Approve CUP request in 10.0

Dear Experts,
I have created a CUP request (ARM) in GRC 10.0 successfully. Now stage approver has to approve the request. I am really not sure where to approve the request. Please help me.
I appreciate your help.
Thanks,
Swathi.

Hello,
Well, the corresponding approver has to approve it. Have you performed all configuration steps according to this document:
http://www.sdn.sap.com/irj/scn/index?rid=/library/uuid/5067e447-5c64-2e10-7d9c-8f7e5953aadb
If yes, then check the GRC Help documentation in order to approve the request:
http://help.sap.com/saphelp_grcac10/helpdata/en/83/0445b2399e48108383a42efd1cf2cb/frameset.htm
Cheers,
Diego.

Similar Messages

Making comments mandatory for only some roles when approving CUP requests.

Does anyone know if there is a way to make Comments required in CUP requests when approving a request for just certain roles? We don't want comments to always be required, just if you are approving a request for Role XXX for example.
I tried using the Comments Mandatory setting that is available on the Role Details screen (along with the associated flags on the Roles/Role Selection screen), but this only seems to require a 'request reason' for the role when the request is being built. It doesn't require comments when the request is being approved. (There also appears to be a bug with this because this request reason doesn't show up anywhere in the request after it is built.)
I know you can set the Comments Mandatory on for the workflow stage, but then you have to enter a comment for every request, regardless of the roles. We are wanting them to required only for a few specific roles.
We are on GRC 5.3 11.2.
Thanks.

Hi Bob,
It is not possible to enable the comment option only for few roles. Either it can be on for all, or off.
Rgds,
Raghu

Role created in ERM is not appearing in CUP request for assignment-GRC 10.0

Hi,
We are on GRC 10.0 - SP5
We have created a role in ERM and it was succesfully created in backend system. However when we tried to assign the same role using CUP request - the role is not appearing.
1) Do we need to upload roles for CUP in GRC 10.0 (similar to 5.3) to populate. Will the role doesnot automatically appears in GRC database for CUP as it is created through ERM?
2) If the roles are imported in ERM with role owner information, does the same reflects for CUP also for role owner approver assignments?
Thanks and Best Regards,
Srihari.K

Hi Sri,
Is the role status set to "production" ??
Cheers,
Diego.

CUP Request Audit Trail missing info about Mitigations & Risks

Hi All,
We use SAP GRC CUP 5.3 SP8 Patch 1.
When provisioning an SAP account through the GRC solution, we notice that the Audit trail is missing any details about the risks & mitigations that are applied to the request. Ideally we need to track the user who applied the mitigation and the time stamp for the action. We can see the Risks and the mitigations applied in separate sections in the request(but still missing the details i've mentioned above)
We have configured the system so that the risks need to be mitigated before approving a request.
Is there a way(some config) we can get this info too recorded in the Audit trail?
Thanks,
Anil
Edited by: Anil Sebastian on Sep 20, 2009 10:50 PM

I was getting an error in RAR that it couldn't send out the notification e-mail. The Java Mail Client had not been configured. Once I had done this, and restarted the server0, it worked.

CUP 5.3 (SP9) CUP request form confusion

Hello Experts,
There are two ways to create a CUP request as I know:
(1) Use a CUP link in the Request Access screen to create a CUP request
(2) CUP>My Work>Create Request
Here I have a question:
What are the differences between these two request forms? Obviously, the appearance is different in each request form. In what situation do we use each form?
A little background:
Our business requirement goes; a person (security admin) who is creating a CUP request for other people does risk analysis and mitigates the user if there is any risk violation before submitting to the 1st stage approver (manager).
My problem:
When creating a CUP request with an option (1), I cannot run risk analysis since there is no "Risk Analysis" button. I don't think this is configurable.
On the other hand, I can do risk analysis with the option (2). But, with the option (2), there is only so much I can customize. Whatever I customize in CUP>Configuration>Request Form Customization, it only changes the option (2) form but not the option (1) form. For example, I want the manager name field mandatory, but CUP won't let me do it for the option (1).
Please share your knowledge why there are two request forms available in CUP and how I can make them fit into our business requirement (risk analysis when requesting and set mandatory fields as we want).
Thanks,
HM

