Can  approval workflow in GRC  be avoided

Hi All
i  have  following query
Following are the steps
1) I am using Oracles Identity Management  .
2) User data iam fetching from OIM
3) Iam using SAP GRC 5.3 ( CUP )
4)  I am using  SAPGRC_AC_IDM_SUBMITREQUEST web service  for request Type ( eg ) say New ACCOUNT
5)  A request id is generated
6) Now can i provision the user  into the SAP backend system without the approval process
7) if yes then let us know how it is done
In short can we bypass the approval workflow in GRC ( as approval has to be done at Oracles Identity Management  ) and directly provision the user  into the SAP backend system
Thanks
Jagan

That's an easy one:
- go to the stage configuration of your provisioning workflow
- chose "No Stage" as the approver determinator
Done.
Frank.

Similar Messages

  • HR Trigger request with a approval workflow in GRC AC 10.0

    Hi Friends,
    Is it possible that a HR triggered user creation request in GRC follow a stage approval based workflow ? Something like MSMP workflow ? Or can we route the HR triggered requests to MSMP worflows someway ? if yes, please help me with the details of the same.
    Thanks in advance for your guidance

    Hi Prashant,
    Refer : Understanding HR Triggers in Access Control 10.0 - Governance, Risk and Compliance - SCN Wiki
    Also search on GRC community there is lot of material available.
    BR,
    Mangesh

  • GRC 10.0 CUP - Function Approval Workflow - Decision pending?

    Hi, i am customizing the Function Approval Workflow (SAP_GRAC_FUNC_APPR).
    I have one stage with only one agent authorization. The agent approved the request but in Search Request:
    Instance Status:  Running
    Instance Approval Status: Decision Pending
    Audit Log:
    + Request XXXX submitted..
    + Request is pending for approval at path GRAC_DEFAULT_PATH stage GRAC_DEFAULT_STAGE
    Approve ID: zzzz
    +Approved by ZZZZ at path GRAC_DEFAULT_PATH stage GRAC_DEFAULT_STAGE
    I don´t see the function in GRC. I´m in SP07
    Regards
    Ignacio

    Hi, my workflow Function Approval (default) have a wait event and i can´t delete this step succesfully.
    Here are more images about the workflow configuration of Function Approval.
    http://es.zimagez.com/zimage/wf10.php
    http://es.zimagez.com/zimage/wf20.php
    http://es.zimagez.com/zimage/wf30.php
    http://es.zimagez.com/zimage/wf40.php
    http://es.zimagez.com/zimage/wf5.php
    http://es.zimagez.com/zimage/wf6.php
    http://es.zimagez.com/zimage/wf7.php
    http://es.zimagez.com/zimage/wf8.php
    Thanks,
    Regards,
    Ignacio Barrionuevo.

  • In approval workflow, can we have one action in which item can be review and approve/reject

    Hello,
    I have created approval workflow using SPD.
    While sending notification to approver, we need to mention link for viewing : [%TaskProcess:Item Title%][%Variable:InternetLink%] and for approve/reject : [%current task: form_URN%]
    So is it possible to have one link, where reviewer can review document and approve or reject it. he/she should not have to go again to mail and click on another link.
    Thanking you in advance.
    Regards,
    Jayashri

    hai
    go for DispatchAction class and then pass as parameters
    refer struts complete reference...
    it will solve ur problems..

  • Can i Cannge the WF_INITIATOR for SRM Approval Workflow.

    Hi Experts,
    I am facing issue related to sendor name format.
    Whenever SRM approval workflow gets triggered then corresponding responsible user(Approver) gets a mail in their SAP inbox.
    I checked in the system these workflow runs using RFC_USER user.So approver gets mail with sendor information as RFC_USER i.e.  "Sent: Jun 17, 2011 by RFC_USER, Functional ID "
    My requirement is to replace this RFC_USER with some other generic user.
    Can anybody tell me please how can i achieve this.
    Thanks,
    Rupendra Pandey

