CUP 5.3 (SP9) Role search in a CUP request

Dear Experts,
I have a problem. I cannot select roles by company selection in a CUP request. I believe I am not associating companies to roles correctly...I don't know what went wrong and what additional procedures that I have to follow to fix this problem.
I need this selection feature since we are going to give a set of roles to users (or let them select) according to the company that they belong to.
Here is what I did basically:
1. Under Configuration>Role Attributes>Custom Filed in ERM, I set up a custom filed "COMPANY" and put some values (COMP1, COMP2, etc).
2. Under Configuration>Roles>Attributes in CUP, I also set up companies that are exactly the same as those in ERM.
2. Then, I created a role (ROLE1) in ERM and gave a company attribute (COMP1) to that role. Now, ROLE1 should be associated to COMP1, theoretically, right?
3. However, when I crate a new user in a CUP request and then search for a role (ROLE1) by selecting company attribute (COMP1), the role (ROLE1) does not show up. This is my problem.
PS: I have no problem getting a role by functional area, business process, or other predefined attributes in CUP.
Please save me if you can.
HM

Hi Frank,
1. The company ID is identical in ERM and CUP, and properly assigned to roles?
=Yes (double checked).
2. You have imported the roles from ERM to CUP?
=Yes (CUP>Roles>Import Roles/Groups, and the role source is ERM).
3. Do the roles show up with the correct company assigned in CUP Role Search?
=No (please see below commnets).
When I search roles in ERM (Role Management>Role>Search), I can see the company ID under the tab "Custom Attributes".
When I search roles in CUP (Config>Roles>Search Roles), I don't see the company ID anywhere including the tab "Company" and "Custom Attributes".
Does this give you any clue?
Thanks,
HM

Similar Messages

  • Error in CUP " Role Search" type of access as transaction

    Hello
    This has been talked about for a Role in this thread.
    Error in CUP " Role Search"
    When the approver want to select an Role by clicking the select role tab and then select the type of access as transaction I get No Records Found.
    I do get when I select the type of access as Roles. The above thread has helped me in resolving that.
    Please help me with this. I am stuck.
    Thanks

    Just to add that
    In CUP-> Configuration->Roles--->Search Roles
    When I click on the Roles I can see the associated transaction.
    But When I create a Request-----> Select roles and then Select the access type as transaction.
    I dont see any of that
    Any help regarding this. Now sure why those transactions are not pulled.
    Thanks

  • Role search in request

    GRC 5.3 sp9, in CUP when creating a new request, if a company is selected on the main screen, when you search for roles, it comes back "no roles found".  If you remove the company selection, then the roles show up.  What could cause this?

    Alpesh,
    I have a little question for you. I am having a little trouble; I cannot get a role by company attribute in CUP. If you can, please save me.
    Here is what I did:
    1. Under Configuration>Role Attributes>Custom Filed in ERM, I set up a custom filed u201CCOMPANYu201D and put some values (COMP1, COMP2, etc).
    2. Under Configuration>Roles>Attributes in CUP, I also set up companies that are exactly the same as those in ERM.
    2. Then, I created a role (ROLE1) in ERM and gave a company attribute (COMP1) to that role. Now, ROLE1 should be associated to COMP1, theoretically, right?
    3. However, when I crate a new user in a CUP request and then search for a role (ROLE1) by selecting company attribute (COMP1), the role (ROLE1) does not show up. This is my problem.
    PS: I have no problem getting a role by functional area, business process, or other predefined attributes in CUP.
    Can you possibly tell what went wrong?
    HM

  • Role created in ERM is not appearing in CUP request for assignment-GRC 10.0

    Hi,
    We are on GRC 10.0 - SP5
    We have created a role in ERM and it was succesfully created in backend system. However when we tried to assign the same role using CUP request - the role is not appearing.
    1) Do we need to upload roles for CUP  in GRC 10.0 (similar to 5.3) to populate. Will the role doesnot automatically appears in GRC database for CUP as it is created through ERM?
    2) If the roles are imported in ERM with role owner information, does the same reflects for CUP also for role owner approver assignments?
    Thanks and Best Regards,
    Srihari.K

    Hi Sri,
    Is the role status set to "production" ??
    Cheers,
    Diego.

