Approval work flow for Role based and Resource based

Hi All,
We have to implement approval work flow for the following things in OIM 9.1.0.1
Approval work flow for Functional Roles (Groups in OIM) (Approvalsrequired for users to get these roles)
IT Roles (Resources in OIM) (Approvalsrequired for users to get these resource)
Functional Role (Group) contains policy1,polici2. Polciy1 contains res1,res2 and Policy2 contain res3,res4.I want to create approval work flow for this Functional Role to achieve the following
User raise a request for the functional role, then it should wait to get manager approval. then once its gets approval, that user account should create on all resources which are involved in that group.
And, I have to define approoval work flow for all individual resources to get users account creation on target with approvals. These resources may include in the groups as well.
After getting approval for functional role (Group), then Will OIM starts the approval flow for all resources involved in the group? becase, all resources have approval workflow at resource level also.
My Goal: Approval work flow for Group, should not process the approval work flow for resource. can we do it in OIM 9.1.0.1?
And can we do the same in OIM 11g also?
Please help me and do let me know, if you need any information from my end.
Thanks.

Thats configurable buddy ! ! And possible in 10G and 11G both versions.
Functional Roles : These are the groups/roles in OIM 10g/11g with access policies attached at the backend.
- Create a dummy resource and name it Request Role or anything as you like. Attach an Object Form to it and have form field for Role Name, this would be a lookup type field linked to all OIM groups (leave system values using lookup query). So a user can select any OIM Group in this request as per configuration. Have approval workflows defined on this dummy resource Request Role and in its Provisioning Process make user/s a part of the requested group.
- Now once the user is made a part of the group, the associated access policy would be invoked automatically and thereby provisioning. The only thing you need to keep in mind is that create the access policy without approval (there is a check box). If you do this the approvals would never be invoked even if you assign a group manually to the user coz it suppresses all the approvals in this access policy.
IT Roles : These would be linked to the resource and you can define individual approvals on the resources as required.These approvals would be required if someone raises a request for these resources individually.
Thanks
Sunny

Similar Messages

  • Work Flow for Manually Disabling Account and Reporting on Disabling Account

    Hi All
    THis is my First Time To Create Work Flow for Idm Project Please Help me
    i want Work Flow for Manually Disabling Account and Reporting on Disabling Accounts
    Please Tell me How I will have to start, to create the code, I know how to configure but may be I will use BPEL or Through Netbeans and plugin I will use.
    please provide me sample code, so that I can start workflow work

    Thats configurable buddy ! ! And possible in 10G and 11G both versions.
    Functional Roles : These are the groups/roles in OIM 10g/11g with access policies attached at the backend.
    - Create a dummy resource and name it Request Role or anything as you like. Attach an Object Form to it and have form field for Role Name, this would be a lookup type field linked to all OIM groups (leave system values using lookup query). So a user can select any OIM Group in this request as per configuration. Have approval workflows defined on this dummy resource Request Role and in its Provisioning Process make user/s a part of the requested group.
    - Now once the user is made a part of the group, the associated access policy would be invoked automatically and thereby provisioning. The only thing you need to keep in mind is that create the access policy without approval (there is a check box). If you do this the approvals would never be invoked even if you assign a group manually to the user coz it suppresses all the approvals in this access policy.
    IT Roles : These would be linked to the resource and you can define individual approvals on the resources as required.These approvals would be required if someone raises a request for these resources individually.
    Thanks
    Sunny

  • Re: Work flow for resource / work center in MEINT

    Hello Experts,
    We are working on SAP ME 15.0 recently installed. We are trying to send the work center from ECC to ME. In MEINT we see only the following work flow for work center / resource:
    As can  be seen, LOIWCS02 is not there. When we sent work center (category 9100) with LOIWCS02 IDoc type, it failed in MEINT. But when we sent work center from ECC (category 9100) using IDoc type 9100, it was processed successfully in MEINT but it created work center in ME.
    The other component LOIWCS02_ME_RES or LOIWCS02_ME_WC is not getting called. What is the possible reason and resolution?
    Would be thankful for any feedback on this.
    Thanks in advance
    Srinivas

