Assignments to multiple groups on approval tasks

Hi.
I have a requirement that i dont know if is possible to cover with OIM 9.1.0.2.
I have approval process tasks that assign theirs subtasks dinamically to oim groups depending on the org of the the requester and it is working properly. But now we have a new requirement:
The same subtask should be assigned to two groups AT THE SAME TIME, without any priorities.
Both of them (groups) should be able to approve the task, and no matter which one approves it, it should continue the workflow with the next subtask.
Is that possible?
Thanks in advance.

Create two tasks in Approval Workflow.
And don't select "Required for Completion" check box in both tasks.
Assign both tasks to different Groups
Try it.

Similar Messages

  • How to get the group key, which an approval task assign to

    Hi,
    When a user is assign to OIM Group (i.e. from User Detail >> Group Membership form), I will call an approval process (using Access Policy).
    In that approval process, I have defined two tasks.
    1) Assign Approval to Group -> NOT conditional
    2) Remove OIM Group From User -> conditional
    So, from the 1) task, I will assign this approval to a OIM Group.
    If the user click "Approva", a provisioning process will be fired.
    If the user click "Deny" (Reject), 2) task will be run.
    What I want is this.
    From this 2) task, I need to get the "OIM Approval group" key or name (which this approval is assigned to)......
    Note: I need to get this group info in the "Approval Process Task" -> "Integration" -> "Map"
    Regards,
    Chaturanga

    Hi,
    Yes. I have done that.
    Now what I want is this. If the approver "Deny" (Reject) the approval task, I will call another task in the approval process. From that task, I need to run a code, which remove the user from OIM Group.
    So, to do it, I have written a java code and created a adapter. So, as a input parameter for that code, I need to give the approval group name(i.e. the OIM group, above approval task is assign to).
    How can I get the OIM approval group, which the person who Deny the approval belongs to, from this new approval process task???
    Regards,
    Chaturanga

  • Spawning multiple approval tasks in parallel in OIM11g SOA Composite

    Hi,
    We are trying to implement the following scenario.
    1) We are trying to develop a SOA composite for AD Group Access
    2) The request dataset contains a child table for AD User Group Details which is as follows.
    <AttributeReference name="AD User Group Details" attr-ref="UD_ADUSRC" type="String" length="20" widget="text" available-in-bulk="true">
    <AttributeReference name="Group Name" attr-ref="Group Name" type="String" length="400" widget="lookup" available-in-bulk="true" lookup-code="Lookup.ADReconciliation.GroupLookup" primary="true"/>
    </AttributeReference>
    3) Consider the user is already provisioned to AD.
    4) User now tries to request for AD Group Access by using a request template
    5) The request dataSet for the resource "AD Group Access" will be displayed where the user would "Add" the group(s) to which (s)he want access.
    6) Once the request is sumbitted the associated SOA composite would be executed.
    7) Now, in the SOA composite the logic should be as follows:
    a. For each group selected, there is a corresponding dataApprover who should approve the request.
    b. Once the dataApprover approves the request it goes to the next approver who is securityApprover.
    c. Once the securityApprover approves the request, the request should go thru and the user should get the membership in the AD Group.
    d. Since "AD User Group Details" is a child form in the request dataset, the user can add multiple groups in the same request.
    e. If there are muliple groups selected in the same request, then the same request should spawn parallel approval tasks for all corresponding dataApprovers and securityApprovers.
    f. Then the user should get membership to those AD Groups for which the corresponding dataApprover and securityApprover had approved the request.
    e. If a dataApprover or securityApprover rejects the request then the user shouldn't get membership to the respective group. However, this shouldn't prevent the user from getting membership to other groups for which dataApprover-securityApprover approval was done.
    The dataApprover and securityApprover for the groups are stored in a db table mapping to the corresponding group name.
    We have implemented a SOA composite for which the logic is fine if we add only one group in the child table of request dataset. As per the current implementation, when a user submits the request, the dataApprover and securityApprover for the selected group are fetched from the table and the global variables in SOA composite are set with the ID of dataApprover and securityApprove using setVariableData. These are sting variables. These variables are used in the approval task. The approval task has two "Single Type" participants - dataApprover and securityApprover. These participants fetch the value of dataOwner and securityOwner from the global variables set using setVariableData.
    Now, as mentioned above, if mutiple groups are added like group1, group 2 etc. then there should be multiple approval tasks spawned in parallel that will be approved/rejected by dataApprover1-securityApprover1, dataApprover2-securityApprover2 etc. Depending on the output (approve/reject) the user should get membership to appropriate groups.
    Any inputs on how to modify the current composite to spawn multiple approval tasks in parallel depending on the number of groups added from the requestDataSet would be helpful.
    Regards,
    Swaroop

