon changing and hitting enter key, the new dates for the screen field is not changed. it is still showing the old date for the screen field.
why is it so?
I think this is the cause of why the old values is still displaying. How can I get the field updated to my internal table. It need to be filled with the new values before I can updated to my internal table and then re-displayed again.
How to get the new values into the screen field?

Hi..
As i understatnd this field is in TABLE Control.
In that case you must Update the Internal table in the PAI .. Inside LOOP .. ENDLOOP.
Process After Input.
LOOP AT ITAB.
   Module Update_itab. "Calling the module
ENDLOOP.
<b>In Module pool</b>
   Module Update_itab INPUT.
    modify itab from wa index TABCON-CURRENT_LINE.
   ENDMODULE.
Note: Here WA is the work area of the Screen fields and TABCON is the Table control variable.
<b>Reward if Helpful.</b>

Screen field (MEPO1211-KONNR) not populated user exit ZXM06U43

Hi Expert,
I have to check Outline agreement (EKKO-KONNR) in the user exit ZXM06U43 when creating or changing PO. one screen field (MEPO1211-KONNR) is provided for that. But value is not populated into that field(MEPO1211-KONNR) for this user exit ZXM06U43, its always blank. Infact hole structure (MEPO1211) is blank for this exit.
So can anybody provide me the screen field name so I can get the value of KONNR in this exit.

Hi,
In the user exit - EXIT_SAPMM06E_012, YOU CAN ONLY DO CHECKS/VALIDATIONS;
you have a paramter I_BSTYP which hold the type of the document(PO/Out Agreement/PR).
Paramter I_EKKO will hold the data entered on the screen. It will be the incoming data which can be used to validate.
TO PASS THE DATA, CHECK the below exit:
EXIT_SAPMM06E_018 : Import Data from Customer Subscreen for Purchasing Document
EXIT_SAPMM06E_007/EXIT_SAPMM06E_006: Export Data to Customer Subscreen for Purchasing Document Header
Hope this helps
Regards
Shiva

Feature Request: A way for edit-field text to not be selected by default.

edit_field text is selected by default, which means as soon as the user starts typing, pre-existing content is wiped out - not cool...
Thanks,
Rob

I've found a partial workaround to this: Once the dialog is showing, if the you first assign the empty string and then assigned the desired value:
edit_field.value = ""
edit_field.value = desiredValue
then the contents of the field are not left selected. This works when setting the contents from, say, the result of a button push, but I haven't figured out how to initially show the contents unselected.

Screen field char value not possible

Hello,
I have a text field in my screen. This field is associated with a table field of type CHAR with lowercase possible.
The problem is that when the user starts the text for example with a ! the field gets erased. If the user writes a normal text it is accepted.
Anyone knows how to prevent this?
Thank you,
Nuno Silva

Hi ,
For character fields, you can suppress this behavior by setting the 'Without template' attribute for the field.
If you do this, the system does not interpret any characters of the input.
The attribute is located in the Screen Painter (transaction SE51) among the attributes of the relevant field.

Select all where field value is not distinct

Hi.
Let's assume I have a table SAMPLE with data like this:
ID | Number |      date | Data1 | Data2
1 | 0001 | 2001.01.01 | Data1-1 | Data 2-1
2 | 0001 | 2011.01.01 | Data1-2 | Data 2-2
3 | 0002 | 2010.01.01 | Data1-3 | Data 2-3
4 | 0003 | 2008.01.01 | Data1-4 | Data 2-4
5 | 0003 | 2009.01.01 | Data1-5 | Data 2-5
6 | 0004 | 2000.01.01 | Data1-6 | Data 2-6
7 | 0003 | 1999.01.01 | Data1-7 | Data 2-7
What I need is to get all the data from the rows that have NOT distinct Numbers. That is:
ID | Number |      date | Data1 | Data2
1 | 0001 | 2001.01.01 | Data1-1 | Data 2-1
2 | 0001 | 2011.01.01 | Data1-2 | Data 2-2
4 | 0003 | 2008.01.01 | Data1-4 | Data 2-4
5 | 0003 | 2009.01.01 | Data1-5 | Data 2-5
7 | 0003 | 1999.01.01 | Data1-7 | Data 2-7
Note that numbers may not only have duplicates, but triplicates, quadruplicates and n-plicates as well. All the other data in the row may or may not be distinct from the data in other rows with the same Number.
I used
select number, count(number) from SAMPLE
group by number
having count (number)>1
but that only gives me the non distinct numbers and their total count, each number just once. Any ideas how to get the whole record?

Hi,
user9234293 wrote:
It seems to work on Oracle, but not on Informix. By any chance any ideas why?Sorry, I don't know anything about Informix. Since this question only concerns Informix, maybe an Oracle forum isn't the best place for it.
What exactly doesn't work?
Are you getting an error message? Post the error message.
Are you getting the worng results? Explain.
Does Informix lack analytic functions? Then you could do a GROUP BY query, like you originally tried, to get the values that occur more than once, then join the original table to that result set.
Does Informikx not allow sub-queries? The do a self-join of your table, matfching every row to all rows with the same value of number_col. GROUP BY all the columns from one copy of the table, and show use "HAVING COUNT (*) > 1".

ARQ: Default Role Provisioning Problem in Access Request???