  • One CUP request for assigning role to multiple users

    Hi,
    We assign roles to users in production only through CUP requests.. We use GRC 5.3
    Here we have a case where we need to assign one role to  60 users in production(each user may have different  roles assigned in the back end) . I can raise one CUP request for all users using " multi-user" option in Copy request . But when we want to make a risk analysis , it will not show risks at user level as each user had different roles and may get different risks by adding new role.
    Instead it will give risks if any for only that new role which want to assign. Our manager is not accepting as this is not giving complete picture of risks for each user when we add new role.
    Please suggest me if there is any other way where I can make a risk analysis for each user when I created a CUP request for multiple users.
    Or the only solution is to create 60 CUP requests ?? this would be too manual
    Regards ,
    jaags

    Raghu,
    thanks for the reply, you are right as per the audit .But suppose if it is for 200 users ,creating 200 CUP requests will be impractical right.
    there should be some solution for this , because there will be many situations practically where we have to assign roles to N number of users.
    Is this possible in GRC 10 ? any idea ?
    Regards,
    Jaags

  • Portal Roles Search & TREX Search

    Hello,
    We need to search some pages and documents. The search results should be based on the permissions set for that user on the pages and documents. We created Portal Roles Search. It works fine for pcd objects. But it doesn't work for documents. 
    When we create an index with TREX Search service, it works for documents. But it doesn't consider the permissions.
    When there are 2 search indexes, one with TREX Search and the other with Portal Roles Search, the TREX Search throws WcmException.
    Any ideas?
    Regards,
    Rukmani

    Hi Sudha,
    Portal Roles Search
    The objects found using the portalRolesSearch index service in the PCD cache are converted to KM objects and can be displayed in the search results list.
    http://help.sap.com/saphelp_nw2004s/helpdata/en/b2/d59a4271c80a31e10000000a1550b0/content.htm
    TREX Search
    Enables the retrieval of information
    http://help.sap.com/saphelp_nw70/helpdata/EN/42/60adaa032c1422e10000000a114cbd/content.htm
    TREX Classification
    Helps in the classification of documents.Classification causes documents to be assigned to one or more categories of an existing taxonomy
    http://help.sap.com/saphelp_nw04s/helpdata/en/bf/a17a05d15211d6b2c700508b6b8a93/content.htm
    It depends on the kind of search you want to enable for your project.
    Hope this helps.
    Cheers,
    Sandeep Tudumu

  • Making comments mandatory for only some roles when approving CUP requests.

    Does anyone know if there is a way to make Comments required in CUP requests when approving a request for just certain roles?  We don't want comments to always be required, just if you are approving a request for Role XXX for example.
    I tried using the Comments Mandatory setting that is available on the Role Details screen (along with the associated flags on the Roles/Role Selection screen), but this only seems to require a 'request reason' for the role when the request is being built.  It doesn't require comments when the request is being approved.  (There also appears to be a bug with this because this request reason doesn't show up anywhere in the request after it is built.)
    I know you can set the Comments Mandatory on for the workflow stage, but then you have to enter a comment for every request, regardless of the roles.  We are wanting them to required only for a few specific roles.
    We are on GRC 5.3 11.2.
    Thanks.

    Hi Bob,
    It is not possible to enable the comment option only for few roles. Either it can be on for all, or off.
    Rgds,
    Raghu

  • CUP v5.3 SP11.1 - CUP Request button "Existing Roles/Groups"

    Hi!
    Re: CUP v5.3 SP11.1 - CUP Request button "Existing Roles/Groups"
    Can anyone explain why some of our CUP users will see this CUP button in the CUP Request and others will not? Are they missing a UME "ACTION"?
    The button works fine, but it only shows up for some users and not others.
    Thanks for your help!
    -john

    Hello ,
    For Approvers , the button "Existing Roles /Groups" will be visible only when the following "stage" level setting is set
    Change Request Content = Yes
    Add Role =Yes .
    Regards
    -Ranjiv

