Approver question for CUP

Hi GRC guru's
As we are in the process of customizing CUP ,I have couple of questions so kindly help me out here
1. When requestor select roles which belong different approvers how does the request gets processed
example roles selected are Z_XYZ who's role approver is Tom and second role Z_ABC with role approver John , how is this request handled ?
2. When you run risk anlysisin CUP and you find out that there are risks and there is no mitiagtion control in RAR for risk produced , how will the approver proceed ? should he go back and perform the mitigation in RAR and then mitiagte the risk in CUP or is there a way to mitigate the new risk in CUP which can then be automaticallly pushed to RAR ?
3. Is there way to populate user group in the access request form and is there way to populate the license type in CUP?
Kindly clear my doubts ,Thanks in advance
Regards
Keith.

Hi Alpesh and all
I would like to follow up with your answer to Keith's question below.
1. When requestor select roles which belong different approvers how does the request gets processed
example roles selected are Z_XYZ who's role approver is Tom and second role Z_ABC with role approver John , how is this request handled ? Both the role owner would get email and can approve the request at same time. Unless untill both these approvers approve/reject the request, request can not move to next stage.
My question,
Is there a way to allow users to submit one request with 2 roles with different approvers, if the 1st approver approved the role, the 1st role to be provisioned to immediately without having to wait for the 2nd approver to approve the 2nd role?
The two roles both satisfy the critiria of the same initiator (attribute Role, and both roles are in the role list). Since the roles fall under the same path and stage (only 1 role owern approval stage), I noticed the 1st approved role was not provisioned until the 2nd role is approved. Is there a way to work arond that? It make sense to go ahead provision the 1st role without having to waiting for the 2nd role to be approved or rejected. The roles have the same approval requirement so they should use the same initiator and workflow path.
If you or anybody knows the work around, I would appreciate your sharing the info.
Thanks.
p.s.
I did a test to submit a request with 2 roles, each role satisfy a different workflow initiator therefore different paths are used. 1st role was approved through 1st path and provisioned immediately while 2nd role was waiting in approval stage in the 2nd path. The request is closed once both path were completed.

Similar Messages

N-step approval process for PO in SRM 7

Here are a couple of questions I have regarding N-Step approval configuration for PO in SRM 7 Process Controlled Workflow:
1) It's our business requirement that the last-change person of the PO is defined as the first approver in the chain. I tested with RR_EMPLOYEE and a hard-coded user BP number (my own), but got error "Strategy RR_EMPLOYEE did not determine any approver". Changing to any other user's BP number worked. So I am guessing the buyer himself can not be an approver. Since this is a business requirement, we wouldn't mind developing enhancement to work around this restriction. If you could point me to the place where this is checked, that would help me.
2) I have set up the process level configuration as such:
100     ZEV_PO_SL_APPR_001     PO approval level 1     RR_EMPLOYEE     Specify Employee for Approval
200     ZEV_PO_SL_APPR_002     PO approval level 2     RR_MANAGER     Get Creator's Line Manager for Approval
300     ZEV_PO_SL_APPR_003     PO approval level 3     RR_MANAGER     Get Creator's Line Manager for Approval
The corresponding expressions are simply checking against the PO total value, such as -
0V_PO_POTOTALVALUE >= 0 AND 0V_PO_POTOTALVALUE < 1,000
0V_PO_POTOTALVALUE >= 1,000 AND 0V_PO_POTOTALVALUE < 25,000
0V_PO_POTOTALVALUE >= 25,000
But when I checked the Approver list with a PO with total value > 50,000, only the first level is triggered and listed. And once approved, the PO went into "Ordered" status. But it should have gone through 3 levels of approval. I'd greatly appreciate it if you could point out what might have been wrongly defined in my configuration.
Thanks!

