Access Enforcer 5.2 open request details including stage.

Dear All,
We have requirement to pull the open requests in Access Enforcer 5.2, with the information of the stage at which the open request is.
We have a workflow with 5 stages. Now we have requirement to pull the information about open request along with the respective stage in which the request is. In AE 5.2, we can pull the information for open or closed request, but not with stage information for open request.
Please assist is there any alternate way to pull this information. or the java table in which the request details are stored. We have access to database.
Thanks & Regards,
GRC Team.

There is a query below that you need to list in the SQL box, but this address varies based upon your support pack.  If you're up to date (or close to) on SPs, enter the following address into your web browser AFTER logging into AE:  http://<server>:<port>/AE/opensql_test.jsp.
Paste the following query into the SQL box:
SELECT DISTINCT
WPHST.REQNO,
WPHST.REQPATHID,
WPHST.PATHNAME,
WPHST.STATUS AS REQUEST_STATUS,
TBLPATHSTAGE.STAGENAME
FROM
(VIRSA_AE_RQD_WPHST AS WPHST INNER JOIN VIRSA_AE_WF_PTSTG AS TBLPATHSTAGE ON (WPHST.PATHNAME = TBLPATHSTAGE.PATHNAME) AND (WPHST.CURRENTAPPRVRSEQ = TBLPATHSTAGE.STAGESEQ)) INNER JOIN VIRSA_AE_RQD_WPTRN AS WPTRN ON (TBLPATHSTAGE.STAGENAME = WPTRN.STAGE_NAME) AND (WPHST.REQNO = WPTRN.REQNO)WHERE   
(WPHST.ISCURRENTFLAG = 1) AND ((WPHST.STATUS='OPEN') OR (WPHST.STATUS='HOLD'))

Similar Messages

  • Access Enforcer LDAP mappings

    Hello everyboby,
    I have Access Enforcer 5.1 VP1 and I would like to know how use the LDAP mappings.
    For example, I want recover the manager's name into LDAP automatically on Access Enforcer during an user request.
    Thank you very much for your assistance.
    David Heang

    Hi,
    First you need to connect the Connector for the LDAP when the Connector is working, You need to define the LDAP Mappings.
    For Recovering the Manager Name in to Access Enforcer from LDAP (Active Directory) you need to Map the  LDAP Entry classs object "<b>manager</b>" to the Access Enforcer "LDAP Mappings"
    Now the Manager for the User will be picked up if the Relationsip is defiend in the LDAP Directory.
    LDAP Objects are different for the Different LDAP Types.
    Hope it Helps,
    Vikas

  • Access Enforcer (error in creating a request)

    Hi All,
    when i am creating a new request in Access Enforcer . After filling alll the details and clicking the submit button it is showing  a error in creating request .Path not found.

    Hello,
    You must have to select at least one condition attribute while creating your initiator. It seems initiator condition not meeting the details you are filling in your request. So it is not able to trigger the workflow initiator.
    For simple scenario, if you are filling your company details in your request then change your initiator condition attribute to "Company".(Don't include more condition attributes for now). Once it works out then change initiator details back to your requirements.
    Please let me know if this will not resolve your issue.
    Thanks
    Himadama

  • Access Enforcer(error in approving the request) and import roles

    Dear all,
    error in approving the request at security stage(last)
    manager and role owner are successfully approved.
    and also importing roles into access enforcer was not successful.
    imortstatus : 0 roles imported of 28 records found.
    please find the system log:
    2008-09-05 13:01:34,625 [SAPEngine_Application_Thread[impl:3]_8] DEBUG com.virsa.ae.service.messaging.MessageFormatter : parseDesc :   : INTO the method : desc :Please specify a file to import.paramNames :paramsMap :{FIELD_NAME=#_!FIELD_NAME#_!}
    2008-09-05 13:01:34,625 [SAPEngine_Application_Thread[impl:3]_8] DEBUG com.virsa.ae.service.cache.AECacheUtil : getResourceBundle :   : INTO the method : en
    2008-09-05 13:01:34,625 [SAPEngine_Application_Thread[impl:3]_8] DEBUG com.virsa.ae.service.cache.AECacheUtil : getResourceBundle :   : INTO the method : en
    2008-09-05 13:01:34,625 [SAPEngine_Application_Thread[impl:3]_8] DEBUG com.virsa.ae.service.cache.AECacheUtil : getResourceBundle :   : INTO the method : en
    2008-09-05 13:01:34,625 [SAPEngine_Application_Thread[impl:3]_8] DEBUG com.virsa.ae.service.cache.AECacheUtil : getResourceBundle :   : INTO the method : en
    2008-09-05 13:01:34,625 [SAPEngine_Application_Thread[impl:3]_8] DEBUG com.virsa.ae.service.cache.AECacheUtil : getResourceBundle :   : INTO the method : en
    2008-09-05 13:02:28,234 [Thread-47] DEBUG