Hi,
This Business Scenario is very common to have default role(s) assigned to a User at the back end system. So I have the same requirement. In achieving this, I followed below thread here:
MSMP Issue - GRC 10
I have also followed the note#1616092 for configuring the Default Roles.
I have performed below activities:
1. Param#2009 = YES
2. Param#2010 = 001
3. Param#2011 = REQUEST
4. Param#2013 = SYSTEM
5. Param#2038 = YES
6. Imported a test role and NO ROLE OWNER is maintained.
7.In NWBC->-AM->RM, I maintained a test role as a default.
Now when I raise a request, application is successfully adding the default role to the request. However, the problem I am facing is that, one Manager approves the request, it is getting failed.
The Audit Log says that, the STAGE is "Completed" but I could also see "No Agent Found, Cancelling path XYZ (in stage no. 002- GRAC_ROLEOWNER)
May I know what I am missing here? Why I am getting error and how can I resolve it?
Please advise.
Regards,
Faisal

Hi Faisal,
sorry for late resposne I was away traveling.
default roles are being added by default to access request
Yes, these roles are added to the access request.
FN: OK
and this roles are following your normal paths which I guess assumes manager and role owner.
How such roles (not having role owner) will follow the normal path Manager->Role Owner if we are enabling routing (Rule ID: GRAC_MSMP_ROUTE_NO_ROLEOWNER) at manager stage level? Can you please help me understand this?
FN: OK If you enable routing it will go to routing path. I have understood your post as you put in question the behavior of default roles and my point was - they act exacly the same like regular roles.
- request is going to detour path
Does it answer my question?
FN: My point was default roles like all other will go to detur path (assuming you setup it globaly)
Deafault roles can have separate path (in my case) where only supervisor is approving it.
Instead of "GRAC_MSMP_ROUTE_NO_ROLEOWNER" I believe we can have our own rule to have a separate path for such default roles based upon business requirement. Correct me, if required.
FN; correct
It was design in way that initiator rule based on role crtivality is sending this rule to separate path without role owner.
Again, I believe you have enabled your custom rule here to achieve your business requirement instead standard rule id.
correct
If you do not have separate path - this role like any other will follow standard path you have.
Here, I had used a stage called "ZNO_STAGE_PATH" for routing the system line item, which does not have any owner. I used the same path ID for "GRAC_MSMP_ROUTE_NO_ROLEOWNER"Rule ID and it is working fine as of now.
FN: good
My question is that, do you think if I don't use "ZNO_STAGE_PATH" as Path ID for "GRAC_MSMP_ROUTE_NO_ROLEOWNER" Rule ID, should it follow the standard Manager->Role Owner path and these default roles get approved and assigned automatically?
FN: You should use the path ZNO_STAGE_PATH as path ID for routing rule.
If the role does not have role owner it will not allow you the even get to Role Onwer stage - request will be detured.
My point from the begining was - instead of using the routing rule - in our case we used separate path for default roles without role owner:) only consisted with manager stage. Again your approach is different but also will work.
Then which Path ID should I use for "GRAC_MSMP_ROUTE_NO_ROLEOWNER" Rule ID, as it is mandatory?
Should I use my current path for New/Change Account where at Manager level this was routed due to non availability of role owner?
Are you asking for default roles?
Please advise.
Regards,
Faisal

How to make a screen field as selected when we place the cursor in the fiel

Hi,
   I have a requirement like, needs to be automatically select a screen field value when i place the cursor in that field.
    The screen field value should be displayed in blue color as like we select the value using shift-end. when a new value is entered in that field, it should over-write the existing value.
     Any pointers would be appreciated.
Thanks,
Gopi.R

Hi Gopi,
you can look into some examples in transaction
DWDM or BIBS
Thanks,
Krishan

RF Monitor - add screen field

Hi.
Is it possible to add a field in the report and how? or is there any user-exit?
Thx.

If your client/employer allows CORE-MODS then go ahead and make the changes just as you'd change any screen field. If not, I suggest you look at GUIXT. This comes standard as part of 4.6 and up ...
I suggest that you add this field (and necessary PBO/PAI logic) in custom tab and use GUIXT to display this field in whichever tab/screen you choose to.
You can go to GUIXT.com and check out sample code on how to do this. Its very simple, you should be able to go through the tutorial and do it yourself.
Raj

How to skip the mandatory field validation for clearing the screen fields

Hi Friends,
I have created a module pool screen, and made some fields mandatory. after entering some fields, if i try to clear the fields, am unable to clear. Its throwing the error "Enter all required fields"., since some mandatory fields are there. But i could able to navigate through other screen. Both the "CLEAR" and "NEXT" command are given in the at-exit command only. Next is working but clear is not working.
Please provide me the solution.
Thanks
Karthikeyan.L

Hi,
To avoid automatic input checks you have to assing function type - E to appropriate screen field, which is not to be checked.
These function codes don't trigger PAI processing, instead they go directly to
MODULE mod AT EXIT-COMMAND.
..placed in PAI of the screen. In this way you can ommit automatic checks performed by system on mandatory fields. Please ensure you have assing E type to next and clear functions in GUI status.
Regards
Marcin

Access request creation - select roles screen - field boxes were not aligned

Similar Messages

Maybe you are looking for