    Hello Alexander,
    Thanks for the quick reply.
    As per the help document, the work center category 9100 is supposed to create a Resource in SAP ME but it ends up creating work center in ME.
    If you see the screen shot I had put in my query, I see that there are three work flows - one for LOIWCS03 and the other two for LOIWCS02_RES and LOIWCS02_RES. Would this make any difference since I would expect that the work flow for RES and WC should also be in line with LOIWCS03?
    I will be asking my tech team to raise a support incident for this. Meanwhile I would appreciate your reply on this.
    Thanks
    Srinivas

  • How to config work flow for approval in snp?

    Dear Expert,
    we want to running TLB for deployment stock orders which are approved by leaders.
    please tell us how to config work flow for approval in snp?
    thanks so much

    Hi,
    I got to know from DB49 that some workflow is available in GATP, but as far as I know, there is no such possibility in SNP.
    Deployment stock transfer kind of data exists in livecache order series, and it's very tough to manipulate it in some way to suit the approval workflow.
    As far as I can propose, you would need to do following (big custom development):
    1) Create a custom transaction
    2) Read Deployment Stock transfer data in accordance with your selection criteria and display it to the relevant user/approver
    3) User would accept/reject the Deployment Stock Transfer. This action is possible in a custom transaction.
    4) If Deployment Stock transfer is rejected, delete it from livecache
    5) Now when you run TLB, only approved Deployment Stock Transfer would be available to be coverted to STOs.
    In the above development, you could create logs/reports as you need for audit kind of purpose.
    This won't be a very simple development, but it's possible.
    May be someone could give you some better alternative.
    Thanks - Pawan

  • DFD diagram and ER crossmatrix for role definitions and role's privileges on objects

    Hello,
    Having the question on derivative use of combination of DFDs and ER diagrams ( let us be more fixes and focus on Relational model ).
    In DFD there are defined external entities and functions, data flows and data stores that are forming processes.
    Functions represents procedures, transactions, transformations.
    Dataflows presents procedures parameters, intermediate reports, temporary table data, data that is passed , retrieved/written, signals, triggers/events that controle or trigger function...
    Context of my question is focused on external entities.
    External entity suppose to denote the sourced or destinationed system ( for example Archiving system ) or operator, system that is out of scope of the DFD and it is mentioned just as target or destination or source of dataflow or control flow.
    In context of these understandings I am using external entitiy also for types of users of the system:  staff that is triggering functions or schedulers or job managers, or reporting systems ( or components of reporting systems like for example business intelligence extraction processes ).
    What is my problem that on basis of external entity definitions and E/R model also define roles and privilege classes for access to data objects.
    And from those generating ddls for database roles, privileges on entitities to those roles.
    But in privileges granting to role having two different kind of privileges on data objects:
    - privileges that are granted on various schema objects
       For example role1 has grant on tab1, view2, procedure1, package3,
    - the other type of privilega is based on the scope or range of semantically defined scope or semantic area.
    Semantic area is scattered through tables because of normalisation and using semantic area as entity of which primary key is
    partitioning the table data through many semantic areas.
    So this privilege should be granted on basis of the rows in table not column ( more semantically then structurally ...row oriented more than column ).
    Both privileges that are granted to roles are also basis for functional roles
    ( privilege that is granted that functional role has grant to trigger or execute some function or process ).
    My question is?
    How do you handle modeling technology for analysis and design for role privileges and consolidation between database and functional roles ?
    Grateful for any idea, experience and suggestions.

