AC10: Define role approvers based on system?

Hi,
we have a ERP landscape consisting of Dev, Test and Prod system.
They all have the same roles, so we uploaded the roles into GRC10 to a landscape of those 3 ERP systems including role approver.
However, we would like to provisioning to all 3 systems from GRC, but only for Prod there should be a role approver.
Due to the same role naming:
How can we differentiate that role A in system Dev and Test goes through without approver and in Prod has an approver. Is there a simple way to do this?
We do not want to set up a different workflow for this.
Thanks,
Daniela

Hi Anjan
I'm very confuse with the creation of BRF+ rule and the MSMP rule.
First, I created a BRF+ rule. With a table decision, but i dont know how to select the "result colum" as "Role Appover or role owner".  I selected the result colum with conditioning group, using the Conditing Group ID in Role owner definition in NWBC/Setup
Then in MSMP i tried to created  a rule in the step two with error: "Select a valid rule id".
could you help me with this dubt. Or maybe you can share with me material about role approvers and brf+ and MSMP.
Thank you in advanced!!

Similar Messages

  • AC 5.3 Define role approvers based on System

    Is there a way to define different role approvers for the same role name in different systems?  ie., in production system A, the role is named Role123 and in production system B, the role is named Role123.  How do I get different approvers based on system/role in AC 5.3 sp 16?

    Hi,
    the only option to define different role approvers based on role and system, is to use the custom approver determinator.
    regards,
    N
    Edited by: Nuno Jesus on Oct 10, 2011 12:30 AM

  • How to define role approver/owner - through condition id in ERM 10.0

    Hi All,
    We have created a BRF + rule for Role approver with Business Process & Function area by giving the Result value as Condition ID eg., Z001
    We have provided this condition ID Z001 - in Role Owners table [Under Set Up- Role Owners] and defined the role approver and assignment approver with the User details.
    Now when we are trying to create a role with the above attribute combination of Business Process & Function area - the role is not picking up the Role Owners automatically in Owners/Approver tab [In 5.3 we can maintain approval criteria where we can define the role owners/approvers based on different attributes].
    Are we missing any configuration setting here for auto pick up of Role Owners based on defined attributes from Role Owner table.
    Thanks and Best Regards,
    Srihari.K

    Hello All,
    Please help us , I am also struggling with same issue.
    Thanks in advance,
    Jagat

  • Role Approval request not visible in Role Approvers ToDo tab

    Hi IDM Experts,
    We have implemented IDM 7.2 SP8 in our project. We have performed the basic configuration for Identity center and IDM UI. The initial load from CRM is also completed successfully.
    We followed the steps in guide https://scn.sap.com/docs/DOC-26322 to configure workflow such that in case role is requested to be assigned to user, the request goes to role approver(in his todo tab) for approval. The access will then be provisioned into backend CRM system on successfully
    approval. However, we are facing an issue where the Role approver does not get anything in "TODO" tab for approval. The request shows in "Pending" status and logs show that tthe request is pending approval, however, it never appears in role approvers queue.
    Kindly help on the issue. Please provide below information:
    1) We can check in logs that the request is pending approval. Is there any way we can check where is the request routed to and whoose approval is pending here if it did not goto "Role Approver" for approval.
    2) Any trouble shooting mechanism/tool available in IDM to debug issues like this.
    Thanks in advance for your help.
    Thanks and regards,
    Nitin

    Hi Nitin,
    How do you assign the role to the user? if it's trought IDM UI, you loggin with which user?
    There is a limitation on approval with SP08 : the requestor of the assignement can not be define as an approver.... but in this case the approval is automaticaly rejected by the system ...
    in which logs / table can you see that your request is "pending for approval" ?
    I also would recomand you to use the simple scenario "get approver from role/privs" of as krishna mentioned. (unless you need to do more custum actions)
    Besides, you can check approval entries and status in DB views :MXWV_ApprovalQueue ...
    Fadoua

  • Error while trying to send a file through XI to SAP R/3 based OLTP system

    Hi all,
    I encountered with an error in the runtime workbench for the below mentioned scenario
    ERROR message
    <b>Unknown error: javax.ejb.CreateException: Neither messager server nor application server are defined for system IXI</b>
    SCENARIO
    The manufacturing system triggers an equipment failure. The failure message is sent through SAP Exchange Infrastructure (SAP XI) to the SAP R/3 based OLTP system,
    changing the equipment status to a failure state. This is achieved by triggering the execution of Remote Function Call (RFC) present in the OLTP system from the SAP XI integration server.
    Thanks and regards
    Jishi

    Hi Jishi,
    Please check the Receiver RFC communication channel in your integration directory.
    Check the logon parameters provided. From the error message, I guess there is no application server or message server provided, which is mandatory for XI to logon to the target backend R/3 system.