  • Create a CUP request with no roles

    Hello
    Is there a a way to create a CUP request only with free text and not with assigned roles? we are trying to find a way to configure that with no luck.
    Since the end user does not know which roles he needs the customer asks that he will fill in his request in the free text space
    (with the relevant mandatory fields that are in the initial screen)  and the first approver will add the relevant roles based on the text that the user entered in the system.
    Kind Regards,
    Shira

    Hello Shira,
      Thats correct, there is no feature to force the approver to select roles prior to approval of the request.
    In my case we were using default roles so every request created would have minimum set of default roles available in it. Apart from that, we forced the request to go through the Functional Lead stage who would be responsible to check if correct roles have been assigned to the request by the Functional Executive in the previous stage. Also, since the Functional Lead stage used the approver determinator as Role (role owner defined for roles), if there was no role attached by functional executive in previous stage, he/she would not be able to approve the request without any role as it would not be able to find the approver for the next stage and thus the system will throw error.
    We also used the organizational process procedures to educate the functional excutive about their responsibilities of attaching roles to the request. So i would say that combination of factors worked for us in this scenario.
    Regards, Varun

  • CUP 5.3 (SP9) CUP request form confusion

    Hello Experts,
    There are two ways to create a CUP request as I know:
    (1) Use a CUP link in the Request Access screen to create a CUP request
    (2) CUP>My Work>Create Request
    Here I have a question:
    What are the differences between these two request forms? Obviously, the appearance is different in each request form. In what situation do we use each form?
    A little background:
    Our business requirement goes; a person (security admin) who is creating a CUP request for other people does risk analysis and mitigates the user if there is any risk violation before submitting to the 1st stage approver (manager).
    My problem:
    When creating a CUP request with an option (1), I cannot run risk analysis since there is no "Risk Analysis" button. I don't think this is configurable.
    On the other hand, I can do risk analysis with the option (2). But, with the option (2), there is only so much I can customize. Whatever I customize in CUP>Configuration>Request Form Customization, it only changes the option (2) form but not the option (1) form. For example, I want the manager name field mandatory, but CUP won't let me do it for the option (1).
    Please share your knowledge why there are two request forms available in CUP and how I can make them fit into our business requirement (risk analysis when requesting and set mandatory fields as we want).
    Thanks,
    HM

    HM,
      Option 1: End user request form ->
      It should be used by all the users and offcourse CUP does not allow end users to run risk analysis for their requests. All the customization made through end user personalization will show up in this form.
    Option 2: Approver view request form ->
    This request form should not be used by all the users. It is only intended to be used by power or advanced users. As you can fill the form with any kind of fake details here.
    Alpesh