    Hello,
    Usually, if I want to do anything unusual with mails from workflow then I create a step which calls a task which calls a new method of my BOR object which calls fm SO_NEW_DOCUMENT_ATT_SEND_API1. In that we can specify Sender name different from WF_BATCH or RFC_USER.
    Check the following Code for sending mail.
    CALL FUNCTION 'SO_DOCUMENT_SEND_API1'
       EXPORTING
         document_data                    = doc_chng
         put_in_outbox                    = 'X'
         sender_address                   = 'SAPSCHED'
         sender_address_type              = 'B'
      IMPORTING
        SENT_TO_ALL                      =
        NEW_OBJECT_ID                    =
       TABLES
         packing_list                     = objpack
         object_header                    = objhead
         contents_bin                     = html_tab
         contents_txt                     = objtxt
        CONTENTS_HEX                     =
        OBJECT_PARA                      =
        OBJECT_PARB                      =
         receivers                        = reclist
       EXCEPTIONS
        too_many_receivers               = 1
        document_not_sent                = 2
        document_type_not_exist          = 3
        operation_no_authorization       = 4
        parameter_error                  = 5
        x_error                          = 6
        enqueue_error                    = 7
        OTHERS                           = 8

  • Can we change the name of reassign button in sharepoint 2010 approval workflow?

    can we change the name of reassign button in sharepoint 2010 approval workflow?
    Shazil Ali

    Yes, we can change it. Steps are as follows: 1. Create the workflow in SharePoint Designer 2010 2. Use Start Approval Process action 3. Write your logic and all setting as per you requirement and then publish the workflow once. 4. After this, click on
    the workflow name and there you will see the sections as Workflow Information, Customization, Settings, Start Options, Forms. Here you will see a form under Forms section with a name of Approval_x00....... with a type "Task". Click on this form. This form
    is an Infopath form that opens up when a task is to be edited (Task Form). This form will open up in Infopath (provided you have Infopath installed on your system) It may ask you the crendentials for security. 5. The task form will open up in Infopath for
    editing. Click on the Reasign button and in the top left corner in the ribbon section is the field (Label) having text as "Reassign Task". Change this and then save and publish the form.Publish the workflow once again.

  • GRC AC V10 - Mitigation Control Approval Workflow

    Hi guys,
    can me explain somebody the difference between the processID SAP_GRAC_CONTROL_ASGN und SAP_GRAC_CONTROL_MAINT?
    And as well can somebody provide me the initiator rule ID for both so that we can have a detailed look into the brfplus rule.
    We only want to mitigate controls via an controlowner approval and not a process for the creation of new controls.
    That means an asisgnment approval workflow for mitigation controls.
    Thanks a lot.

    Hello Alexa,
    Did you ever employ SAP_GRAC_CONTROL_ASGN ? Were you able to identify the included agents ?
    I am interested in identifying approvers for mitigating controls who can be included in the workflow but are not risk owners. Would you have any suggestions for this type of agent ?
    Any information would be appreciated.
    Thanks,
    Jamie

  • Built in Approval workflow can't send to AD univeral security mail enabled group (email recipient not valid)

    Background: SP2010 SP2 with March 2015 CU installed. Using the built-in Approval - SharePoint 2010 workflow on a library. The Approval workflow does send email to individual users when users are specified in the Approvers field instead of a group. We
    need to use a group. The workflow reports the error email recipients are not valid. I don't see anything in ULS logs. The Exchange server tracking logs do not show the emails to the AD group being processed (no evidence they are even received into Exchange,
    but all other mail from SharePoint goes through, including the workflow's email to the workflow initiator). I can send email to the AD group from Outlook and all group members get it.
    To send Approval workflow email to a mail enabled AD Universal Security group, what
    exactly are the requirements?
    Q1. Does the SharePoint\system account (aka web app pool account) *absolutely* need to have a mailbox?
    If so, I need some clarification. I saw
    http://www.spdev.info/2012/11/using-security-groups-with-workflows.html which was offered as a solution in another post. It says "To allow SharePoint to email the mail enabled security group you need to either create a mailbox for the SharePoint service
    account, or attach the email address provided in the Outbound Email Settings as an additional email alias for a mailbox." Then it says you need to do *both* - create a mailbox for service account *and* add the outbound email settings address as an alias
    in the *service account's* mailbox settings. Well, we can't do the latter. We are using a dedicated AD account with a mailbox for SharePoint mail settings purposes, and no two mailboxes can have the same alias.
    I tried adding the AD account specified in the Reply From: outbound email settings (Reply To: is set to a distribution list) to the AD group's "Message Delivery Restrictions" and UNchecking Require that all senders are authenticated (even
    though the AD account does authenticate). I tried allowing All Senders and UNchecking Require authentication (though that leaves email address open to spammers), but neither worked.
    Q2. Does the AD mail enabled group need to be synchronized via User Profile Sync?
    We currently only sync users. I do see the AD groups (we use AD groups into SharePoint groups security model) in SharePoint's People and Groups, and the mail address for the mail enabled group is *not* present in the properties. Is it a requirement to sync
    the AD groups so that the email address shows in the AD group's properties in SharePoint?
    The AD group is in a SharePoint group with Approve permissions. The individual AD group members are also in another AD group in a SharePoint group with Contribute permissions. I even placed myself in the AD group to test whether permissions issues; I am
    farm admin. All SharePoint groups are set to allow Everyone to read the group's members.
    This is driving me crazy.
    Thanks,
    Joan