HM,
Option 1: End user request form ->
It should be used by all the users and offcourse CUP does not allow end users to run risk analysis for their requests. All the customization made through end user personalization will show up in this form.
Option 2: Approver view request form ->
This request form should not be used by all the users. It is only intended to be used by power or advanced users. As you can fill the form with any kind of fake details here.
Alpesh

Create a CUP request with no roles

Hello
Is there a a way to create a CUP request only with free text and not with assigned roles? we are trying to find a way to configure that with no luck.
Since the end user does not know which roles he needs the customer asks that he will fill in his request in the free text space
(with the relevant mandatory fields that are in the initial screen) and the first approver will add the relevant roles based on the text that the user entered in the system.
Kind Regards,
Shira

Hello Shira,
Thats correct, there is no feature to force the approver to select roles prior to approval of the request.
In my case we were using default roles so every request created would have minimum set of default roles available in it. Apart from that, we forced the request to go through the Functional Lead stage who would be responsible to check if correct roles have been assigned to the request by the Functional Executive in the previous stage. Also, since the Functional Lead stage used the approver determinator as Role (role owner defined for roles), if there was no role attached by functional executive in previous stage, he/she would not be able to approve the request without any role as it would not be able to find the approver for the next stage and thus the system will throw error.
We also used the organizational process procedures to educate the functional excutive about their responsibilities of attaching roles to the request. So i would say that combination of factors worked for us in this scenario.
Regards, Varun

Error while approving Leave request from UWL

Hi Experts,
We are getting following error while manager clicks on Universal Worklist to approve Leave Request. On system we have assigned ess id to employee no. 43 in IT 105-0001 but it gives error message about employee no. 167 which has nothing to do with this leave request.
Please go through following ST22 error log..
Short text of the error message:
"No data exists in this period for infotype 0105 and employee 00000167."
Trigger Location of Runtime Error
 Program SAPLPT_ARQ_REQUEST_U
 Include LPT_ARQ_REQUEST_UIAF
 Row 186
 Module type (FORM)
 Module Name DUMP_IF_ERRORS
Source Code Extract
Line SourceCde
156 ENDCASE.
157
158 IF lock_indicator = 'X'. "ANK Note962342
159 status_ui = c_req_sent.
160 status_ui_text = 'gesendet'(s04).
161 endif. "ANK Note962342
162
163 ENDFORM. " set_request_status_ui_text
164
165 &----
166 *& Form dump_if_errors
167 &----
168 * text
169 ----
170 * -->MESSAGES text
171 ----
172 FORM dump_if_errors
173 USING
174 messages TYPE ptarq_uia_messages_tab.
175
176 FIELD-SYMBOLS:
177 <message> TYPE bapiret2.
178
179 LOOP AT messages ASSIGNING <message>.
180 IF <message>-type EQ c_message_error.
181
182 *Note 1168656 begin
183 * MESSAGE x999(53) WITH
184 * <message>-message
185 * <message>-type. "#EC *
>>>>> MESSAGE <message>-message type 'X'.
187 *Note 1168656 end
188 ELSEIF <message>-type EQ c_message_abend.
189 *Note 1168656 begin
190 * MESSAGE a999(53) WITH
191 * <message>-message
192 * <message>-type. "#EC *
193 MESSAGE <message>-message type 'A'.
194 *Note 1168656 end
195
196 ENDIF.
197 ENDLOOP.
198
199
200 ENDFORM. " check_errors
201
202 *&----
203 *& Form prepare_customizing_attibs
204 *&----
205 * text
Would really appreciate kind guidance to resolve the same.
Thanks.
Aashish