  • Wireless Client PING-Based monitor system question

    Hi:
    I joined this forums because i need to recopilate info about a monitor system.
    So, i have a relative big wireless network and due to legal instances I MUST use a ping-based monitor system to see the status of my network devices and the final clients on wireless station.
    We developed a php linux-based system to make pings every 5 minutes to see if there is a host UP or DOWN. Everything works fine, the server is making the pings to the clients and MRTG generates graphic statistics.
    Reference image -> http://img103.imageshack.us/img103/9125/pingred0xq.jpg
    The problem is now I have received a notification to make a change on this system to send the pings FROM the clients TO the server and generate statistics.
    Is there any difference between making pings from the Client side to the server and viceversa? Does round-trip time is different maybe?
    What are the technicals issues on this system?
    I accept every critic, advice, suggestion, information, etc.
    PS: Sorry my poor english

    That's interesting. It sounds as if you may have a good reason for implementing this, but it would also seem to be an inefficient monitoring scheme. A polling interval of 5 minutes does not give that much granularity for statistics even if you are able to make it work from the client side. Also, you would need to centrally collect the statistics in some way. If it were me I would stick to a centrally based monitoring system. I make heavy use of the syslog capabiliy on Cisco access points since they log just about everything. You can even have a syslog monitoring system page you for something as small as dropped wireless connection if you want to go that far.
    Sorry if that's not much help, but I would definately have some people look at the big picture before implementing the proposed solution.
    Good luck with it.
    R Duke

  • Connect SharePoint to SQL Server Database Then Build Rules Based Returns System

    Hello Guys,
    I work for an ecommerce business. We sell a wide range of products to customers all around the world which are ordered from our websites and then dispatched to our customers from our warehouses.
    I have been tasked with developing a computerised return system from the company because at the moment everything is done using paper forms.
    We have all our customer, order and product data within SQL Server databases.
    What I would like to know is...
    1. Can we connect sharepoint online to a local sql server database
    2. Could we then build searches within sharepoint to display data contained within these databases e.g. customer information etc
    3. How is the data presented in sharepoint - is there a way to design how the data is displayed within sharepoint etc?
    4. Can we then build a rules based return system within sharepoint? The on screen workflow would need to vary according to data contained within the database e.g. the weight if the product being returned and also on fields input by the service agent such
    as the reason for the return, what solution the customer would like etc.
    5. is it possible to build these workflows in such a way that they can be saved part way through then gone back to later
    6. Can reports be build based on the returns that are being generated e.g. list of products most commonly returned
    Sorry for all the questions, I am a bit of sharepoint novice. I think it may possible be able to do what we need but I just wondered if the answer to any of the above questions is definately a no because if it is that could mean it is not suitable
    Thanks

    You could use a BCS connection
    http://community.office365.com/en-us/b/office_365_community_blog/archive/2012/10/11/business-data-connectivity-services-in-office-365-sharepoint-online.aspx, this will allow you to edit data in your non SharePoint SQL DB, on premises, from Office 365 SharePoint.
    Search will index the web applications you point it at, and the lists from the BCS will be part of those web apps, site collections, sites at some place and will get indexed. 
    You can create views on the data, that can sort of work like a search, but when you search on the site where the lists are the query will return results based on the BCS data.
    These views can be based on criteria such as the weight of the product being returned and other fields.
    The data is presented as a list.
    You can make it read only or read-write based on SharePoint permissions on the list.  The account used to create the connection can edit.
    BCS is possible in on-premises SharePoint too
    here is a good read on it,
    http://www.dotnetcurry.com/showarticle.aspx?ID=632
    Stacy Simpkins | MCSE SharePoint | www.sharepointpapa.com

  • Logon is not possible because you have not been assigned to a business role; please contact your system administrator