  • GRC-AC v5.3, patch8.1: cannot retrieve user information in CUP Request

    Hello,
    version: GRC-AC v5.3, patch8.1
    I am currently having trouble bringing up user information in a CUP Request. It is only occuring in our GRC-AC DEV system. I have checked that all of my AE Config settings are the same and the backend system RTA is correct.
    Thanks for your help!
    Here is the AE Log:
    2009-12-02 14:21:48,912 [SAPEngine_Application_Thread[impl:3]_35] ERROR com.sap.mw.jco.JCO$Exception: (104) RFC_ERROR_SYSTEM_FAILURE: No more storage space available for extending an internal table.
    com.sap.mw.jco.JCO$Exception: (104) RFC_ERROR_SYSTEM_FAILURE: No more storage space available for extending an internal table.
                            at com.sap.mw.jco.MiddlewareJRfc.generateJCoException(MiddlewareJRfc.java:516)
                            at com.sap.mw.jco.MiddlewareJRfc$Client.execute(MiddlewareJRfc.java:1514)
                            at com.sap.mw.jco.JCO$Client.execute(JCO.java:3980)
                            at com.sap.mw.jco.JCO$Client.execute(JCO.java:3417)
                            at com.virsa.ae.service.sap.SAPR3UserDAO.executeFind(SAPR3UserDAO.java:441)
                            at com.virsa.ae.service.sap.SAPR3UserDAO.getUsers(SAPR3UserDAO.java:1762)
                            at com.virsa.ae.service.umi.sap.SAPR3SearchUser.getUsers(SAPR3SearchUser.java:317)
                            at com.virsa.ae.search.bo.SearchUserBO.findUsers(SearchUserBO.java:110)
                            at com.virsa.ae.search.actions.SearchUserAction.searchUsers(SearchUserAction.java:2315)
                            at com.virsa.ae.search.actions.SearchUserAction.searchRequestors(SearchUserAction.java:1999)
                            at com.virsa.ae.search.actions.SearchUserAction.execute(SearchUserAction.java:260)
                            at com.virsa.ae.commons.utils.framework.NavigationEngine.execute(NavigationEngine.java:295)
                            at com.virsa.ae.commons.utils.framework.servlet.AEFrameworkServlet.service(AEFrameworkServlet.java:431)
                            at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
                            at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:401)
                            at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:266)
                            at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:386)
                            at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:364)
                            at com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:1039)
                            at com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:265)
                            at com.sap.engine.services.httpserver.server.Client.handle(Client.java:95)
                            at com.sap.engine.services.httpserver.server.Processor.request(Processor.java:175)
                            at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:33)
                            at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)
                            at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)
                            at java.security.AccessController.doPrivileged(Native Method)
                            at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:104)
                            at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:176)
    2009-12-02 14:21:48,931 [SAPEngine_Application_Thread[impl:3]_35] ERROR Search could not be completed
    com.virsa.ae.service.ServiceException: No more storage space available for extending an internal table.
                            at com.virsa.ae.service.sap.SAPR3UserDAO.executeFind(SAPR3UserDAO.java:444)
                            at com.virsa.ae.service.sap.SAPR3UserDAO.getUsers(SAPR3UserDAO.java:1762)
                            at com.virsa.ae.service.umi.sap.SAPR3SearchUser.getUsers(SAPR3SearchUser.java:317)
                            at com.virsa.ae.search.bo.SearchUserBO.findUsers(SearchUserBO.java:110)
                            at com.virsa.ae.search.actions.SearchUserAction.searchUsers(SearchUserAction.java:2315)
                            at com.virsa.ae.search.actions.SearchUserAction.searchRequestors(SearchUserAction.java:1999)
                            at com.virsa.ae.search.actions.SearchUserAction.execute(SearchUserAction.java:260)
                            at com.virsa.ae.commons.utils.framework.NavigationEngine.execute(NavigationEngine.java:295)
                            at com.virsa.ae.commons.utils.framework.servlet.AEFrameworkServlet.service(AEFrameworkServlet.java:431)
                            at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
                            at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:401)
                            at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:266)
                            at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:386)
                            at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:364)
                            at com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:1039)
                            at com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:265)
                            at com.sap.engine.services.httpserver.server.Client.handle(Client.java:95)
                            at com.sap.engine.services.httpserver.server.Processor.request(Processor.java:175)
                            at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:33)
                            at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)
                            at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)
                            at java.security.AccessController.doPrivileged(Native Method)
                            at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:104)
                            at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:176)
    Caused by: com.sap.mw.jco.JCO$Exception: (104) RFC_ERROR_SYSTEM_FAILURE: No more storage space available for extending an internal table.