    In Addition to my previous response:
    I meant to include the following:
    Some of the fields that need to be properly defined with attributes are:
           System: must have the know SAP system defined here
           Role Approver (i presently are using most of the roles without having need for approval; I created a user called NOAPPRV in AE)
           Functional Area: need to have all the areas defined that roles will be assigned to
           Company: I only have one company so that's an easy one
    Some areas I presently do not use but found they must ne coded and coded properly:
           ResponsibilityID:   N/A  (coded as is)
           CommentsMandatory: NO (coded as is)
           Parent Role Owner:   NO
           Business Process: NA  (I believe I originally coded N/A and it did not like that)
           Sub Process: NA  (again N/A I believe error on me)
           Reaffirm Period: presently I am using 0 (zero)
           LastReaffirm: presently using 12/31/9999
    Hope this helps a bit
    I wanted to include an attachment with a sample of my Role Import spreadsheet but I'm not sure exactly how to do that; if I figure that out or someone can provide me the process I will include it
    Jerry Synoga
    Ryerson Inc.
    630-758-2021

  • Multi User request in Access Enforcer

    Is anyone aware of a user limit in an access enforcer multi user request?
    We get errors when we submit  a multi user access enforcer request with more than 25 users.
    Thanks

    Hi
    There is no standard limit even though we advice to keep the user to max of 20 .
    The limit depends upon the email content you have configured .
    In case in your email notifications you have taken the argument USERID then mulitple user creation request causes issue and the limit gets set to anything between 20-25 , again depending on content of the email .
    Thanks

  • Error in Auto Provisioning ( Access Enforcer )

