GRC 10.0 CUP - Function Approval Workflow - Decision pending?

Hi, i am customizing the Function Approval Workflow (SAP_GRAC_FUNC_APPR).
I have one stage with only one agent authorization. The agent approved the request but in Search Request:
Instance Status:  Running
Instance Approval Status: Decision Pending
Audit Log:
+ Request XXXX submitted..
+ Request is pending for approval at path GRAC_DEFAULT_PATH stage GRAC_DEFAULT_STAGE
Approve ID: zzzz
+Approved by ZZZZ at path GRAC_DEFAULT_PATH stage GRAC_DEFAULT_STAGE
I don´t see the function in GRC. I´m in SP07
Regards
Ignacio

Hi, my workflow Function Approval (default) have a wait event and i can´t delete this step succesfully.
Here are more images about the workflow configuration of Function Approval.
http://es.zimagez.com/zimage/wf10.php
http://es.zimagez.com/zimage/wf20.php
http://es.zimagez.com/zimage/wf30.php
http://es.zimagez.com/zimage/wf40.php
http://es.zimagez.com/zimage/wf5.php
http://es.zimagez.com/zimage/wf6.php
http://es.zimagez.com/zimage/wf7.php
http://es.zimagez.com/zimage/wf8.php
Thanks,
Regards,
Ignacio Barrionuevo.

Similar Messages

  • GRC AC V10 - Mitigation Control Approval Workflow

    Hi guys,
    can me explain somebody the difference between the processID SAP_GRAC_CONTROL_ASGN und SAP_GRAC_CONTROL_MAINT?
    And as well can somebody provide me the initiator rule ID for both so that we can have a detailed look into the brfplus rule.
    We only want to mitigate controls via an controlowner approval and not a process for the creation of new controls.
    That means an asisgnment approval workflow for mitigation controls.
    Thanks a lot.

    Hello Alexa,
    Did you ever employ SAP_GRAC_CONTROL_ASGN ? Were you able to identify the included agents ?
    I am interested in identifying approvers for mitigating controls who can be included in the workflow but are not risk owners. Would you have any suggestions for this type of agent ?
    Any information would be appreciated.
    Thanks,
    Jamie

  • GRC 5.3 | CUP | Specific Interesting Workflow

    Can anyone tell me if the following is possible:
    Use as a stage CAD the web service 'Role Approver' in a AE workflow (while this is more a CAD for a RE workflow)
    Risk owners have been defined in RAR. It is possible to enforce Risk Analysis before aproving provisioning in an AE workflow. Question: Is it also possible to automatically let GRC send an email to the relevant risk owners for approval only, i.e. only those for which Risk Analysis defined issues.
    Is it possible to have as a stand-alone stage a risk-analysis which is initiated by the GRC system itself? (Maybe a "no stage" CAD with enforced risk analysis, but what happens with the result. - Reason: see point above.)
    For more info, this is the workflow we'd like to implement
    Request Submitter requests a set of roles
    Only some - critical - roles need approval of a role owner
    If all required roles are approved/rejected, automatically a risk analysis takes place
    Issues that come out of that risk analysis are emailed for approval to the Risk Owners defined in RAR
    If all approve (not reject) -> auto provisioning
    I have no test system at my disposal so thank you for all input in advance!

    Hi Karell,
       Here is response to your questions:
    I can use the following CAD in an AE workflow: web service to fetch role approvers. I question this as it is merely a RE workflow service : No. As far as I know the web service is only for RE/ERM.
    Can the Risk Analysis be initiated in stage x automatically once stage (x-1) was completed. So no person involved, it is mandatory however, in my opinion there should be no extra person involved to actually press the button "Risk Analysis" : No. There is no way to automate the risk analysis part. Someone will have to click on the button to check for SoD violations. You can configure to run automatic risk analysis when the request is submitted but this is not 100% perfect. If someone adds or removes role during approval phase, it will invalidate the risk analysis which was run during request submission.
    Can somehow the Risk Owners defined in the RAR componed be asked to approve/reject risk that came out of the Risk Analysis described in my previous point. They should only be contacted when there is a risk indicated. : This is possible by following Babak's workflow.
    Regards,
    Alpesh