                            at com.sap.mw.jco.MiddlewareJRfc.generateJCoException(MiddlewareJRfc.java:516)
                            at com.sap.mw.jco.MiddlewareJRfc$Client.execute(MiddlewareJRfc.java:1514)
                            at com.sap.mw.jco.JCO$Client.execute(JCO.java:3980)
                            at com.sap.mw.jco.JCO$Client.execute(JCO.java:3417)
                            at com.virsa.ae.service.sap.SAPR3UserDAO.executeFind(SAPR3UserDAO.java:441)
                            ... 23 more
    2009-12-02 14:21:48,937 [SAPEngine_Application_Thread[impl:3]_35] ERROR Search could not be completed
    com.virsa.ae.service.umi.UMIException: Search could not be completed
                            at com.virsa.ae.service.umi.sap.SAPR3SearchUser.getUsers(SAPR3SearchUser.java:326)
                            at com.virsa.ae.search.bo.SearchUserBO.findUsers(SearchUserBO.java:110)
                            at com.virsa.ae.search.actions.SearchUserAction.searchUsers(SearchUserAction.java:2315)
                            at com.virsa.ae.search.actions.SearchUserAction.searchRequestors(SearchUserAction.java:1999)
                            at com.virsa.ae.search.actions.SearchUserAction.execute(SearchUserAction.java:260)
                            at com.virsa.ae.commons.utils.framework.NavigationEngine.execute(NavigationEngine.java:295)
                            at com.virsa.ae.commons.utils.framework.servlet.AEFrameworkServlet.service(AEFrameworkServlet.java:431)
                            at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
                            at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:401)
                            at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:266)
                            at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:386)
                            at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:364)
                            at com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:1039)
                            at com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:265)
                            at com.sap.engine.services.httpserver.server.Client.handle(Client.java:95)
                            at com.sap.engine.services.httpserver.server.Processor.request(Processor.java:175)
                            at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:33)
                            at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)
                            at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)
                            at java.security.AccessController.doPrivileged(Native Method)
                            at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:104)
                            at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:176)
    Caused by: com.virsa.ae.service.ServiceException: No more storage space available for extending an internal table.
                            at com.virsa.ae.service.sap.SAPR3UserDAO.executeFind(SAPR3UserDAO.java:444)
                            at com.virsa.ae.service.sap.SAPR3UserDAO.getUsers(SAPR3UserDAO.java:1762)
                            at com.virsa.ae.service.umi.sap.SAPR3SearchUser.getUsers(SAPR3SearchUser.java:317)
                            ... 21 more
    Caused by: com.sap.mw.jco.JCO$Exception: (104) RFC_ERROR_SYSTEM_FAILURE: No more storage space available for extending an internal table.
                            at com.sap.mw.jco.MiddlewareJRfc.generateJCoException(MiddlewareJRfc.java:516)
                            at com.sap.mw.jco.MiddlewareJRfc$Client.execute(MiddlewareJRfc.java:1514)
                            at com.sap.mw.jco.JCO$Client.execute(JCO.java:3980)
                            at com.sap.mw.jco.JCO$Client.execute(JCO.java:3417)
                            at com.virsa.ae.service.sap.SAPR3UserDAO.executeFind(SAPR3UserDAO.java:441)
                            ... 23 more
    2009-12-02 14:21:48,943 [SAPEngine_Application_Thread[impl:3]_35] ERROR  Error in Searching Users...
    com.virsa.ae.core.BOException:  Error in Searching Users...
                            at com.virsa.ae.search.bo.SearchUserBO.findUsers(SearchUserBO.java:125)
                            at com.virsa.ae.search.actions.SearchUserAction.searchUsers(SearchUserAction.java:2315)
                            at com.virsa.ae.search.actions.SearchUserAction.searchRequestors(SearchUserAction.java:1999)
                            at com.virsa.ae.search.actions.SearchUserAction.execute(SearchUserAction.java:260)
                            at com.virsa.ae.commons.utils.framework.NavigationEngine.execute(NavigationEngine.java:295)
                            at com.virsa.ae.commons.utils.framework.servlet.AEFrameworkServlet.service(AEFrameworkServlet.java:431)
                            at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
                            at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:401)
                            at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:266)
                            at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:386)
                            at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:364)
                            at com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:1039)
                            at com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:265)
                            at com.sap.engine.services.httpserver.server.Client.handle(Client.java:95)
                            at com.sap.engine.services.httpserver.server.Processor.request(Processor.java:175)
                            at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:33)
                            at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)
                            at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)
                            at java.security.AccessController.doPrivileged(Native Method)
                            at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:104)
                            at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:176)