    Hi,
    When I go to Access Enforcer -> configuration -> workflow -> auto provisioning , I get this error:
    Application error occurred during request processing.
      Details:   java.lang.NullPointerException: null
    Exception id: [7ECF26E5A402006000000926000BB04A0004653E942D3D44]
    This is how my trace file look like:
    #1.#7ECF26E5A402006000000926000BB04A0004653E942D3D44#1237219355213#com.sap.engine.services.servlets_jsp.client.RequestInfoServer#sap.com/AEEAR#com.sap.engine.services.servlets_jsp.client.RequestInfoServer#J2EE_ADMIN#49704##n/a##d9a08ca0124311dec4817ecf26e5a402#SAPEngine_Application_Thread[impl:3]_6##0#0#Error##Plain###application [AE] Processing HTTP request to servlet [AEController] finished with error. The error is: java.lang.NullPointerException
            at java.lang.String.compareTo(String.java:449)
            at com.virsa.ae.service.cache.DropDown.compareTo(DropDown.java:71)
            at java.util.Arrays.mergeSort(Arrays.java:1166)
            at java.util.Arrays.mergeSort(Arrays.java:1178)
            at java.util.Arrays.sort(Arrays.java:1093)
            at java.util.Collections.sort(Collections.java:127)
            at com.virsa.ae.service.cache.AECacheUtil.getSystemsDropDown(AECacheUtil.java:963)
            at com.virsa.ae.service.cache.AECacheUtil.getSystemsDropDown(AECacheUtil.java:907)
            at jsp_cfg_workflow_provision_by_system1236276468461._jspService(jsp_cfg_workflow_provision_by_system1236276468461.java:28)
            at com.sap.engine.services.servlets_jsp.server.jsp.JspBase.service(JspBase.java:112)
            at com.sap.engine.services.servlets_jsp.server.servlet.JSPServlet.service(JSPServlet.java:566)
            at com.sap.engine.services.servlets_jsp.server.servlet.JSPServlet.service(JSPServlet.java:190)
            at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
            at com.sap.engine.services.servlets_jsp.server.runtime.RequestDispatcherImpl.doWork(RequestDispatcherImpl.java:321)
            at com.sap.engine.services.servlets_jsp.server.runtime.RequestDispatcherImpl.include(RequestDispatcherImpl.java:473)
            at com.sap.engine.services.servlets_jsp.server.jsp.PageContextImpl.include(PageContextImpl.java:178)
            at jsp_cfg_work_flow_auto_provisioning1236276463205._jspService(jsp_cfg_work_flow_auto_provisioning1236276463205.java:221)
            at com.sap.engine.services.servlets_jsp.server.jsp.JspBase.service(JspBase.java:112)
            at com.sap.engine.services.servlets_jsp.server.servlet.JSPServlet.service(JSPServlet.java:566)
            at com.sap.engine.services.servlets_jsp.server.servlet.JSPServlet.service(JSPServlet.java:190)
            at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
            at com.sap.engine.services.servlets_jsp.server.runtime.RequestDispatcherImpl.doWork(RequestDispatcherImpl.java:321)
            at com.sap.engine.services.servlets_jsp.server.runtime.RequestDispatcherImpl.forward(RequestDispatcherImpl.java:377)
            at com.virsa.ae.commons.utils.framework.servlet.AEFrameworkServlet.service(AEFrameworkServlet.java:452)
            at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
            at com.sap.engine.services.servlets_jsp.server.runtime.RequestDispatcherImpl.doWork(RequestDispatcherImpl.java:321)
            at com.sap.engine.services.servlets_jsp.server.runtime.RequestDispatcherImpl.forward(RequestDispatcherImpl.java:377)
            at com.virsa.ae.commons.utils.framework.servlet.AEFrameworkServlet.service(AEFrameworkServlet.java:452)
            at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
            at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:401)
            at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:266)
            at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:386)
            at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:364)
            at com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:1039)
            at com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:265)
            at com.sap.engine.services.httpserver.server.Client.handle(Client.java:95)
            at com.sap.engine.services.httpserver.server.Processor.request(Processor.java:175)
            at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:33)
            at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)
            at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)
            at java.security.AccessController.doPrivileged(AccessController.java:219)
            at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:102)
            at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:172)
    #1.#7ECF26E5A402006000000928000BB04A0004653E942D3FBA#1237219355213#com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl#sap.com/AEEAR#com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl#J2EE_ADMIN#49704##n/a##d9a08ca0124311dec4817ecf26e5a402#SAPEngine_Application_Thread[impl:3]_6##0#0#Error#1#/System/Server/WebRequests#Plain###application [AE] Processing HTTP request to servlet [AEController] finished with error.
    Please suggest.

    Hemant,
        Try re-uploading the initial data file you received with the installation. Once you re-import the file, reboot your J2EE engine and test again.
    Regards,
    Alpesh

  • CUP open request can not be cancelled

    GRC AC 5.3 SP 10 CUP
    There are some old open CUP requests for super user access. I need to cancel them.
    When I try to cancel a request from config - request - administration - it gives me a message that "failed to cancel follwing request".
    Also if I click on the request number to see detail then it gives message - "Request Approval Screen is not displayed because Request Status has changed" and it does not show the request detail and remains in the same list of requests screen.
    If I click on a closed request number - in next screen, it shows the same message but I can see detail request.
    Recently We upgarded GRC to SP10 from SP4. Previously I cancelled CUP requests this way.

    Hi Pal
    The request can be cancelled by the approver of the request. You can however cancel the request as an administrator in the configuration section in CUP.

  • Access enforcer and User Data Source for HR

    We are on Access Enforcer 5.2 - service pack 2:
    My problem is that when creating a new request in AE, I able to get a list of all users when I point my User Data Source to either SAP or UME. However when I attempt to create a request whilst pointing the User Data Source at the SAPHR system, I do not get any users back (and we have user set up in the SAP HR system).
    I’ve changed the connector to ‘YES’ under the HR System box, I’ve changed the Data Source Type and Details Source Type to point at the SAPHR and still it fails to fetch any users.
    I've tried looking at the log, but can't get much out of it.
    I would appreciate it, if anyone could provide any assistance.
    Thanks you in advance.
    Amarjit
    Message was edited by:
            amarjit singh