  • ERM - CUP Approval Workflow E-mails

    Hello gurus,
    We are experiencing an issue with Role Expert (ERM) to Access Enforcer (CUP) role approval workflow. When a role reaches the approval stage in ERM, an e-mail notification with a link to CUP approval is sent to the designated approver's LDAP e-mail address.  This functions properly.  Following approval or rejection of the role, another e-mail should be sent to the requester's e-mail address to inform him/her that the role has been approved/rejected.  This e-mail is not functioning.  We have the same e-mail address configured in the LDAP, UME, and back-end SAP system, but this e-mail address is not receiving any notification of approval/rejection.
    This functionality is appropriately configured in CUP with the following:
    Name: RE_APPROVAL
    Workflow Type: Role Expert
    Approval Determinator: RE_APPROVAL
    Request Wait Time (Days): 0
    Request Wait Time (Hours): 0
    Escalation Configuration: None
    Approval Type: Any One Approver
    [No e-mail group]
    Request Rejection: Yes
    Re-Route: No
    Confirm Approval: Yes
    Confirm Rejection: Yes
    Reject By Email: No
    Approve By Email: No
    Forward Allowed: No
    No additional security.
    Has anyone seen this issue before?  Any advice for troubleshooting will be greatly appreciated.
    Thanks,
    Joy

    Hi everyone,
    We are experiencing something similiar as Joy related.
    We have configured in CUP 5.3 a workflow for ERM role approval with two stages.
    In both stages, the e-mail notification with a link to CUP approval is sent to the designated approver's e-mail address, but following approval or rejection of the role, the e-mail informing the role has been approved/rejected is not sent to the requester's e-mail address.
    In the first stage, the CAD is configured to send the request to the approver defined in the role in ERM (web service). In this stage, the requester's e-mail address is not receiving any notification of rejection but do recives all notifications of approval.
    The second stage is configured with a fixed approver, and in this case the requester's e-mail address is not receiving any notification of approval nor rejection.
    Any suggestions of what can we do to make this work?? We wolud like that both (approval and rejection) notifications be sent to the requester's requester's e-mail address.
    Or, if it is possible, can CUP be configured to send e-mail notifications of approval and rejection ONLY in the LAST stage of the workflow??
    Regards,
    Pablo

  • GRC AC 10 CUP : Provisioning of Approved roles (Line Item)

    Hello Gurus,
    We have configured CUP in GRC AC 10, and mapped a workflow for the same.
    Now when a user request for new roles e.g.) 3 roles
    Role 1 , Role 2 , Role 3 each roles has a different role owner.
    When the request goes to the role owner for approval and 1 of the 3 role owner rejects the request the whole request gets rejected.
    Is it possible to have functionality where roles which are approved will go ahead and get "Provisioned" and the whole request wont completely get rejected ??
    Looking forward for your inputs !!
    Thanks in advance.
    Regards,
    Victor

    Hello Victor,
    I guess you can work with the approval/ rejection level (stage 5 in the WF configuration).
    Have a look at here: http://forums.sdn.sap.com/thread.jspa?threadID=1637574
    Cheers,
    Diego.

  • Can  approval workflow in GRC  be avoided

    Hi All
    i  have  following query
    Following are the steps
    1) I am using Oracles Identity Management  .
    2) User data iam fetching from OIM
    3) Iam using SAP GRC 5.3 ( CUP )
    4)  I am using  SAPGRC_AC_IDM_SUBMITREQUEST web service  for request Type ( eg ) say New ACCOUNT
    5)  A request id is generated
    6) Now can i provision the user  into the SAP backend system without the approval process
    7) if yes then let us know how it is done
    In short can we bypass the approval workflow in GRC ( as approval has to be done at Oracles Identity Management  ) and directly provision the user  into the SAP backend system
    Thanks
    Jagan

    That's an easy one:
    - go to the stage configuration of your provisioning workflow
    - chose "No Stage" as the approver determinator
    Done.
    Frank.