    Single request id then you are bit safe. The way to do it would be:
    1. Set the dataApprovers as a comma separated list of all the data approvers for all the groups.
    2. Set the securityApprovers as a command separated list of all the security approvers for all the groups.
    3. In Human Task assign the first stage to all the dataApprovers and second stage to securityApprovers.
    Cons of this approach are:
    1. All the approvers would see all the data and they might be confused what they are approving.
    2. securityAppprovers for say group1 won't get the item untill all the dataApprovers approve the request even though dataApprover has approved the request for group1.
    3. Would be hard to implement the rejection cases; depending upon how you want to handle the rejections. For e.g. what if any dataApprover rejects the request? Should the whole request be rejected? If so what would happen to those which have already been approved by dataApprovers? Same case goes for securityApprovers. Again since you cannot modify the requested data once the request is submitted; thus you cannot remove the rejected groups from the request.
    4. You provisioning won't trigger untill all dataApprovers and all securityApprovers have approved the request.
    5. Any one approve from comma separated list of approvers would approve the request. Thus you cannot make sure that all the approvers should approve the request. The workaround would be to create parallel stages in human task and assign one group/approver to one parallel stage. This would mean that you will have to hard code the number of parallel approvals which can be generated in your BPEL human task (This would again depend upon the number of groups requested). To workaround this you could use BPEL extenal routing program where you can pragmatically assign tasks but again since there is no entitlement based request engine in OIM, thus there would be issues there too.
    As a workaround, make sure that you allow only one group to be requested per request and reject the request outright if multiple groups are requested in a single request. You will need to buy in the business on this one.
    Have heard the grapevine that 12G which is in the pipeline would have entitlement based request engine and also would allow for modification of request data once the request is submitted.
    HTH,
    BB

  • Multiple parallel approval task

    Hi,
    Can anybody tell me how we can acheive multiple approval in OIM?
    I have a requirement where I have to send approval task to multiple approvers and based on each approvers response I have to AD group. Currently I have a request where a user can request for multiple groups and for each group we have to send approval. I am not able to send multiple approval task from one request.
    Thanks in advance,
    Amitesh

    This might help:
    {thread:id=2423034}
    {thread:id=2304343}
    {thread:id=2318652}
    -Bikash

  • Avoid Duplicate Tasks when Expanding Groups for Custom Task Process

    Is there a way to:
    Avoid Duplicate Tasks when Expanding Groups for Custom Task Process?
    I've got a people metadata column that I am planning on putting groups into.  I want the groups to expand and send a task for all users in the groups.  I also want to avoid creating multiple tasks if a user happens to be in two groups at the same
    time.
    I'm trying to work out a way to assign users a read task based on job training requirements.  Right now assigning groups and using a workflow task to confirm read is what I'm trying to accomplish.  I just end up getting two tasks for a user if
    their in multiple groups.
    David Jenkins

    Hi David,
    Please verify the followings:
    After Participants, select Parallel(all at a once)
    Expand Task Options, select ‘Assign a task to each member within groups’
    Open the action properties, make sure ExpandGroup is Yes
    Also in SharePoint Designer ,you can edit the property for the Start Approval Porcess to enable ExpandGroup:
    Reference:
    https://social.msdn.microsoft.com/Forums/office/en-US/d14da1c4-bd5a-459b-8698-3a89bb01e6ad/expand-groupnot-creating-tasks-for-users-issue-in-sharepoint-2013-designer-workflow?forum=sharepointgeneral
    https://social.technet.microsoft.com/Forums/office/en-US/ac245d45-ff66-4341-815c-79213efc4394/sharepoint-2010-designer-workflows-and-sharepoint-user-groups?forum=sharepointcustomizationprevious
    Best Regards,
    Eric
    TechNet Community Support
    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact
    [email protected]

  • Multiple Levels of Approval Workflow in SPD

    Hi-
    I'm building a workflow that has multiple levels of approval behind it.  I know how to set up the multiple levels of approval, but sometimes this workflow needs to have 2 approvals and sometimes it needs to have 3 approvals.  I'm hoping to pull
    the info in from a SP List, but am not sure to do with the different number of approvals needed.  Does anyone have any suggestions?
    Thanks a lot!