    Hi experts,
    I'm having a problem when our project approaching the end.
    If I assigned the business role in parameter CRM_UI_PROFILE and PFCG role in SU01.
    It works fine,and the user can logon the web ui.
    Now I created a new organization model and position,assigned the business role and user to the position.
       A PFCG role was also assigned to the business role:
    Then I removed all the roles and profiles in user master in SU01.
    The user can not login CRM WEB UI and the system raised "Logon is not possible because you have not been assigned to a business role; please contact your system administrator".
    Can anybody suggest what the problem is? Is there any other settings I should make?
    I suppose that,since the user was assigned to the position the organizational model, the system can determine the user's business role, and through the business role, the corresponding PFCG role can also be determined.
    Am I correct?
    Thanks.
    Jerry

    Jerry, yes, you're right.
    Let me point you to pretty good explanation right here: Logon is not possible because you have not been assigned to a business role; please contact your system administrator
    So business role determination is taken in three steps (you can observe them in class CL_CRM_UI_PROFILE_DETERM method LOAD_PROFILES):
    1. From user's parameter  CRM_UI_PROFILE (method LOAD_FROM_USER_PARAMETER);
         If  CRM_UI_PROFILE = * then the user needs to have S_DEVELOP authorization object with OBJTYPE = 'DEBUG' (debug authorization).
    2. If not found on previous step: From organizational management (method LOAD_FROM_ORG_MANAGEMENT)
    3. If not found on previous steps: Based on PFCG roles (method LOAD_FROM_PFCG_ROLE);

  • Role Comparisons across Mutliple Systems

    Does anyone know an easy way to do a role compare across multiple systems?  Using the current SUIM reports only limits a compare between two systems.    Need to be able to look at the complete landscape from based upon a role.  Can SOLMAN help with this ?
    Any info or ideas would be great.
    Thanks

    Hi Mark,
    The best possible way is that you can schedule a job in every system which runs every 30 mins and it will do the user comparision for you in each of the systems. I have seen this working in one of my clients. For more information about this job you can search. Meanwhile let me check i can find the details for that job.
    Thanks,
    Avneesh

  • [SOLVED] Wince Exception 'Data Abort' (0x4) for gwes.dll with ROM based file system??

    Hello friends,
    Previously, I was using RAM and ROM based file system and my device was booting correctly. Now, I made only one change related to ROM based file system. When I selected this ROM based file system and try to boot the device.... I got the exception and the
    logs are ---- 
    3321 PID:400002 TID:410002 SetOpp: choosing AM335X_REV_ES2_1
    3321 PID:400002 TID:410002 SetOpp to 3
    3331 PID:400002 TID:590002 OALIoCtlHalInitRTC: Initializing RTC
    3331 PID:400002 TID:590002 RTC_SetTime() = 2006.01.01 12:00:00.000
    3480 PID:400002 TID:930006 ECC TYPE is BCH 8 bit
    3481 PID:400002 TID:930006 8Bit NAND device
    4835 PID:400002 TID:930006 CM3: input file [\windows\firmware.bin] is 9932 bytes long
    4837 PID:400002 TID:930006 CM3: firmware file read ok!
    5037 PID:400002 TID:930006 SDHC: CPU revision 0xffffffff
    5181 PID:400002 TID:930006 UCD_INIT: g_Dc.pUsb0Regs->MODE_R = 0x80
    5185 PID:400002 TID:930006 CAM3xxOTG::Init DEVCTL 80
    5391 PID:400002 TID:930006 UsbPowerModule: 2 DEVCTL = 0x00000081
    5664 PID:400002 TID:2df001e Exception 'Data Abort' (0x4): Thread-Id=02df001e(pth=9e451cc8), Proc-Id=00400002(pprc=8219f5e0) 'NK.EXE', VM-active=04510006(pprc=9e4658c0) 'GweUser.exe'
    5664 PID:400002 TID:2df001e PC=efd918b8(gwes.dll+0x000118b8) RA=efd918b8(gwes.dll+0x000118b8) SP=ab5ff960, BVA=00000024
    1529482 PID:400002 TID:2df001e Exception 'Data Abort' (0x4): Thread-Id=02df001e(pth=9e451cc8), Proc-Id=00400002(pprc=8219f5e0) 'NK.EXE', VM-active=04510006(pprc=9e4658c0) 'GweUser.exe'
    1529483 PID:400002 TID:2df001e PC=efd918b8(gwes.dll+0x000118b8) RA=efd918b8(gwes.dll+0x000118b8) SP=ab5ff960, BVA=00000024
    PB Debugger The Kernel Debugger has been disconnected successfully.
    After giving calibration inputs, I go the above exception and the LCD screen becomes white only... But i only changed the file system from RAM & ROM based file system to ROM based file system....
    As, I am trying to find the solution but up to now I am unable to find the solution. I request to provide the appropriate inputs???? 