    Hello,
    Guess I was looking for the formal sequence of steps that would bring me to the
    ddls for "create role ..." and "grant privileges to role".
    You can do that.
    1) I assume you have logical model and it's engineered to relational model, also you have data flow diagram created
    2) You need to define information structures for flows connecting "Information store" to primitive process - attribute usage of particular entities should be defined for those "information structures" processed in flows
    3) You need to define create, update and delete operation for flow going from primitive process to store - read is assumed in opposite direction
    4) create a role in Process model and assign primitive processes to it - list of available processes to add depends on current data flow diagram
    5) You need an open physical model for your relational model
    6) Select "transfer process model roles to physical model roles" from context menu of top level DFD - select roles, relational and physical model there - roles with related permissions will be created in physical model
    Entity1 is divided in several subtypes for different business areas.
    And account manager for business_area1 is allowed to work on subtype1 ( view on prime table )...
    Different implementation of entity hierarchies are not processed correctly in that wizard - i.e to get permissions to table corresponding to child entity - that entity should be used in information structure and flow.
    Philip

  • Triggering a sub work flow for multiple users at same time.

    I have a scenario in which I have created sub workflow as an activity for approval process. This sub work flow should be triggered for multiple users at the same time and their decison is independent of each other.
    This is like creating multipe instance of the same sub work flow and then the sub work flow runs indepedently as a new work flow for each of the approver and the process is completeded for approver independently.
    How can this be achieved?

    Tyr to do like this,
    1. First include the subworkflow in the main workflow template.
    2. Now include standard Block Step in the main workflow template.
    3. In the block select the block type as ParForEach.
    4. Before doing the 3rd point make sure that all the agents for whom you want whom you want to initiate the workflow, populate them in a Multiline conatiner element.
    5. Once completing 3rd and 4th points open the block step under the tab ParallelProcessing  assign the multiline container element name in the   for e;g if the multi line container element name is COSTCENTER then do the binding like below. the conatiner element COSTCENTERLINE is created by default once you include the multi line conatiner element under parller processing tab.
    &COSTCENTER[&_WF_PARFOREACH_INDEX&]&   -------->     &_COSTCENTER_LINE&
    Now assign the agent of the subworkflow as COSTCENTERLINE , imean if suppose you have 3 entries in the internal table then three separate and for three different agents the workflow is instantiated.

  • Using web services in Approval Work flow in OIM 11g

    Hi All,
    I am a new bie to OIM 11g. I have created an approval work flow and it is working fine.
    Now my requirement is to use a web service in the approval work flow instead of directly embeding the java code in Java Embeding Activity. Can some body share me a document or url for the process of doing it.
    Thanks in advance for the help.
    Thanks,
    Preeti

    If you are using OIM 11gR2 please refer the below document. All steps are very clear with the screenshots.
    http://docs.oracle.com/cd/E27559_01/dev.1112/e27150/request.htm#autoId27
    See section 21.3.5.7 Configuring the Human Task and BPEL Mappings
    Also see this OBE tutorial for getting idea on Java embedding activity and assigning and retrieving data from global variables in SOA
    http://www.oracle.com/webfolder/technetwork/tutorials/obe/fmw/oim/oim_11g/Request_Workflow_for_Self_Registration/request_workflow_for_self_registration.htm

  • Work flow for Goods issue MIGO_GI

    Hi friends,
    I want to develop a work flow for good issue MIGO_GI  transaction.  Is there any standard work flow this scenario.
    When I deliver the 4 materials, the Material cost is 100*4 = 400, if the Material cost is greatr than 500, mail should trigger to the manager, if it less it will go to the first approver.
    please advice me in this.,
    regards,
    Ajay