Hi,
1) It's our business requirement that the last-change person of the PO is defined as the first approver in the chain. I tested with RR_EMPLOYEE and a hard-coded user BP number (my own), but got error "Strategy RR_EMPLOYEE did not determine any approver". Changing to any other user's BP number worked. So I am guessing the buyer himself can not be an approver. Since this is a business requirement, we wouldn't mind developing enhancement to work around this restriction. If you could point me to the place where this is checked, that would help me.
SAP recently released the consultant OSS note to handle this issue.. when the release the SRM 7.0 , SC requestor or PO creator ( Buyer ) cant be in the approval list.. later on they release a OSS note to handle this issue.. 1551561\
2) I have set up the process level configuration as such:
100     ZEV_PO_SL_APPR_001     PO approval level 1     RR_EMPLOYEE     Specify Employee for Approval
200     ZEV_PO_SL_APPR_002     PO approval level 2     RR_MANAGER     Get Creator's Line Manager for Approval
300     ZEV_PO_SL_APPR_003     PO approval level 3     RR_MANAGER     Get Creator's Line Manager for Approval
The corresponding expressions are simply checking against the PO total value, such as -
0V_PO_POTOTALVALUE >= 0 AND 0V_PO_POTOTALVALUE < 1,000
0V_PO_POTOTALVALUE >= 1,000 AND 0V_PO_POTOTALVALUE < 25,000
0V_PO_POTOTALVALUE >= 25,000
But when I checked the Approver list with a PO with total value > 50,000, only the first level is triggered and listed. And once approved, the PO went into "Ordered" status. But it should have gone through 3 levels of approval. I'd greatly appreciate it if you could point out what might have been wrongly defined in my configuration.
once you implement the OSS note Q1, you can build the custom RR resolver to handle this issue with in one process level.. but you have to implement the process level BADI as well.. please refer /SAPSRM/BD_WF_PROCESS_PO badi for more details
Saravanan

Error in RAR while approving request from CUP

Dear GRC Gurus,
I am getting error while approving request in CUP for RAR. Checked the related threads for this issue but still not getting any solution.
Connectors are working fine. Also web service URL is maintained correctly and password for the same is working fine in backend.
Error message is
Risk analysis failed: Exception in getting the results from the web service : Service call exception; nested exception is: java.rmi.RemoteException:
Pl help.
Regards,
Muskaan

Hi ,
You need to clarify what you are trying to do, type of request, timeout time, moment it fails...
If you are referring to the RAR SOD web-service call from CUP, the timeout defined may be too short, problems on the web service/backend connectors configuration or performance/resources available. I advise you to see the SAP Notes below.
Troubleshoot issues with risk analysis, see the SAP Notes 1136379, 1049058, 1145700, 1234807, 1085586, 1061088, 1003239, and 1166368.
This is the most common issue between CUP and RAR when running the SOD analysis, and some times the only solution is to improve the performance of the server with more memory/processor.
Regards,
N

Mass approval functionality for SRM work items

Hi,
We want to implement mass approval functionality for SRM workflow, so that any user is able to approve/reject multiple requests at one go through UWL.
Please guide if it is possible to implement this functinality for task id TS40007952.
Regards,
Avantika

Hi Avantika,
The mass approval functionality can be implemented for simple workflow items which have decisions to complete the work item. (User Decision Type)
In SAP Business Workflow, user can define a task as a decision task by assigning DECISION as the underlying business object type. The task definition allows user to create two or more decision options to complete the task.
The idea is to simply create a custom view/subview for the UWL item and configure it according to your needs.
Have a look at this blog:
Mass/Batch Processing of Work items in UWL
and also check the documentation:
http://help.sap.com/saphelp_nw70ehp1/helpdata/en/4e/72112bc9ea484196f2a5fdc68f5f5f/frameset.htm
Let me know if you have any questions.
Thanks,
Shanti

GRC AC V10 - one approval step for manager and role owner

Hello Community,
I have one, perhaps easy, question. Where is it possible to maintain the solution of one approval step for manager and roleowner, if both are unique.
E.g.:
simple approval workflow: manager stage afterwards roleowner stage afterwards auto-provisioning
So if the request is routed to the manager and the manager is also the roleowner of the requested authorization role (same UserID). The user has to approve one and the same request twice.
Is it possible in V.10 to change the config that the user has only to approve the request once? And then to decide on which relevant stage settings are valid for this process.
Thanks,
Alexa

Hi Alexa,
We have had a similar questions raised in a project. In an ideal world, a single "Sign-off approval" would be a great functionality where the same user has to approve the same consecutive stages, but the reason for different stages would entail that the responsibilities entailed per stage differ, e.g. Line Manager would just check the over request, and the role owner etc may be reviewing the elegibility of a specifc role etc.
If it is likely to be the same person reviewing the 2 consecutive stages, maybe a single stage workflow would be sufficient to cover this scenario.
I think the logic you are trying to configure in the workflow is possible but will require alot of work with knowing how to create a clever custom workflow with BRF+ or the actual WF stuff in SAP itself.

Questions for the end users in Building an application.

Questions for the end users in Building an application.
Hello,
I am assigned a project in building a CF application. As far
as the business requirements, I have an idea from the MIS people.
However, I have a meeting with direct users and I have to ask
questions to add to my requirements. I am still a beginner in this
but I need to ask questions.
Can anyone give me tips? what basic / important questions?