    Hi Micheal,
    Thanks for your reply.
    I'm pointing both Data Source Type and Details Source Type to the same system SAPHR and to the same system name (which is our dev system)
    Regards,
    Amarjit

  • Auto Email generation in multiple language in Access Enforcer 5.2

    Hi All,
    We have configured workflow in Access Enforcer 5.2 for autoprovisioning of users in the system. Requestor gets an email in english with the userid and password once the user is provisioned in the system. Now the requirment is to send these emails in different language, which is specific to the user. Like a spanish user should receive the email in spanish language.
    Whether this has anything to do with language setting while user creation.
    Please suggest.
    Thanks & Regards,
    Pravin

    Hi Pravin,
        It has nothing to do with the language settings for the user. This configuration has to be done in closing section of Email reminders under workflow. As per my experience with AE 5.2/CUP 5.3, I don't think this is possible as of now. This could be a good functionality, so you can open an enhancement request with SAP.
    Regards,
    Alpesh

  • Access Enforcer 5.2 - LDAP connexion fail

    Hello everybody,
    We realised an upgrade Access Enforcer 5.1 VP1 to Access Enforcer 5.2 with SP03 but we can't connect LDAP to AE. Before, the connexion to LDAP was ok.
    However, when we test the connexion in AE 5.2, the message " Connexion successfull" appears but the connexion fails when we try to authentificate to AE for a request or when we try to search user data fo example (the AE message is "action failed").
    Do you have the same error with AE5.2 ?
    Thank you very much for your assistance,
    Best regards,
    David Heang

    There is a query below that you need to list in the SQL box, but this address varies based upon your support pack.  If you're up to date (or close to) on SPs, enter the following address into your web browser AFTER logging into AE:  http://<server>:<port>/AE/opensql_test.jsp.
    Paste the following query into the SQL box:
    SELECT DISTINCT
    WPHST.REQNO,
    WPHST.REQPATHID,
    WPHST.PATHNAME,
    WPHST.STATUS AS REQUEST_STATUS,
    TBLPATHSTAGE.STAGENAME
    FROM
    (VIRSA_AE_RQD_WPHST AS WPHST INNER JOIN VIRSA_AE_WF_PTSTG AS TBLPATHSTAGE ON (WPHST.PATHNAME = TBLPATHSTAGE.PATHNAME) AND (WPHST.CURRENTAPPRVRSEQ = TBLPATHSTAGE.STAGESEQ)) INNER JOIN VIRSA_AE_RQD_WPTRN AS WPTRN ON (TBLPATHSTAGE.STAGENAME = WPTRN.STAGE_NAME) AND (WPHST.REQNO = WPTRN.REQNO)WHERE   
    (WPHST.ISCURRENTFLAG = 1) AND ((WPHST.STATUS='OPEN') OR (WPHST.STATUS='HOLD'))

  • Access Enforcer - REMOVE roles/existing roles inoperant

    Hello
    After some time using the capability to ADD and REMOVE roles when creating a request on Access Enforcer (using the option 'Existing Roles' to REMOVE), now Access back to the screen to ADD always that we try to access 'Existing Roles'.
    So, the function to REMOVE roles are inoperant.
    Any ideas what It cold be?

    Hi,
    When you open a changing access request it's possible to add new roles and remove existing roles from the user, right?
    However, the option to remove roles (which is accessed through the 'existing roles' button) is not working longer.
    When that option is accessed, it's not showed anymore the current user's access: the screen returns to the add roles option.
    I haven't found any setting for the feature to remove roles and still don't know how that option, previously used in other requests, is not working for anyone else.
    Regards
    Heverton Kesseler

  • Access Enforcer Risk Analysis question

    Hello All.
    We are receiving an error message in an AE request.  We are receiving the following error in Access Enforcer 'Mitigation control ZM030 could not be saved for user XXXX - Exception from the service: ERROR: This user is already mitigated for this risk' when doing the final approval on some requests.
    Request #1 approved without error but when I did Request #2 received error message.  I tried it again, same error, but the tick boxes are grey instead of green. 
    In all cases the roles were added to the user's account, but now AE request 1 and 2 cannot be removed from the listing.