    Hello Victoria,
    Thank you. I have an update. I got the workflow working. Turned out to be two separate unrelated issues:
    (1) invalid email address for recipient was because the email address of AD group was not present in SharePoint's properties for group. Also why nothing appeared in Exchange Server tracking logs; the email was never sent from SharePoint. Once this was remedied
    (explained below), the Task Assigned email was sent out to the AD group.
    (2) the Task Assigned email was rejected by Exchange for reason 550 5.7.1 RESOLVER.RST.AuthRequired. The Exchange tracking logs clearly showed this. Setting the AD group's properties Mail Flow Settings, Message Delivery Restrictions to "Only senders
    in the following list: <the domain account of the email address specified in SharePoint outgoing email Reply From setting>" and UNchecking "Require that all senders are authenticated" allowed the Task Assigned email to go through.
    Answer to Q1: It is not required for System account (aka web app pool account) to have a mailbox when the SharePoint outgoing mail settings Reply From email address is of a domain account of the domain SharePoint is in. That is our scenario, as I noted we
    use a domain service account dedicated for SharePoint mail. I can't speak to other scenarios. The Reply To: does not have to be the same email address; we use a distribution list. And, ever paranoid about spamming because of unchecking require autenticated
    senders, I verified that my own account could not send email to the group (Outlook provides message "You do not have permission to send to: <GroupName>").
    Answer to Q2: I did not have to sync groups via User Profile Service. What I did do, however, was remove the AD group from SharePoint, People and Groups, Groups list, and readd it. (Note: what I *literally* did was was remove the SharePoint group from all
    permissions, remove the AD group from the SharePoint group, then remove the AD group from the Groups list, readd the AD group into the SharePoint group, and reassign permissions to the SharePoint group - Read to top-level site, Read to subsite (has unique
    permissions), and Read, Approve to the subsite library with the workflow. In order to start clean. When I readded the AD group to the SharePoint group, it came in with an email address; email address now shows in the group's SharePoint properties. I noticed
    that the format was GroupName instead of Domain\GroupName. (I had originally created the AD group as a Global Security group, added it to a SharePoint group, *then* (after I found out about that requirement when first troubleshooting workflow) converted it
    to Universal and mail enabled it.
    I suppose, would syncing groups would fix this issue of SharePoint not updating AD group changes?
    Additional note: I first gave the AD group Read to the library directly instead of giving Read to the SharePoint group, tried the workflow, and the email was sent. I then removed the AD group's direct permissions to the library and added the SharePoint group
    to the library and that also worked. So I was able to use the AD group in SharePoint group (I had read in one post that would not work).
    Thanks,
    Joan

  • SOD Detour in Role Approval Workflow possible?

    Hello GRC Experts,
    we have implemented an Access Request Approval Workflow with a Detour Rule (GRAC_MSMP_DETOUR_SODVIOL).
    The second workflow we are working at is the Role Approval Workflow. Is it possible to use the SOD Detour Rule also in Role Approval Workflow? I didnt find the SOD Detour Rule in the MSMP Role Approval Workflow.
    We would like to implement a following Scenario:
    if the role contains an SOD the request should take Path 1 and if not Path 2.
    Is it in MSMP Standard possible or should we use BRF+ for creating a Detour Rule?
    Thanks,
    Best Regards
    Sabrina