    Yes you can create a column in SP List containing the Approver names. This should be a People/Group field or Single line of text can also work.
    In your SPD workflow you can track the status of the previous Approver and based on this you may allow the workflow to move to next or stop it. Assuming that you will create a Status column having two values - "Approve" and "Reject".
    If Approver selects "Approve" then workflow proceeds for next approval or else the workflow stops or if Approver chooses "Reject" then you may create a new task for the previous Approver and send him an email - Just a suggestion if you
    have back and forth approval system.
    If it is a simple sequential approval then can go for out-of-the-box Approval Workflow available. If there is some level of conditions then SPD workflow is an option.

  • Approval tasks showing incorrect approval by xelsysadm

    Hi!
    We discovered a strange behaviour with approval tasks and assignment adapters.
    We configured an Approval Process with three approval tasks. The first one is approved by the target user's manager. The second one is approved by a group, determined by the Assignment Adapter. And the third is approved by a fixed group.
    When the requester starts the request, chooses three or four Resources, that uses these Approval Processes. If the manager, in the first approval step, chooses to approve all tasks simultaneously (checkbox Select All, and Approve button), then one of the task is showed as being approved by the manager, while the remaining are showed as being approved by Xelsysadm, which is not the target user's manager, ofcourse. Then, the worflow continues normally.
    Curious thing is that, if we replace the Assignment Adapter in the second approval with a fixed group or user, then the first approval always is correctly recorded as approved by the manager.
    We also tried with different Assignment Adapters, but always with the same result.
    Has anyone stepped with this issue already?
    We are using OIM 9.1.0, BP02.
    Thanks!
    Please, any suggestions to eliminate this problem?
    Edited by: Bleid on Aug 19, 2009 10:14 AM

    The statuses shown are sometimes misleeding. There is a status for when the approval starts. There is a status when the Standard Approval process completes (this is normally set to auto complete). There there is a status for when the object specific approval starts, a status for if any of the approvals have been completed, and then one for when the whole request is completed. These don't neccessarily provide you with a sure answer to the status of the request.
    I think you need to disregard the statuses for now, and just configure the approval tasks as you intend to do so. If you do not want the standard approval to be required, set the Approve task to use the auto complete adapter. Then create an approval process specific to your resource object, and set it to the default. Then create an approval task and make to uncheck the "conditional" checkbox so that it always runs. Set your assignments appropriately, and you will be done. The provisioning will not start until all tasks are completed with a complete status for the tasks within.
    If you want to know the statuses between steps, then check those between all of the steps.
    -Kevin

  • Customizing OIM request or approval task pages

    Hi,
    I need help in changing the layout of a particular screen in OIM 11g R1.  Below is the scenario:
    User submit request.
    Request is assigned to corresponding manager(s).
    If request is assigned to multiple managers, one of the managers will ‘Claim’ the request.
    Manager opens the request details and click on ‘Additional Information’.
    Request is again assigned back to requester.
    Requester will open the request from ‘Approval Task’ to submit additional information to approver.
    In this page, request is divided into two parts i) Basic details, Additional Request details, Request information ii) Role/Request details.
    By default, ‘Additional Request Information’ response section can be completely viewed using scrollbar OR can be dragged down. But our requirement is to align the page such that no adjustment should be made to page to view complete content of the page.  Can anyone let me know how to do this?  I wanted to know in which request/approval task ADF pages files (JSFF) are available to customize. I could see only user page (JSFF) to customize, but not related to request/approval task pages.
    - Kalyan Mutya.

    Pending Tasks works in the following manner:
    - User : Any task assigned to a user remains to be visible under its pending tasks unless re-assigned to someone else by the user/admin.
    - Group : Any task which is assigned to a group would not directly come to the user work flow. Whenever you login to OIM, the system checks all your groups and then do a smart calculation for these assigned tasks. So if the user is removed from a group then it would not see these tasks anymore.
    Now for your case, the Group=Business Owner itself is changed. So for new requests the assignment would be to done to the new group but existing tasks remains in the work-flow of the older group, if still required them you might want to re-assign it using OIM API's.
    Thanks
    Sunny

  • Approval process not waiting for approval tasks to be completed

    Hi All,
    I created an Approval process for a resource. When a request is created for this resource an approval task is assigned to the manager of the user.
    Before the approval task is completed by the manager the resource is getting provisioned. Is there something I am missing out here. Any suggestions about what I am missing here.
    Thanks