    Hi,
    As per error log, sounds space issue.
    "ERROR com.sap.mw.jco.JCO$Exception: (104) RFC_ERROR_SYSTEM_FAILURE: No more storage space available for extending an internal table. com.sap.mw.jco.JCO$Exception: (104) RFC_ERROR_SYSTEM_FAILURE: No more storage space available for extending an internal table."
    Check the tablespace with your Basis guy and increase it if neccessary.
    Regards,
    Sabita

  • How to verify Risk Analysis done for CUP request?

    We are on GRC 5.3 SP 13.
    Is there a way to verify whether a Risk Analysis was performed during a stage for a CUP request?
    We have a CUP request that should have generated a SOD Risk when it was processed.  However the closed request shows no risk or mitigations on it.  The approvers say they ran a Risk Analysis, and the workflow stage does have that set as mandatory.  Also, you do get SODs if you run a User Analysis for this userid in RAR directly, so it looks like the request should have had them also.
    Is there any way to verify whether a Risk Analysis was actually performed in the CUP request workflow stage?
    At this point I don't know if this is a problem with the CUP Risk Analysis, or if the user just didn't run one and the system let that  slip thru somehow.
    Thanks.

    I bellieve you can log into RAR>RAR Debugger>View Server Log>You can search on Analysis.  If your are getting any errors they will also show up here. 
    Example: 
    INFO: Foreground : Analysis starts:
    Mar 9, 2012 3:44:23 PM com.virsa.cc.xsys.meng.ObjAuthMatcher <init>
    FINEST: ObjAuthMatcher constructed: 0ms, #singles=11, #ranges=0, #super=0
    Mar 9, 2012 3:44:23 PM com.virsa.cc.xsys.riskanalysis.AnalysisEngine performActPermAnalysis
    INFO: Foreground : Analysis done: 55550000 elapsed time: 49 ms
    Mar 9, 2012 3:44:23 PM com.virsa.cc.xsys.riskanalysis.AnalysisEngine performActPermAnalysis
    INFO: Foreground : 1 out of 1 (100%) done
    Mar 9, 2012 3:44:23 PM com.virsa.cc.xsys.riskanalysis.AnalysisEngine performActPermAnalysis
    INFO: Foreground : All Analysis done,  elapsed time: 64 ms , memory usage: free=782M, total=2048M
    Mar 9, 2012 3:44:23 PM com.virsa.cc.xsys.riskanalysis.AnalysisEngine performActPermAnalysis

  • Advanced search in ESS leave request scenario

    Dear experts,
    we want to use the leave request scenario for ESS. The employees should choose the ap-prover with the search help (or advanced search which pops up when the user clicked the symbol at the edge of the approver field). Is there any way to customize the advanced search so that the result only lists employees in a specific role and not all of them? Where can I see the code from the advanced search und where can I change this?
    I am thankful for any hints and tips!
    Many thanks
    Diana Natanegara

    Re: Advanced search in ESS leave request scenario

  • Approve CUP request in 10.0

    Dear Experts,
    I have created a CUP request (ARM) in GRC 10.0 successfully. Now stage approver has to approve the request. I am really not sure where to approve the request. Please help me.
    I appreciate your help.
    Thanks,
    Swathi.

    Hello,
    Well, the corresponding approver has to approve it. Have you performed all configuration steps according to this document:
    http://www.sdn.sap.com/irj/scn/index?rid=/library/uuid/5067e447-5c64-2e10-7d9c-8f7e5953aadb
    If yes, then check the GRC Help documentation in order to approve the request:
    http://help.sap.com/saphelp_grcac10/helpdata/en/83/0445b2399e48108383a42efd1cf2cb/frameset.htm
    Cheers,
    Diego.

  • Restrict search access of Service requests based on service team

    Hi,
    We have the below requirement in our client to restrict the search of the service requests based on the service team.
    Requirement
    A user can only search / display the service requests which are assigned to his queue.(Partner Function --> Service team)
    Can you please suggest if we have a standard authorization object by means of which we can achieve this.
    Can you please help us on priority on this. Reward points would be awarded for helpful answers
    Thanks,
    Vamsi.

    Hello Vamsi
    I redefined the  method  EH_ONSEARCH_BTN of component  BT116S_SRVO/ADVANCEDSP. Because i used this in service order.  you can same method of  Service request component.
    Use can call method insert_selection_param of class cl_crm_bol_dquery_service
    to set the SERVICE_ORG parameter with value of Employee's service org.
    Regards
    Naresh

Maybe you are looking for