    Hi Sabrina,
    For Access Request workflow, we generally use GRAC_MSMP_DETOUR_SODVIOL to implement routing rule(based on detour condition - risk found). Purpose of same (if I am not mistaken) is to through the request to another level of approver wherein mitigation monitor agent reviews the mitigation performed by role owner stage and approve/reject the request.
    But, when we create a role same is not the condition as we do not mitigate role level risk thus no need to go for mitigation monitor stage. May be you have some business scenario, if you can let us know will be gr8.
    For the rule ID, did you try adding the rule ID ?(you may already know, still would like to cross check with you).
    GRAC_MSMP_DETOUR_SODVIOL under list of rules for "
    Role Approval Workflow" In the screenshot you have shown, just click on ADD feed -
    Rule ID -GRAC_MSMP_DETOUR_SODVIOL.
    Rule description - same as Access request.
    Rule type - Function module based
    rule kind - routing rule.
    Add this and check if it works and let us know the result too.
    Regards,
    Nishant

  • MS Application Approval Workflow

    Hi
    I've just installed a fresh System Center 2012 R2 environment including SCCM 2012 R2, SCOM 2012 R2, SCSM 2012 R2 and Orchestrator 2012 R2. All the SC products are installed on Windows Server 2012 R2.
    My question is if MS Application Approval Workflow are supported on these releases and OS?
    Best regards
    Ingemar

    The Solution Accelerators got shutdown and from what I understand of this post the AAW was a part of that.
    http://www.systemcentercentral.com/note-on-support-for-it-grc-and-application-approval-workflow-solution-accelerators/?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+systemcenterforum+%28System+Center+Central+Rollup%29
    Perhaps the ConfigMgr team will develop something but that is more than I know.
    You can take a look at
    http://msdn.microsoft.com/en-us/library/hh948835.aspx for the ConfigMgr 2012 R2 SDK that holds a sample for an AAW.
    Tim Nilimaa | Blog: http://infoworks.tv | Twitter: @timnilimaa

  • JV Approval Workflow

    Dear Experts,
    I need to create Appproval workflow for Journal Voucher. I had gone through the docuemnts in SPRO - financial accounting - tools - workflows.
    I have created a small custom workflow with FIPP - Completed as triggering event. But i feel we can use the std workflow template provided by SAP, but dont know which one to select and how to proceed. If anyone has information, please guide me.
    Any kind of help is highly appreciated.
    Regards,
    Lakshmi

    Hi Lakshmi,
    I am having a challenge with JV approval workflow myself and I'm wondering if you can help. Essentially, I need users to be able to post JVs below the threshold amount, and park (send for release) ones above the threshold. I just posted a note, the contents of which are copied below. Any guidance you can provide would be much appreciated.
    Thanks in advance,
    Kathryn
    Our objective is to have senior accounting personnel approve/release journal entries that exceed a certain value, say $100,000. We have configured the release function for parked documents, using workflow WS10000051 with business object 'FIPP', event "COMPLETED" and release amount of $100,000. However, this appears to assume that staff have authorization only for parking, because if you have posting authorization, nothing stops you from posting a document over $100,000. It seems illogical that you have to exceed a certain $ value before the release will trigger, but if your document is below the amount, you can't post it because you can only park.
    In order to avoid making approvers release every single journal entry, what we want is for users to be able to post any document below $100,000.00, but be forced to park ( save as completed) all documents >/= this limit. We tried setting up a validation on the document amount, but the error message forces us to exit completely, i.e. doesn't allow us to park the document.
    Is there perhaps a different workflow that triggers at the point of posting, rather than parking, that will accomplish what we want?
    Thanks,
    Kathryn

  • Default Approval workflow throwing error "Error occured"

    Hello,
    Default approval workflow throwing an error : Error Occurred, but no details shown.
    So could you please help me out, from where I can exactly get details to check error details/logs.
    Thanking you in advance.
    Regards,
    Jayashri

    Hi Jayashri,
    Since the issue is related to Default approval workflow, I wonder if you are using workflow based on 2010 platform or 2013 platform.
    If you are using SharePoint 2010 predefined workflows and encountered the "error occurred", please refer to:
    For predefined workflows, the workflow history list is a good troubleshooting tool. The workflow history displays the current state and all the previous states for a running workflow. When an error occurs in a workflow, the last event in the workflow history
    list is titled Error. The list provides information about when the error occurred, but the list typically does not provide a description of the problem to avoid revealing sensitive information that could lead to a security issue. The most common errors are
    caused by connectivity problems, incorrect e-mail settings, or restricted user permissions.
    https://technet.microsoft.com/en-in/library/cc298927%28v=office.14%29.aspx?f=255&MSPPError=-2147217396
    If you are using SharePoint 2013 workflow, you may refer to troubleshooting actions in the article:
    http://blogs.msdn.com/b/vincent_runge/archive/2014/01/07/troubleshooting-actions-for-sharepoint-2013-workflows.aspx
    Regards,
    Rebecca Tu
    TechNet Community Support
    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact
    [email protected]