    Ankur,
    this can happen under different circumstances - say 1 of 3 systems to provision to is down. You will get an error message and the request is not closing, although provisioned to the other 2.
    Jonathan,
    for this request that is still open, can you remove the mitigation? And then re-run Risk Analysis and approve again.
    From version 5.3 you cannot create multiple concurrent requests for the same user, this will prevent your exact error.
    Regards
    Daniela

  • Access Enforcer Implemntation

    Hi,
    I have experiance on CC &FF and never installed Access enforcer.So our company planned to go Access enforcer on exising landscape.
    So how I can implement access enforcer, is there a step-by-step document?
    Can I implement on same system where we are running CC?
    Do I need to install any additional add-ons or components ?
    How long will it take to implement for this compoenet?
    Please give your thoughts.
    - Jim

    Jim,
    As it is suggested by Frank, need to have the product knowledge thorughly before going to management.
    As implementation of CUP will require lot of understanding of other areas including your landscape design, workflows with different modules & configuration HR trigerrs.
    Please find the few features from CUP :->
    1)  Automates, accelerates and tracks the user access request process using  workflow for SAP and non-SAP systems
    2) Integrated risk analysis and mitigation capabilities keep the system clean  during compliant provisioning
    3)  User authentication from either LDAP or SAP systems
    4) Password Self Service for end users
      5)  Automated email notification to appropriate parties
      6)Actually provisions user accounts and access changes into the backend SAP  systems

  • Access Enforcer working process

    Hi Guys,
         Can any one provide me with links or documents on how to use access enforcer as a request approver or on the working process of access enforcer?
    Thanks in advance,
    Vyshali

    For starters please have a look at the Access Control introduction on http://www.sap.com/solutions/grc/accessandauthorization/index.epx and then at the corresponding solution brief on http://download.sap.com/solutions/grc/brochures/download.epd?context=DD10A0E274665704AFFE4301056A95A538B472A53B7EBA4E5320F418E36EF9CE319ABDEAFB28F3F90A526EB3AE36DEDA0E239644EC975BFA.
    You'll be able to find more details on Access Control in the GRC knowledge center on BPX:  https://www.sdn.sap.com/irj/sdn/bpx-grc

  • Open request not showing in the report

    Hi,
    We have built a query for planning to show open request. After 50,000 records, the request would be closed in the infoprovider. In the query, Request id is restricted with the most current data variable.
    In Dev, the report shows the open request. But, in production, the report doesn't show the open request. When the Query properties are compared, the difference is the Statistics level is 0 in Dev and 1 in Production.
    Is this an issue? If not, what could be the issue?
    Thanks.

    From OSS note 411725 :
    In all queries, which display data from transactional InfoCubes, characteristic 0REQUID must be included in the filter and variable 0S_RQMRC 'Most current data' must be used. This variable is part of the Business Content.This is required so that the system also includes the data records from open requests.
    use this SAP EXIT variable in glbal filter. 0S_RQTRA (Most Current Data (Transactional InfoCube))..try
    regards,..

Maybe you are looking for

  • Unable to install version 4.0 on Mac running 10.4.11, left with nothing after 3.6 was removed

    I am working on a Mac running OS 10.4.11. I was fat and happy running FF 3.6, but received a notification advising that an update was available. I dutifully clicked on the link, and downloaded vs. 4.0. It wiped out what I previous had as it began to

  • Resource class best practice

    I have created a reserved context with 20% min and max = to min in every resource including sticky. I also have the default resource class I have also created another resource with 20% sticky but left everything else at default 0-100% our network tra

  • Netweaver mobile 7.1 download path in market place

    hi all where can i  download  the  the newly released netweaver mobile 7.1. is it available for download or we need to only order from sap? thanks santosh

  • How can I recover my adobe programs without my backup discs

    My desktop crashed. I can't find my backup discs for my adobe cs5 illustrator and photoshop. I purchased a new laptop. How can I load my adobe programs on my new laptop. Is there a download? I can't find my security codes but I did register my progra

  • Problems to connect a linksys ea6500 to ps3

    Greetings The router doens't even find a ip adres on my ps3 but yesterday he found one. On my pc it works  very fine the speed and signal are good. And the ps3 stands next to it so distance is not the problem. I think i should work with a dmz, but i