Hi Ashish,
Short text of the error message:
"No data exists in this period for infotype 0105 and employee 00000167
This clearly suggests that the employee data is not up to date.
Go to Tcode : PC00_M40_CLSTR
here 40 is the country coding or the Molga value for India. Like wise which ever country you work for, enter the country code there instead of 40.
Enter the pernr as 00000167 and you would find till which date the payroll for 167 has been run successfully.It has to be in green color.
If the payroll is not run till the period in which you are getting the error ( which obvisouly is what the error means) try running the payroll by going to the Tcode : PC00_M40_CALC or you can ask your HR team to run this payroll for you and you are good to go.
Good Luck!
Sandeep Tudumu

Error when approving the request in OIM 11g R2

I have a catalog item for iPlanet User resource setup to go for beneficiary manager approval. On the approval window, when the manager approves the request, OIM tries to forward to the url /identity/face which throws an generic error saying "identity" page doesnt exist because it doesn't get resolved as hostname.
I have another OIM instance where the popup window just disappears when the approval button is clicked. I'm not sure what the default behavior is. In R1, it used to get a OIM alert box notifying that the request was approved/rejected.
I'm getting these errors in the logs when I approve/reject
The parent-organization-chain is empty for the organization list
Edited by: DJ on Jan 16, 2013 10:44 AM
Edited by: DJ on Jan 16, 2013 2:36 PM

I scooped the requests when I hit the approve button, it hits the 302 - Page moved Temporarily
Here is is the request looks like for the working instance:
<html><head><title>302 Moved Temporarily</title></head>
<body bgcolor="#FFFFFF">
This document you requested has moved temporarily.
It's now at <a href="http://oim1:14000/identity/faces/adf.task-flow-return?_adf.ctrl-state=zjh4didfg_105&adf.tfDoc=%2FWEB-INF%2FApprovalTask_TaskFlow.xml&adf.tfId=ApprovalTask_TaskFlow&_task-flow-outcome=done&_afrLoop=20671600459024">http://oim1:14000/identity/faces/adf.task-flow-return?_adf.ctrl-state=zjh4didfg_105&adf.tfDoc=%2FWEB-INF%2FApprovalTask_TaskFlow.xml&adf.tfId=ApprovalTask_TaskFlow&_task-flow-outcome=done&_afrLoop=20671600459024</a>.
</body></html>Here is the broken instance:
<html><head><title>302 Moved Temporarily</title></head>
<body bgcolor="#FFFFFF">
This document you requested has moved temporarily.
It's now at <a href="http://identity/faces/adf.task-flow-return?_adf.ctrl-state=1acvf8c9l_101&adf.tfDoc=%2FWEB-INF%2FApprovalTask_TaskFlow.xml&adf.tfId=ApprovalTask_TaskFlow&_task-flow-outcome=done&_afrLoop=16835862702848">http://identity/faces/adf.task-flow-return?_adf.ctrl-state=1acvf8c9l_101&adf.tfDoc=%2FWEB-INF%2FApprovalTask_TaskFlow.xml&adf.tfId=ApprovalTask_TaskFlow&_task-flow-outcome=done&_afrLoop=16835862702848</a>.
</body></html>Working code has the hostname:port - oim1:14000 as part of the URL but the second one does not have it. Does anyone know where this URL setting is stored?
Thanks
Edited by: DJ on Jan 16, 2013 2:34 PM
Edited by: DJ on Jan 16, 2013 2:35 PM

UWL Filter causing error while approving Leave Request

Hi Guys,
We recently applied MSS SP17 and we changed our UWL filter BADI to SWK1 Function group - SWK_LOCAL_INBOX_GET.
The filter works fine, but when we try to approve leave request, it somehow calls this piece of code again and does not allow (DUMPS) BADI to set the filter saying - this field is not modifiable.
Has anybody seen this before. Can anybody let me know how to resolve the issue?
Regards,
SC

We added a code that if leave request calls this code...skip it.