  • SharePoint Approval Workflow using SharePoint Designer in SharePoint Foundation 2013

    I am unable to do SharePoint Designer workflow for approval process and I didnt get any Approval process in Actions in SharePoint designer Workflow also I don't find workflow features in Site collection features SharePoint 2013.
    Even I am not able to do simple Out of the box Approval Workflow.
    Kindly help me with this

    Unfortunately, Out of the box workflows are not available in SharePoint foundation 2013, you need at least the standard version of SharePoint 2013.
    You can still create .Net Workflows using the 2010 plateform.
    Take a look at this great comparative between the three versions of SharePoint 2013 :
    http://blog.blksthl.com/2013/01/14/sharepoint-2013-feature-comparison-chart-all-editions/

  • Approval workflow in SharePoint foundation 2010

    Hello Experts,
    I'm using SharePoint foundation 2010. Can someone help me understand the procedure for creating the approval workflow for a doc library using the SharePoint designer 2010. It would be great if you can guide me the step by step procedure for setting up this
    workflow.
    Thanks. 

    Hi rebel537,
    As you described, you are using SharePoint Foundation 2010. There is no “Start approval process” action when you edit SharePoint Foundation 2010 workflow in SharePoint
    designer 2010.
    I suggest you using “collect data from a user” action instead of “start approval process” action to complete the approval task. There is a demo for your reference.
    1.  
    Open the SPD, navigate to the workflow edit zone. Select “collect data from a user “action.
    2.  
    Click data, in the pop-up window, click next and enter the task name for the approval workflow.
    3.  
    Click next, define the fields for the task, for this demo, there has a field “approval result”.
    4.  
    Then click finish.  Back to the workflow edit zone, click user, in the pop-up window, select the user for the task then click finish ,back to the workflow edit zone.
    5.  
    Add a condition (if any value equals value) after the action.
    6.  
    Click the first value, and then click Fx, there goes to a pop-up window, enter as below.
    Data source:  Association: Task List
    Field from source: Approval Result
    Field: ID
    Value:  Variable: collect
    7.  
     Set another value to “Yes”, add the action” set workflow statue”, set it to approval.   Add an If-Else branch, set the workflow statue to reject.
    8.  
    Publish the workflow, and use it for the approval purpose.
    Thanks,
    Simon

  • In search of assistance learning how to modify the mail message from an out of the box SP2010 approval workflow.

    So, I have found the article
    http://punaro.com/2012/01/derek/modifying-a-sharepoint-2010-workflow-email/comment-page-1/ which appears to walk through the process of modifying an out of the box workflow's mail message.
    However, there is a basic problem that I run into before I get started.
    I am logged into the system as a regular user (ie not a farm admin, etc.).
    I do, however, have full control on the site on which I am working.
    I create a custom list.
    I create a simple one step approval - sharepoint 2010 out of the box workflow.
    I start SharePoint designer and give it the URL of the list. It opens up and I see the various objects on the left side of the screen.
    I click right on the Workflows object - which is where the article says I will find the ability to copy and modify the workflow.
    All I see is "open", "open in a new tab" and "Pin".
    I selecdt open in a new tab - and I get a blank screen labeled workflows that says "There are no items to show in this view".
    So, I click on Lists and Libraries, then on the name of my custom list.
    When the list displays, the Workflows section of the page has a "Modified Workflow" displayed.
    When I right click on it, no menu is shown. When I click on the modified workflow, I get the workflow settings page for that workflow.
    I am trying to figure out how to create the copy of the workflow so that I can modify one of the mail messages in SharePoint designer.
    Is there someone who has some advice on how to find this copy and modify option?  Or perhaps a web site, web forum, article series, or book covering the topic?
    Thank you! 

    Hi lwvirden,
    According to your description, my understanding is that you want to modify the OOB approval workflow in SharePoint Designer.
    After opening the site in SharePoint Designer, just click Workflows in the left panel and then the workflows in the site will load in the right part.
    If you want to copy and modify the OOB approval workflow, then you need to right the approval workflow
    Approval – SharePoint 2010 under Globally Reusable Workflow. After that you will see the
    Copy and Modify button.
    Best regards.
    Thanks
    Victoria Xia
    TechNet Community Support

Maybe you are looking for