    The statuses shown are sometimes misleeding. There is a status for when the approval starts. There is a status when the Standard Approval process completes (this is normally set to auto complete). There there is a status for when the object specific approval starts, a status for if any of the approvals have been completed, and then one for when the whole request is completed. These don't neccessarily provide you with a sure answer to the status of the request.
    I think you need to disregard the statuses for now, and just configure the approval tasks as you intend to do so. If you do not want the standard approval to be required, set the Approve task to use the auto complete adapter. Then create an approval process specific to your resource object, and set it to the default. Then create an approval task and make to uncheck the "conditional" checkbox so that it always runs. Set your assignments appropriately, and you will be done. The provisioning will not start until all tasks are completed with a complete status for the tasks within.
    If you want to know the statuses between steps, then check those between all of the steps.
    -Kevin

  • SC - Approval Task Descrption

    Hi SRM Experts,
    In SRM7.0 SC workflow, I have an approval task description question.
    In process level configuration, I assigned the standard task id 40007953 which is SRM SC cart approval.
    The standard task description shows
                   "You are responsible for the approval of shopping cartu201D
                    &BOR_OBJECT.DOCUMENTNAME& " &BOR_OBJECT.REQUISITIONERNAME&.
                    The total value is &BOR_OBJECT.TOTALVALUESTRING& &BOR_OBJECT.CURRENCY&.
                    You can use decision buttons to approve or reject the shopping cart."
    I want to add the item number and description of SC based on specific grouping logic.  Say for example if a SC has 5 line items, 3 items belong to one group (01, 02, and 05) and other 2 line item belong to second group (03 and 04).
    I extended the BO BU2121 and Put the logic of item no and item description and I copied task id 40007953 and inserted the ITEM NO and DESCRIPTION field in the copied task.
    Problem
    Based on the first group approval, the approver should see only item no's (01, 02 and 05 only) in the task description. Similarly the Second group approval, the approver should see only item no's (03, 04 only) in the task description.
    But that is not happend in the run time because of the workflow WS40000016 and WS40000017's SRM Decision task activity.
    Why during the run time the specific group item nou2019s not showing in the approval task?
    Thanks in advance.
    R Kumar

    Hi,
    We also have same requirement in our project to add line item number in workitem text of Standard task TS 40007953. It currently displays Approve Shopping cart 1000000000000 With Value 267543.00 USD. But we need as Approve Shopping cart 1000000000000 Line 1 With Value 267543.00.
    If you have solved this issue can you please let me know how did you achieve it.
    Best Regards,
    Ravikumar.

  • Approval Task for role assignment

    Hello again,
    is there any manual for approval tasks with the SAP Provisioning Framework? There is a task group called Request new business role, but if I use this, the approver approves the request, but the status of the role assignment is "in process"and never changed to "OK".
    I only found these manuals:
    - How To... Create Approval Tasks in SAP NetWeaver Identity Management
    - Implementing role approvals
    But both documents didn't show an end-to-end role-request-and-approval workflow.
    Thanks in advance.

    Hello Matt, hello Peter,
    the web-enabled task "Request New Business Role" and the including approval task are only examples.
    To create own approval processes for your projects you have to understand how approval tasks and pending values work.
    The following document shows the basics of PVOs (pending value objects).
    http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/b0d6b459-3456-2b10-209e-9e78ec9fd97b?quicklink=index&overridelayout=true
    This is documentation of the release 7.0, which is not updated to 7.1. But basics of PVOs are still the same.
    There is also a document which describes approval task for Release 7.1:
    http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/20b67ad5-c69a-2c10-9da2-9721b1cf749c?quicklink=index&overridelayout=true
    Also a "How-To Guide" is available:
    http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/904deabf-73b9-2c10-e8bb-8514dc3757f2?quicklink=index&overridelayout=true
    I think this is enough to learn to create workflows in SAP IdM.
    There is also a nice book available with detailed information:
    EN: http://www.sap-press.com/products/Understanding-SAP-NetWeaver-Identity-Management-.html
    DE: http://www.sap-press.de/2007
    I think this will help you.
    Best regrads,
    Christoph Reckers

  • OIM pending approval task under user

    I have question regarding OIM
    we have 2 level approval workflow for provisioning responsibility to user. 1st level is Manager and 2nd is Business Owner. Say if the user submit request for a responsibility and it is approved by the user's manager. Its then submitted to Business owner. But say that business owner gets changed.
    this what is happening
    all the request for previous business owner are copied to new business owner, then he can approve/reject them. But the pending task under old business owner is still there. he/she can still approve or reject. Client want to remove this pending approval from the old business owner.
    ** Please note -- Business owner is a group which has a user.