  • Invoice Approval workflow - forward functionality with AME

    Dear,
    We are on R12.0.6, setting up AME for invoice approval.
    Looking at the Invoice Approval process Approval lookup type I don't see 'forward' or 'approve and forward' lookup codes.
    Does it indicate that 'Forward' and 'Approve and Forward' functionality is not implemented for the Invoice Apporval workflow?
    The AME documentation on the other hand discusses forwardingBehaviors.
    If anybody went through this and can through any comments on the subject of the forward functionality in the invoice approval would be great!
    Thank you
    Anatoliy

    Pl post details of OS, database and EBS versions.
    In 11i, using AME is a requirement. I believe the same applies to R12 also.
    AP Invoice Approval Workflow White Paper (Doc ID 293152.1)
    A Guide to Invoice Approval Workflow - setup and demo (Doc ID 299618.1)
    HTH
    Srini

  • GRC 10.0 Upgrade & Functionality - 4 Questions

    Hi Forum,
    We are currently evaluating upgrading to GRC 10.0 from 5.3 and also start using SPM. Currently, we only use RAR. Can you guys help me with following 4 questions?
    1. We have a number of different firefighter roles used by different teams and approved by different approvers. Can we have separate requester and approver lists for different firefighter accounts in GRC 10.0 SPM?
    2. Do we have to implement GRC 10.0 Portals for SPM approval workflow?
    3. We have license for all GRC modules. Does this also include Continuous Transaction Monitoring with Oversight or is a separate license required for this?
    4. Does GRC 10.0 support automatic archiving of AC-RAR SoD reports? - When I start a weekly background job, can it be automatically archived into an archive folder of my desigantion?
    Thanks so much for your input.
    Joerg

    hi Joerg
    1.Yes, you can have different approvers per firefighter ID and have the requestors assigned to different ones as well.
    2.You do not need to install portal but you will need to facilitate some access to the front end components through activating the NWBC Netweaver Business client or using a web browser to view the internet facing services in SICF.
    3. I don't believe that your GRC license automatically entitles you to the Oversight product suite as they are still separately marketed, however the GRC Process Controls and Risk Management modules can be included if you have a full enterprise GRC license from SAP.
    4. You could certainly manage to archive the reports using standard SAP ABAP functionality (SARA). However, If you mean the standard Batch risk Analysis, then I think you'll find that the offline content is overwritten with the latest and only the summary data is retained in the historical data tables for trend analysis. From an audit perspective, historical detailed data is not partuicularly useful since they are more interested in current exposure. Auto archiving of the SPM logs is available as standard.
    Regards,
    Simon

  • SOD Detour in Role Approval Workflow possible?

    Hello GRC Experts,
    we have implemented an Access Request Approval Workflow with a Detour Rule (GRAC_MSMP_DETOUR_SODVIOL).
    The second workflow we are working at is the Role Approval Workflow. Is it possible to use the SOD Detour Rule also in Role Approval Workflow? I didnt find the SOD Detour Rule in the MSMP Role Approval Workflow.
    We would like to implement a following Scenario:
    if the role contains an SOD the request should take Path 1 and if not Path 2.
    Is it in MSMP Standard possible or should we use BRF+ for creating a Detour Rule?
    Thanks,
    Best Regards
    Sabrina