For starters,
DO:
Ask them to discuss what they want to do with the application
Try to understand their level of computer literacy
Keep your conversation non-technical
Continue to interact with the users during the design and
development process
Try to identify a "champion" with whom you can interface as the
project progresses
DON'T:
Use technical terms or discuss technical issues
Talk down to them
Promise delivery dates until you have documented their
requirements and they have approved them

Approver Determinator in CUP

Freinds,
Any idea about 'BPO' approver determinator for workflow type Complaint user provisioning in CUP and from where this would get names from.
Thanks in advance.
Srinu

No...when you go to create stage..these is a standard approver determinator ' BPO' when you select workflow type 'compliant user provisioning'.
for examlpe if you select security lead as a approver in a stage then the workflow would pick the name from the approvers-> security lead...so if you select BPO in the stage where do we have to maintain the names of the BPO's.
Thanks,
Srinu

SP10 - multiple approver problem with CUP

We have SP10 (patch 1) in our development system and cannot move forward to production because of a real show stopper. I have currently reported this to SAP thru an OSS message (and it is in development) but would like to know if anyone else is having this issue with SP10. (this happened even before applying patch 1)
We have multiple approvers when creating NEW users or CHANGING users in CUP. We have it configured to allow just one of the approvers to approve before going on to the next stage. Since we put in SP10, CUP is requiring ALL approvers to approve the request before going on to the next stage. We get the following message when one of the approvers approve the request: Request no: 5020. is approved, pending for other Approvers.
I've seen this reported for UAR and SOD but not for CUP. In fact, there is a fix for UAR in Patch 1 of SP10. I applied this patch but it hasn't fixed the CUP issue. I also don't have the issue when rejecting a CUP request, or when approving it through the configuration --> Request --> Administration screen (what I consider the Back-door since only security administrators get the configuration area).
Thanks for your input.
Peggy

Christian,
I totally agree with you.
The good news is.... We installed SP11.1 and the multiple approver problem is fixed.
We have decided to leave our production system at SP8 until this system settles down a bit. Of course, this means we can't use many of the new fixes and features (such as UAR). We use our sandbox system to apply new support packs and do very rigorous testing. And our DEV system is at SP8 too.
Good Luck.
Peggy

How to get list of approved MSU for specified target group

Hello guys,
I have question about WSUS on windows server 2008 r2 sp1.
I need to get list of approved MSU for specified target group only for windows server 2008 r2 sp1, but I don't know whole syntax.
I can get list of approved updates for w2k8r2sp1:
$Title_r2='R2'
$Itanium='Itanium'
$wsus.GetUpdates() | Select Title | Where {
$_.Title -match $Title_r2 -and $_.Title -notmatch $Itanium -and $_.IsApproved -eq 'True'
But how can I get it for specified target group?
Please, help :)

But how can I get it for specified target group?
Is there some reason you're not just using the native console reporting to do this?
Testing for 'R2' in the title will not guarantee getting all of the applicable updates, you need to query by Product Category to get all of them.
From my quick research, it appears that GetUpdates() does not return target group information, just a flag state on whether the update has been approved, or not. I don't have a working PS WSUS instance available to me at the moment, but my guess would be
that GetUpdateApprovals() (or something like it) is what you'll need to use to filter by Target Group.
Lawrence Garvin, M.S., MCSA, MCITP:EA, MCDBA
SolarWinds Head Geek
Microsoft MVP - Software Packaging, Deployment & Servicing (2005-2014)
My MVP Profile: http://mvp.microsoft.com/en-us/mvp/Lawrence%20R%20Garvin-32101
http://www.solarwinds.com/gotmicrosoft
The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.

Approval required for assignment of more than one Role+AccessPolicy

Hi,
we noticed the following behavior with OIM11gR2 (11.1.2.0.0):
2 Role each one with it own Access Policy to provision AD resource
case 1: if we request one Role at time by Catalog, no approval is required
case 2 if we assign both Roles at same time by Catalog, one Request that requires approval il generated
Questions:
1. Is it default behavior?
2. Is it possibile to avoid approval step for case 2? If yes, is there any side-effects removing the approval step?
Thanks

kumarsubhrata wrote:
Dear friends,
>
> I have a depot plant and there Excise Registration No is 12. Excise Registration 12 have a single Series group 121 this time, where all entries (RG23D) are entered.
> But, my customer needs one more Series Group to be assigned with Excise Registration 12 i.e. 122.
> Actually they want separate Series Group for Depot Sales and Inventory Posting i.e. 121 for Depot Sales and 122 for Inventory Posting.
>
> Please suggest me that is it possible to assign 2 Series Group for single Excise Registration for Depot Plant?
>
>
>
> Thanks in advance.
> Kumar Subhrata
Hi,
It is very much possible. Configure that settings in the IMG path
SPRO -> Logistics - General -> Tax on Goods Movements -> India -> Basic Settings -> Maintain Series Groups
Click on new entries and enter 122 and assign excise registration 12 to it.