500 internal error while approving leave request

Hi All,
One of my user when trying to approve leave request, he is getting the following error. it was working previously but suddenly thsi error has come
500 internal server error
Application error occurred during request processing
Details: com.sap.tc.webdynpro.services.sal.core.Dispatcher exception: The requested deployable object 'sap.com/ess~lea' and application 'leaverequestapprove' are not deployed
Can anyone advise on this error please!!!
Thanks!
Swarnaprakash

Dear Swarnaprakash,
Hope you are doing good.
Do make sure that all ESS related applications/services are running.
Please try to restart the applications this way:
1. start the telnet admin tool
telnet <hostname> 5<instnum>08
2. logon using the J2EE Admnistrator user
3. lsc (to list the available servernodes)
4. jump <servernode> (usually jump 0)
5. add deploy
6. start_app -all
Please have a look at the below for more information:
[http://wiki.sdn.sap.com/wiki/display/TechTSG/(JSTSG)(Telnet)DeployController+Commands]
and
[http://help.sap.com/saphelp_nwpi711/helpdata/en/45/0ad8e787652d6ae10000000a11466f/frameset.htm]
If the issue still persists, please check if all the SDAs have been deployed for ESS (SCA->SAP ESS and Business packages)
Thank you and have a nice day :).
Kind Regards,
Hemanth

Reg : Getting error while approving leave request

Hello Experts,
Manger is getting and error message u2018Work item 000000000000 cannot be readu2019 while
Approving the leave request of one his reportee. This error is triggering for only one
Reportee.
Experts please kindly help us.
Regards,
Raj

Hi Raj,
There are a number of issues that could cause this. Can you share your scenario (where is manager approving the request - via SAPGUI, ESS, MSS?) Are you using an SAP standard workflow?
Plus, there are lots of threads in SCN on this topic. Have you checked any of these?
Good luck,
Sue

Access Enforcer(error in approving the request) and import roles

Dear all,
error in approving the request at security stage(last)
manager and role owner are successfully approved.
and also importing roles into access enforcer was not successful.
imortstatus : 0 roles imported of 28 records found.
please find the system log:
2008-09-05 13:01:34,625 [SAPEngine_Application_Thread[impl:3]_8] DEBUG com.virsa.ae.service.messaging.MessageFormatter : parseDesc :   : INTO the method : desc :Please specify a file to import.paramNames :paramsMap :{FIELD_NAME=#_!FIELD_NAME#_!}
2008-09-05 13:01:34,625 [SAPEngine_Application_Thread[impl:3]_8] DEBUG com.virsa.ae.service.cache.AECacheUtil : getResourceBundle :   : INTO the method : en
2008-09-05 13:01:34,625 [SAPEngine_Application_Thread[impl:3]_8] DEBUG com.virsa.ae.service.cache.AECacheUtil : getResourceBundle :   : INTO the method : en
2008-09-05 13:01:34,625 [SAPEngine_Application_Thread[impl:3]_8] DEBUG com.virsa.ae.service.cache.AECacheUtil : getResourceBundle :   : INTO the method : en
2008-09-05 13:01:34,625 [SAPEngine_Application_Thread[impl:3]_8] DEBUG com.virsa.ae.service.cache.AECacheUtil : getResourceBundle :   : INTO the method : en
2008-09-05 13:01:34,625 [SAPEngine_Application_Thread[impl:3]_8] DEBUG com.virsa.ae.service.cache.AECacheUtil : getResourceBundle :   : INTO the method : en
2008-09-05 13:02:28,234 [Thread-47] DEBUG