    Hi Sabrina,
    For Access Request workflow, we generally use GRAC_MSMP_DETOUR_SODVIOL to implement routing rule(based on detour condition - risk found). Purpose of same (if I am not mistaken) is to through the request to another level of approver wherein mitigation monitor agent reviews the mitigation performed by role owner stage and approve/reject the request.
    But, when we create a role same is not the condition as we do not mitigate role level risk thus no need to go for mitigation monitor stage. May be you have some business scenario, if you can let us know will be gr8.
    For the rule ID, did you try adding the rule ID ?(you may already know, still would like to cross check with you).
    GRAC_MSMP_DETOUR_SODVIOL under list of rules for "
    Role Approval Workflow" In the screenshot you have shown, just click on ADD feed -
    Rule ID -GRAC_MSMP_DETOUR_SODVIOL.
    Rule description - same as Access request.
    Rule type - Function module based
    rule kind - routing rule.
    Add this and check if it works and let us know the result too.
    Regards,
    Nishant

  • How to troubleshoot approval workflow of a rejected purchase order

    Hi,
    We are working in oracle applications 11i.
    I have a purchase order with status rejected that has hanged up in the system. The user rejected PO and the document has not been transferred to the PO buyer. From the application forms -> Forward documents window, I can see that neither the user who rejected or the buyer has the document.
    From System Administrator responsibility I can see that the workflow administrator can modify a PO that is only IN PROCESS,
    what shall I do?

    please check :
    http://oracle.ittoolbox.com/groups/technical-functional/oracle-apps-l/how-to-troubleshoot-approval-workflow-of-a-rejected-purchase-order-4211332

  • Offline approval workflow not working - SRM 5.0

    Hi Team,
    Suddenly we have an issue in SRM production server with Offline approval workflow, inbound mails are not getting processed in SOIN and workitems are not getting cleared. So document status is not getting changed.
    There is no problem in receiving the mail, we have all configurations setup as per below link,
         Offline approval - general configuration - Supplier Relationship Management - SCN Wiki
    Incoming mails are received to system user and then auto-forwarded to dialog user. Dialog user is used to schedule the batch job - RBBP_OFFLINE_EVAL.
    Please help to resolve this issue,
    Thanks
    Rajesh Rajagopal

    Can anyone please help me on this issue, offline approval functionality is completely stopped
    Please provide your help

  • Inconstancy in Approval Workflow- Process Controlled Workflow

    Hello Experts,
    We are in SRM 7.0 classic scenario using process controlled workflow and facing an issue as described below:-
    During the approval workflow, we are observing that in
    Case 1: When approver3 is forwarding the work item to approver10, the approver10 in not getting the work item in his Inbox. However, when we see the log detail in SWI6 the status is shown as u201CREADYu201D
    Case 2: We created a shopping cart with identical details as in Case 1 and followed the same approval process i.e.Approver3 forwarding the work item to approver10, however in this case approver10 is getting the work item in his Inbox and when we see the log details in SWI6 the status is shown as u201CCOMPLETED"
    We tried this scenario for 10 times and we found that in 2 cases the approval status is showing as u201CREADYu201D while in other 7 cases the approval workflow got completed.
    Can you all experts please help us understand why this is happening and how can be find the root cause i.e why Case 1 is in u201CREADYu201D status for last 2 days.
    We seek your help in understandingroot cause so that we can eliminate any inconsistency in future.
    Any pointers to resolve this issue will be highly appreciated.
    Thank you in advance.
    Regards,
    RKS

    Use class /SAPSRM/CL_WF_APV_FACADE. This is used by standard SAP WF Analysis.
    Methods - RETRIEVE_PROCESS_HISTORY, GET_CURRENT_PROCESS_STATE, CREATE_PROCESS_FORECAST.
    To analyze more, check the program /SAPSRM/WF_CFG_ANALYSIS_002. Check lines 209...216 (These Lines pull Previous Approved Steps, Current Process Step & Gets the approval forecast). However the REJECTED Items (Accept Decision) work little different (which is not captured by this report).
    To Identify the current approval process awaiting decision by the requester of the cart, use method GET_CURRENT_PROCESS_STATE, return parameter structure /SAPSRM/S_WF_PROCESS-PROCESS_LEVEL_LIST-DECISIONSET_LIST-ITEM_STATUS_LIST gets you the current status of the item (ACCEPTED, REJECTED, OPEN, INQUIRED). If ITEM_STATUS_LIST-ITEM_STATUS EQ 'REJECTED', then the WF is waiting for acceptance/resubmission from the requester.
    To your specific need, pass DOCUMENT_GUID to the class /SAPSRM/CL_WF_APV_FACADE=>GET_CURRENT_PROCESS_STATE get the return parameter /SAPSRM/S_WF_PROCESS. It will give you PROCESS_LEVEL_LIST. Then loop through DECISIONSET_LIST. It contains Table Types of AGENTS_LIST, ITEM_STATUS_LIST, WORKITEM_LIST. At /SAPSRM/S_WF_PROCESS level, you can get all the details of the current process level details
    Thanks,
    SC