Approval workflow for external requirement

Hi,
My company already implements Project System and Plant Maintenance, in which we generate PR from those modules, and the PR will be subject to release strategy.
At the moment we want to implement SRM 7.0 and we're planning to use Plan Driven Procurement scenario for the requirement generated automatically from PS or PM. As we can have a release strategy for PR generated from module PM and PS, can we have approval workflow for external requirement in SRM?
Josh

Yes you can but not by standard (Since itu2019s not out of box functionality), on the other hand itu2019s real simple to do an RFC call to your external system and get the agentu2019s information...
All SRM need is only agent ID (User ID) to which the work item need to be assigned...
We too have same scenario i.e. business want to use R/3 release group determination which they have already... we implemented it and working real good...
Let me know if you have any questions...
Thanks!!
Bharath

How can you change your security question for I tunes?

How can you change your security question for I tunes?

If you have a rescue email address (which is not the same thing as an alternate email address) set up on your account then the steps half-way down this page give you a reset link on your account : http://support.apple.com/kb/HT5312
If you don't have a rescue email address (you won't be able to add one until you can answer 2 of your questions) then you will need to contact iTunes Support / Apple to get the questions reset.
Contacting Apple about account security : http://support.apple.com/kb/HT5699
When they've been reset (and if you don't already have a rescue email address) you can then use the steps half-way down the HT5312 link above to add a rescue email address for potential future use

Approval Authorization for Sales Order

Dear Experts,
Can anybody help me by providing a user query for Approval templete for the following condition.
The system should prevent the sales order & Delivery when the customer is having one oustanding invoice above 90 days and the balance due for that invoice is less than Rs. 100
Regards,
Srinivas

Hi Gordon,
Thanks for your effort. I am getting the approval window after the sales order . ie at delivary it is asking me for approval and also for every delivary it is asking even the customer doesn't have any outstanding. if the approval process activates during SO genaration time ..then this will be helpful.
If any previous invoice having outstanding balance >100 and if it exceeds 90 days then it should ask for approval. But the system should not check the Customer account balance.
Regards
Srinivas

I have a new email address and my old email keeps coming up on icloud when trying to update apps and i don't know the password or security questions for the old email. I can sign in with my apple id which is tied to another email but not itunes how to fix

I have an apple id and it has my current email attached to it. however when i go to update apps it's asking for the password for an old email. I no longer have the old email and can't use it. when I go to icloud on my ipad it asks for the password for old email. it doesn't allow me to change the old email to current. when i go to reset it i can't remember the password or security questions for the old email so it doesn't let me go any further. How do I fix this? Do i need to call apple support?

I have the same problem - it is maddening. I rely on this iPad for work so this is not just an annoyance! The above solutions of changing the appleid on the device or on the website do not work.
The old email address no longer exists - I haven't used it in a year probably and I no longer have the account. I logged into the appleid website and there is no trace of the old email address so there is nothing that can be deleted or changed there. On the iPad there is no trace of the old email address so nothing can be deleted there either. I have updated the iPad software and the same problem comes right back. Every 2 seconds I am asked to log in using the old non-existent email. The device is currently useless.
The only recent change to anything was the addition of an Apple TV device, which was set up using the correct login and password.
Does anyone have any ideas? The iPad has been backed up to the iCloud so presumably it now won't recognize the current iCloud account? So restoring may notbe an option?

I am having trouble answering my old security questions for my itunes account and it is creating a problem because I am not able to purchase apps/songs on my new IPAD. What phone number/email adress should I call to get a quick response to my issue?

I have recently bought an IPAD 2 for my girlfriend and have encountered a problem with purchasing apps through my itunes account. It is requesting that I not only enter my pasword (which I know) but answer my old account questions, which I have forgotten the answers to. It had since locked me out of changing my questions for eight hours. Is there any number I can call to prove that I am the real owner of my itunes account so my girlfriend will be able to use her ipad to purchase new apps without having to go through the trouble of using one of my other apple devices? Random information: I believe my questions were set back in 2007 when I purchased my first ipod nano, since then I have used this same itunes account for my own ipod touch and ipad 2 and my girlfriends iphone 1st generation. I have never run into a problem regarding my questions before on any of these devices

http://www.apple.com/support/itunes/contact/

Approver question for CUP

Similar Messages

Maybe you are looking for