    Hello Friends,
    After using the filter as an environment variable in the .bat file still the issue is not solved.. I can only see the Windows Embedded Compact 7 logo without any icon and toolbar??????
    My platform .reg files entries are as -
    ;; Load Device Manager to start storage driver
    #if (defined SYSGEN_FSROMONLY)
    [HKEY_LOCAL_MACHINE\init\BootVars]
    "Start DevMgr"=dword:1
    ;; Block driver settings to load at boot phase
    [HKEY_LOCAL_MACHINE\Drivers\BuiltIn\]
    "Profile"="FlashDisk"
    "Flags"=dword:1000
    ;; How to use storage space
    [HKEY_LOCAL_MACHINE\System\StorageManager\Profiles\FlashDisk]
    "AutoMount"=dword:1
    "AutoPart"=dword:1
    "AutoFormat"=dword:1
    "PartitionDriver"="mspart.dll"
    "MountAsBootable"=dword:1
    "Name"="NANDFLASH"
    "Folder"="NANDFLASH"
    "DefaultFileSystem"="FATFS"
    ;; Making storage device as a root
    [HKEY_LOCAL_MACHINE\System\StorageManager\Profiles\FlashDisk\FATFS]
    "MountAsRoot"=dword:1
    "MountAsBootable"=dword:1
    "MountPermanent"=dword:1
    "AutoPart"=dword:1
    "AutoFormat"=dword:1
    [HKEY_LOCAL_MACHINE\System\StorageManager\Profiles\FlashDisk\FATFS\Filters\fsreplxfilt]
    "dll"="fsreplxfilt.dll"
    "order"=dword:1 ; must be loaded before other filters
    #endif
    ;===============================================================================
    and .bat file entries are as -
    set SYSGEN_FSREPLXFILT=1
    set PRJ_ENABLE_FSEXTREPL=1
    set PRJ_ENABLE_FSMOUNTASROOT=1
    Where I am missing some thing please tell me???????

  • Tag-based package system

    Hello,
    I'd like to share one interesting idea (as I think ) with you. I've googled a little and looks like there is no distr, where this feature was implemented. Correct me, please, if I'm wrong and if this idea was offered earlier. And sorry for my no so good English
    I think that tags were really perfect idea and everybody can see how tags work in web, music, video etc. Tag-based file systems is another one step to absolutely convenient life of ordinary user and there some works around it (https://blueprints.launchpad.net/ubuntu … filesystem).
    I offer you similar (in some way) thing: add tags support to pacman. Look: if I'm a c++ programmer I'm definitely interested in everything connected with c++, i.e. compiler, build system, IDE, source checking utils, indexing system etc. Let's tag then g++, netbeans, scope, kscope with tag c++. I'm sure that everyone reading this post imagined a few more tags for packages that I enumerated: compiler for g++; ide, c, ruby, uml and java for netbeans; c, java, python, perl, php for cscope.
    Tags will make searching simple as never: if I need for example GTK image viewer that supports EPS and looks like photoshop, i just run 'pacman -Q --tags "gtk, image viewer, eps, photoshop"' and I will see gimpshop. Of course many of you already know that it is gimpshop, but for newbies (and not only them) tags will greatly help searching.
    In PKGBUILD tags will just look like: tags="sex, drugs, r'n'r"
    It would be great if somebody tell what he (she) think about it.
    Thanks.
    Best Regards,
    Dmitry Vinokurov
    Last edited by Raydan (2009-08-20 18:32:19)

    this has been discussed to death already
    we already have on old bug report, with many comments : http://bugs.archlinux.org/task/7132
    a part of the last comment was :
    Allan wrote:Dusty said: Every piece of meta-data on a PKGBUILD makes it that much more work to maintain.
    True, what portion of packages actually have a changelog?
    So even if pacman had this feature, it would take ages to define meaningful and consistent tags on all packages.
    ngoonee's idea is not bad, as it would allow to have this effort community-driven rather than developer-driven.
    Allan wrote:The question should be: is there a want/need for this in package management with pacman?  Whether or not Arch makes use of such a feature is beside the point.
    So I say someone should implement this if they really want to...
    actually a patch was written, by Ronald van Haren aka pressh, but this patch introduced a lot of duplication between group and tags code, as these two are quite similar.
    and anyway, if Arch is not going to make use of that feature, or use it poorly, because adding and maintaining tags is too much work, there is not a real need to bother implementing this feature properly.
    but again ngoonee's proposal of implementing this outside of pacman solves that problem too.
    So to sum up, if you want tags, just do it
    Last edited by shining (2009-08-21 09:48:38)

  • Can a 128 ssd storage still effectively work if I install windows 8.1 plus msoffice and a window-based proposal system? I plan to buy a macbook air entry level with 1.7 gh i5 processor.