  • Viewing Approval Workflow as a Customer

    Viewing Approval Workflow as a Customer
    I have a service where there are five service group authorizations.  When viewing the submitted requisition as a customer, the following delivery process is presented:
    --- Delivery Process ---
    Service Group Authorization (Status = In Progress)
    Delivery project for <<Service Name>> (Status = Pending)
    I was not able to locate where the customer can view the approval workflow.  There is just one line in the delivery process (Service Group Authorization) indicating approvals are in process.  The customer does not know how many approvers or who is approving.
    Emails could be sent after each approval, but this still does not address the concept of the self service by checking the status of the request online.
    Is there a way to view the approval workflow as a customer?

    Angelo - I agree, we've also submitted it as a feature request.  Cross our fingers for version 10. 
    Ed - Where we get a little confused about the feature request process is that, other than finding out in the monthly calls, we never seem to be able to test possible features before they get released.  An old one of ours was 'released' until we tested it and worked out that our requirements did not match the functionality.
    David... one suggestion, though a bit of a hack, would be to look at the TxActivity table and try and have an insert/included page in the RequisitioneEntry Summary page (requisitionentrystatus.jsp I think) that checks the DB for the given ReqEntry and graphically (or textually) builds a table to highlight the stages.  Something we've had a couple of dreams about but haven't moved forward with - it would be something 'external' to the RC application but included in the presentation.
    Thanks,
    Ant

  • PO approval workflow customization

    we want to send email notification to supplier upon approval of PO approval. Is there any default functionality available or we have to customize a PO approval workflow.

    Hi,
    I believe the feature is available.
    Oracle Purchasing User's Guide Release 11i/R12
    http://www.oracle.com/technetwork/documentation/applications-167706.html
    Setup Notes for E-mail Purchase Orders [ID 198539.1]
    Release 12: New Features For Purchasing Approvals [ID 429314.1]
    FAQ: Document Approval and Routing [ID 210488.1]
    Thanks,
    Hussein

  • Need 2 metadata fields from item I am running a approval workflow on to show up on the task list

    I have document library "A" that contains many documents with 6 columns of metadata. I have a simple approval workflow for the library that works as it should in functionality. My users would like it if 2 fields of metadata from the items in library
    "A" would show up in the Task list so they could track the tasks by the 2 fields. Can anyone point me in the right direction here to make this happen? Working in SP2010 with Designer 2010 and IP 2010.
    Thanks 

    Hi Ross,
    According to your description, my understanding is that you want to display two managed metadata fields in the associated tasks created in the approval workflow.
    I recommend to edit the approval workflow in SharePoint Designer and new two task fields to display the two managed metadata fields.
    Here are the detailed steps:
    Open the approval workflow in SharePoint Designer and click Approval in Start Approval Process step.
    Click New to create two task form fields in single line of text type.
    Click Change the behavior of a single task under Customization.
    In Before a Task is Assigned step, select Set Task Field under Task Behavior Actions and then set the newly created task form fields to get the values in the managed metadata fields of current item.
    Please refer to the picture below(create a task form field called Managed Metadata for example and mm is the managed metadata column in the list):
    Best regards.
    Thanks
    Victoria Xia
    TechNet Community Support

Maybe you are looking for