    Pending Tasks works in the following manner:
    - User : Any task assigned to a user remains to be visible under its pending tasks unless re-assigned to someone else by the user/admin.
    - Group : Any task which is assigned to a group would not directly come to the user work flow. Whenever you login to OIM, the system checks all your groups and then do a smart calculation for these assigned tasks. So if the user is removed from a group then it would not see these tasks anymore.
    Now for your case, the Group=Business Owner itself is changed. So for new requests the assignment would be to done to the new group but existing tasks remains in the work-flow of the older group, if still required them you might want to re-assign it using OIM API's.
    Thanks
    Sunny

  • Multiple Group Currencies

    Hi Team,
            We have six consolidation groups with different currencies,I have following clarifications about execution of consolidation:
    Our requirement is to see the consolidated financials of all consolidation groups in their respective currencies for our internal requirement. I have not specified any group currency in my consolidation area, as we can use multiple group currencies.
    1.Can I process  all tasks of the consolidation from the lowest consolidation group to the top- in aggregation pattern keeping the immediate parent company's currency as group currency in the parameters. what will be the impact of this.
    2.Do I have to repeat all tasks again, when I execute my final consolidation which is in INR , since I could have already completed my lower consol groups.
    Kind Regards
    Sreedhar

    I don't think adding a group currency (currency type 30) in a live system is as simple as shutting down the system and moving the transport, even if you plan to do it at the end of a fiscal year.  This might work for future postings (after you do the necessary configuration settings, in spite of the warning that SAP issues in OB22 when you add an additional currency), but think about how will you get the group currency amount for historical postings - without this you will not be able to pull balance to date in group currency for let's say a balance sheet account.
    SAP SLO Services helps with introducing additional currency in a live system - System Landscape Optimization | Data and Technology Services | SAP
    On the OB22 question in your response, you are right - 1st local currency is company code currency, 2nd could be your group currency.  Third is for hard currency, index-based currency, or global compay currency.  See below:
    Hard currency
    Hard currency is a country-specific second currency which is used in
    countries with high inflation.
    Index-based currency
    Index-based currency is a country-specific fictitious currency which is
    required in some countries with high inflation for external reporting (for
    example, tax returns).
    Global company currency
    Global company currency is the currency which is used for an internal
    trading partner.
    On the last question that you have on offline conversion, yes exchange rate is the key for that.  I think the recommended approach for group currency conversion is to use monthly average rate for income statement accounts, and month-end rate for balance sheet accounts.

  • Cancelling a Approval Task using Designer 2010

    I created an Approval Workflow using Designer 2010. The workflow sends out notifications emails to approvers. But what if I want to cancel the approval task after the email has been sent out. I mean I don't want user to be able to approve the List Item.
    Is there something I can change in the Designer 2010 code to make that happen. Thanks so much!
    Regards,
    mayank

    Hi Kapil,
    Thanks so much for your response. I have a document library and it has a column called CE Status.
    When a task is assigned, the CE Status becomes "Media Relations in Progress" for instance. That is one of the stages. There is a group called Media Relations that will receive an email to approve. Once approved, the logic in my code changes the
    CE Status. It goes to next stage and sends out an notification email to the next group.
    I want to create a separate workflow that will cancel any pending task. So some selected user should be able to cancel the task. In that event, the assignee (Media Relations for instance) should not be able to approve the document via the email they originally
    received.
    Mayank

  • Add approval task through API call

    Hello, I am attempting to solve the following problem.
    I have a UDF defined on the Resource Objects form (OBJ table), this filed contains a comma delimited list of OIM groups which is of size n (based on the resource object).
    I would like to create an approval task for each group in this list. In addition i would like the name of each task to show up as the group name. so when a user logs into the UI and looks at the approval details the see the approval task as the group name.
    I have been able to add a task using tcProvisioningOperationsIntf.addProcessTaskInstance API however this API does not allow me to modify 1) the group to assign the request to and 2) the name of the task.
    thanks

    Hey Kevin, thanks for responding.
    This query will allow me to get the process task key, so i can be added to the approval task via. tcProvisioningOperationsIntf.addProcessTaskInstance. However the issue is, no task currently exists. So before i can add an instance of the task i have to actually create a new task. but i was un-sure how to accomplish this through api calls.
    The goal here is to allow a list of groups to be configurable at the resource level without having to modify the approval process.
    thanks

Maybe you are looking for