    Can a 128 ssd storage still effectively work if I install windows 8.1 plus msoffice and a window-based proposal system? I plan to buy a macbook air entry level with 1.7 gh i5 processor.

    If you are going to use Mac OS X and its associated applications, and a BootCamp partition with Windows 8, and MS Office and all of the work created there, you will more than likely run out of space on a 128 GB SSD pretty quickly...especially if you put any music, photos or videos on it.  Those things take a lot of space so you will have to be very, very careful about what you want to put on a 128 GB storage space.  You would be better off going for 512 GB with what you plan on doing with it.

  • Integrate GRC 10.1 with CUA and how to import roles from CUA & Child systems into GRC for provisioning

    Hello,
    I am trying to integrate CUA into our GRC 10.1 system through the below steps and so far I have completed the below steps following SAP Notes 1680108 and 1616121:
    1. Connected CUABOX to GRCBOX like a plug-in system.
    2. Updated CUA Global System and CUA Model Distribution in Maintain CUA settings under User Provisioning.
    3. Next I am trying to import the roles from CUA(CUABOX) into GRC(GRCBOX) to be able to provision roles in CUA Child Systems(ECCBOX).
    After reading few discussions in SCN, I have figured that we have to download a template in Role Import and populate it accordingly to upload the CUA child system roles into GRC system for provisioning in CUA Child Systems.
    Unfortunately, this template has multiple fields and I am unable to determine the fields that should be populated as CUA Global System and CUA Child System to import into GRC. Also, when we upload CUA Child System Roles template what selections should be made in Role Import window.
    Any help in this regard is very helpful.
    Thank you,
    Pawan

    Hi Alessandro,
    I have "Create user if does not exist" setting checked for both change action and assign role action and also have CUA enabled. Here is the list of steps that I am performing:
    1. Create an access request for new account, T-CUA_CHILD and select a role from a child system ECC Z_ECC_ROLE_IN_CHILD_SYSTEM.
    2. Approvals provided to assign the ECC role.
    3. I see the following in GRFNMW_DBGMONITOR_WD.
               Auto provisioning activity at end of request at Path GRAC_DEFAULT_PATH and Stage              GRAC_SECURITY
                   New User:T-CUA_CHILD created in System(s): ECC (created without role assignments)
                   T-CUA_CHILD User does not exist in target system CUA
    GRC created an account without role assignment in ECC but also throwed me an error that the user does not exist in CUA.
    However, if I select roles from both CUA and ECC it creates the account in both systems with the selected role assignments.
    So I am wondering if there is way to provide CUA access to users by default for new account requests types. I have tried setting up default roles for CUA but it does not assign the roles by default until I select the CUA system.
    Thank you for your help!
    Pawan

  • AMD based Windows systems

    The "Windows Offline Download and Installation Instructions for Java Runtime Environment" has the following : -
    "Note: For AMD based Windows systems, the installation file is
    jre-1_5_0_11-windows-amd64.exe"
    Does this apply only to 64 bit systems?
    I have an older system with an ATHLON XP 2200 PLUS Socket A (1800mhz) CPU running Windows XP.
    I am having trouble running some JAVA applets with Firefox and want to make sure I have the correct version of JAVA installed
    Thanks
    Tarras

    You should just download the "normal" download. The AMD64 one is just for people running a 64bit system with a 64 bit Windows OS. That's a very limited number and if you're in there you definitely know it.
    So just grab the "normal" download (I can't remember but it will be marked with one of "x86", "i586" or just "intel").

  • Trying to view a linux based dvr system on my mac

    Im trying to remote view a linux based dvr system on my mac, I can log into the system, and use the controls, however I cannot view the video on any of the cameras, in windows it requires an active x control installed anyone know what the mac equivalent is?
    Thanks

    ...it requires an active x control installed...
    Simple answer: no.  ActiveX plug-ins are usually Internet Explorer only.  Thus you would not be able to view this on OSX.  You could install Windows on your Mac using Boot Camp or a virtual machine, but that's still viewing using Windows.

Maybe you are looking for