In Addition to my previous response:
I meant to include the following:
Some of the fields that need to be properly defined with attributes are:
       System: must have the know SAP system defined here
       Role Approver (i presently are using most of the roles without having need for approval; I created a user called NOAPPRV in AE)
       Functional Area: need to have all the areas defined that roles will be assigned to
       Company: I only have one company so that's an easy one
Some areas I presently do not use but found they must ne coded and coded properly:
       ResponsibilityID:   N/A (coded as is)
       CommentsMandatory: NO (coded as is)
       Parent Role Owner:   NO
       Business Process: NA (I believe I originally coded N/A and it did not like that)
       Sub Process: NA (again N/A I believe error on me)
       Reaffirm Period: presently I am using 0 (zero)
       LastReaffirm: presently using 12/31/9999
Hope this helps a bit
I wanted to include an attachment with a sample of my Role Import spreadsheet but I'm not sure exactly how to do that; if I figure that out or someone can provide me the process I will include it
Jerry Synoga
Ryerson Inc.
630-758-2021

Access Enforcer(error in approving the request)

Dear all,
Fascing the problem while security approver is approving the request.
Error in Processing your request, Request no: 1006 in stage : ZSECURITY
Thanks & Regards

Hi-
I guess, you are on AE 5.2. Please make sure, if the approver at your ZSECURITY stage approving the request by clicking the email message link and login onto AE and then go to User Login to see requests to approve.
If this is the last stage in the linear path of your workflow, make sure SAP system is not down. If not, check if the next approver at next stage is defined in the path.
thanks,
Ashok

Issue in Deletion of approved leave request using ws12300111

We are using Std workflow 12300111 and its working fine for new leave request and change leave request but when raise request for deletion of approved leave request the workitem created and info type updated automatically without seeking approval from manager. When you check the workflow log the agent determination happend and updated the info type 2001. This issue is in production system , At the same time if we tested the same scenario in QAS its working fine, ie its asking approval from Manager.
Pl help on this issue.
Regards,
Muthu

This is correct and intended functionality, NO WF IS triggered.
Let me explain, There is no WF triggered when APPROVED (NOT POSTED)
absence is deleted. This is standard, You can trigger a mail
which You had already done so. But there will be no WF triggered.
So if you notice
when the leave request is in status POSTED, it calls the workflow,
but if the leave request is not POSTED yet, it is doesnt call the
workflow.
There is no standard Workflow triggered when the Approved leave request
has been deleted by the employee!
This step should be configured by the customers as when to trigger a
mail to the Admin or Supervisor, when deletion or cancellation happens.
The workflow template is a simple template, You can modify
to suit their needs.

Problem in Approving Requisition Request in MSS UWL

Hi,
I'm facing problem in approving requisition request sent through Manager in MSS UWL.
We have configured standard process HR_MSSRCF_REQUISITION with ISR scenario is SRQ3. Workflow is WS45600028
Case: When I successfully Check & Send Requisition Request form from MSS Recruitment, it is coming in Manager UWL.
But, when i open the workitem for approval it is not coming as a PDF form with Approve Button in the bottom (Standard). Instead, it opening as per the below screen.
Please help to resolve this issue.
Regards

You should be giving the process reference number or workitem ID in transaction hrasr_test_process.
Which release you are on , what is the SP level of component EA-HRGXX?
Further as per note 972322 - HR Administrator: Migration WD4A - the start process application has been migrated to WDA.
Check the UWL XML configuration to see if the config is as below for the approval task...
APPLICATION ASR_PROCESS_EXECUTE(For EhP4, otherwise application depends on the level of EA-HRGXX )
 DYNPARAM WI_ID=${item.externalId}
 NAMESPACE sap
 SYSTEM_ALIAS <use your system alias>
A sample XML is available with note - 1371626 - UWL Configuration for HR Administrator BP version 1.51.
This appears to me to be a XML configuration issue. Collaborate with your portal and UWL config consultant.
Hope this helps.
Regards,
Sahir.

Approve CUP request in 10.0

Similar Messages

Maybe you are looking for