    I think no stanadard workflow will provide you with such a validation, Better to design your own customized workflow template,
    Follow the below steps.
    1. Open PFTC select the task type workflow template
    2. Click F5 and define the relevant fields and make the agent assignemnt for the workflow template as general task from the menu  addtional agent  ---> agent assginement  --> maintain --> general task.
    3.  Check the BOR BUS2017 this might be useful.
    Check the method GoodsMovement.SAPCreate and its parameters  interface, if you can get the total values of the then include a condition and validate th total cost if is satrisfyies send mail and workitem to approver, if it does not satisfy then send only workitem to approver.
    Check the below BADI's
    MB_BAPI_GOODSMVT_CREATE        MB_GOODSMOVEMENT
    MB_BATCH_MASTER                MB_GOODSMOVEMENT
    MB_DOCUMENT_BADI               MB_GOODSMOVEMENT
    from where you can trigger your customized workflow by using the standard fm SAP_WAPI_CREATE_EVENT or SAP_WAPI_START_WORKFLOW*

  • PO Approval Work flow Customization

    Hi,
         I want to customize the PO Approval Work flow.
    And interesting thing is never seen or worked in Work Flow.
    So Help me with the steps to customize right from scratch.
    Regards,
    SoundariyaKumar.R

    First you have to study about the workflow then you can move then move for customization.
    https://web.stanford.edu/dept/itss/docs/oracle/10g/workflow.101/b10284.pdf
    https://books.google.co.in/books?id=tl9Nnk9OKvAC&printsec=frontcover#v=onepage&q&f=false
    http://arunrathod.blogspot.in/2010/10/steps-to-customize-po-approval-workflow.html

  • Approval work flow.

    Hi expert's
               could any body tell How to create approval work flow? I am working on CRM marketing planner where I need to use this work flow when( user-1 Head of marketing) select status as approved it should go for (user-2 Branch manager) this is mainlyused  for budget allocation and cost center planning.
    Regards
    subbaraju

    Hi,
    Please follow thes steps:-
    1> find a BO that is defined for CRM Marketing like for Events and Activities we have BUS2000126, Opportunities - bus2000111. Similarly there would be a BO for CRM Marketing.
    2> From that BO find an event that can trigger your Workflow and Start Condition if any required.
    3> SWDD - create custom Workflow - create a User Decision and in that step assign it as a General Task and assign Agent in that screen as an Expression from BO Attribute which corresponds to user 1.
    4> in user-decision implement approval/rejection
    5> in the approval branch add another user-decision for next level approval and do the same as there in step 3..
    Let me know if you have any doubts
    This should work for u..
    be careful with the binding..
    Regards.
    Kanika

  • Trigger Work Flow for payment release

    hi guys,
    kindly help me how to trigger the standard work flow for Payment release ((WS00400012).
    With Regards
    Pradeep N

    enter the Workflow
    in SWDD : WS00400012
    click on Agent Assignment and assign the Approver USer ID.
    click on the event linkage and activate and save.

  • HOW TO CALL APPROVAL WORK FLOW ON BUTTON CLICK EVENT OF VISUAL WEB PART?

    Hiall,
    I created an OOB an approval work flow I want to start that approval work flow through visual web  part button click event
    In work flow Settings I selected to manually start .Is this possible ? if possible please guide me how to do this
    Thanking you,
    Arun  kumar

    Hi,
    If you have an instance of SPListItem, and know the workflow association name, you can start it. First you need to find workflow assocation instance and tell SPSite.SPWorkflowManager to start your workflow.
    See this for more information:
    http://blog.mmasood.com/2012/06/programatically-start-workflow.html
    Please remember to up-vote or mark the reply as answer if you find it helpful.

  • I am a new mac user and have a 15 macbook pro (non retina display).  I am having an issue with safari "freezing" ...it will work fine for a while and then I will open a new tab and attempt a website that won't load and after that it seems no website will.

    So yes like mentioned above...i am a new mac user...have only had it about four days and have had a windows based system always before this.  The issue I am having is that I will be in safari and it will work perfect for a while and then i will open a new tab and attempt another website and it will either be extremely slow or will give the error that it cannot connect to the server, however, when i run diagnostics my internet is fine.  The only solution i have found is to reboot and geeksquad has been unable to replicate the problem while connected to my computer to try to do so.  Does anyone have any suggestions or anyone else with this problem?  If you have a "fix" please try layman's terms because again I have no idea about macs haha.  Thanks, 

    So yes like mentioned above...i am a new mac user...have only had it about four days and have had a windows based system always before this.  The issue I am having is that I will be in safari and it will work perfect for a while and then i will open a new tab and attempt another website and it will either be extremely slow or will give the error that it cannot connect to the server, however, when i run diagnostics my internet is fine.  The only solution i have found is to reboot and geeksquad has been unable to replicate the problem while connected to my computer to try to do so.  Does anyone have any suggestions or anyone else with this problem?  If you have a "fix" please try layman's terms because again I have no idea about macs haha.  Thanks, 

  • Regarding work flow for credit block release in sales order

    Dear Experts,
    Kindly help me with work flow-
    my scenario is if customers credit limit of 5000$ exceeds in sales order it should be blocked and notification should go to authorize person through simple mail to release this block.
    for this i have done settings in out control i have used output type krml and determined partner as employee responsible to release block in customer master but mail is not triggered to authorized person for credit block and how i can create work flow for this so that authorized person should get notify for credit block as well he releases block also.
    Regards
    Supriya

    Dear supriyaparimal,
    Please find the below points to fix your issue.
    1. Configure the out put determination by using the condition type KRML.(Hope oyu have done it already).
    2.Maintain the condition records in VV11 for condition type "KRML"
    3.Then select the condition record and click the communication tab .
    4. If you want to give any information you can use "Note for recipient".
    5. If the information has to be sent to relevant person you recipient name in the recipient column.
    Save the documnet.
    If you raise the sales order and if it is blocked then system automatically send the information to respective person.
    You can get this in formation in ""SBWP" transaction code.
    Check the in box, the information what you have mentioned in the condition records will be appeared.
    Please let me know if you have any clarifications
    Thanks&Regards
    raghu.k

  • Using work-flow for payment release

    Dear Experts
    I have a problem when using work-flow for payment release:
    I am using ws00400012 as standard work-flow for payment release ,after posting invoice documents via FB60 BSEG is crated but BKPFID dose not exist in container .
    when I test this work-flow it is running correctly via SWUS.
    It would be very helpful if someone can help me with this problem.
    Thanks and best regards,
    Azam

    http://help.sap.com/saphelp_46c/helpdata/en/6e/1217de9f0411d189b80000e829fbbd/frameset.htm
    Goto Accounts Payable (FI-AP) and in that "Vendor Down Payment Processing".
    Check out the link for workflow scenarios.. http://help.sap.com/erp2005_ehp_03/helpdata/EN/04/926f8546f311d189470000e829fbbd/frameset.htm
    Goto "Archiving Application Data (FI)" and check if your scenario exists or not !!!
    Regards,
    PR.

Maybe you are looking for

  • I can not install itunes

    on a windows xp64 / service pk 2...keeps telling me to install a 32 bit configureation...when i do, it tells me to instlall a 64bit installation---back and forth nothing seems to work

  • Migrate Library to External HD

    I've been trying to move my entire library off of my 17" MBP to an external HD (including ratings, playlists, play counts, etc.) so that I can more easily move between that machine and my 15" MBP. I followed Apple's directions a few times and tried t

  • Accounting Project - Badi DPR_EVENTS

    Hi Gurus, when the project is posted in 'RELEASE' status i have to associate to the project, in accounting dynpro, an internal order just created. I found Badi DPR_EVENTS use with filter ON_PPO_RELEASED but i don't understand how can be use. There's

  • Issues in getting Real Time data in BAM

    Hi, I am trying to get data from database through database adapter and push this data in a JMS queue and as a final step, I want to pull this data to BAM DATA OBJECTS. I have used a BPEL process and successfully pushed data to JMS queue from database

  • Adding a toolbar to Firefox similar to Microsoft

    I switched from Internet Explorer to Modzilla Firefox yesterday evening and I can't figure out how to add a toolbar with the basic tools such as File, Edit, View, etc.