Deletion Ruleset Workflow

Hello all,
I'm using GRC AC 10.0. It seems that we only have workflow approval for maintain function and risk, not for ruleset.
I think this is really risky if someone has the right to delete the ruleset without approval.
So anyone know how we can set the workflow approval for maintain the ruleset ?
Thank you.

Hi Toan
Go into IMG and you can mass download all the risk definitions to files:
Governance, Risk and Compliance > Access Control > Access Risk Analysis > SoD Rules > Download SoD Rules
Someone making a modification - switch on configuration parameters to get your change documents (1001 and 1002).
As far as global rule set goes - if you really have major issues you can always delete the entire rule set and the reactivate the BC steps. Only do this if completely restarting the SAP delivered rules et is just a starting point and should be maintained to suit your business requirements.
Note - IMG mass functionality bypasses workflow. NWBC changes to risks and functions triggers workflow if you have configured it.
Regards
Colleen

Similar Messages

Delete corrupted workflow

I want to delete a corrupted workflow in VMware Orchestrator 5.5. Symptoms of corruption:
1) shows Start Icon only in the schema. Attempted to recreate a simple workflow with hopes of then being able to delete unsuccessfully.
2) Upon reboot of Orchestrator server and opening of the GUI, a workflow has run and failed.
3) Workflow shows as a Start icon only
4) Any attempts to modify the workflow in the GUI fail. Tried to set resume from failed behavior; however, no save can be made.
5) Attempts to delete the workflow fail with "Server Error: Could not commit JPA transaction; nested exception is javax.persistence.RollbackException: Transaction marked as rollbackOnly.
6) No version history
7) Running embedded database
Is there a way to delete the workflow in the console?

You can try doing this via the REST API:
Operation: DELETE
URL: https://orchestrator1:8281/vco/api/workflows/5d7fc59c-57f7-4f59-b935-c9d3669df7f2 <-- updated based on values observed in your log file
For example, I just tested this and deleted a test workflow using this url in my lab:
https://myVRO:8281/workflows/d11e71d7-22c0-417f-b967-3437e67e2273
For more info on the REST API, see the docs: https://your-vco-server:8281/vco/api/docs/resource_Workflow%20Service.html
If you're not already familiar with the Postman REST client, take a look at my article here: http://bit.ly/vroPostman

Deletion of workflow messages

Hi all,
I would like to ask if there is a way to delete workflow messages without deleting the work item. Because currently, if I delete a workflow message, the work item will also be deleted in the workflow log.
Thanks!
Eric

Hi Ute,
Thanks for your reply.
There are cases where people received workflow messages and they dont read them or process them. So they have workflow messages sitting there (tons of them) in their inbox. Now they get assigned to a different role and so they dont need these workflow messages anymore but they are just sitting there. Since they cannot process these messages anymore, what they want now is to delete the workflow messages only from their inbox but not the work items. There is no delete icon for workflow messages in transaction SBWP and to remove these messages, you need to process first these messages.
Using transaction SWWL, the messages can be deleted but the work items were deleted also which they do not want to happen because they might stil use that.
Thanks!
Eric

Delete SharePoint Workflow History List Questions

I found the code below here :
https://social.technet.microsoft.com/Forums/sharepoint/en-US/79aa3bd4-d334-4614-9304-15998a95aefb/delete-list-with-43-million-items-workflow-history-list?forum=sharepointadminprevious
I originally had 81K items in the workflow history list..Dating back to a year ago, which obviously didn't need to be saved in the workflow history list. And we all know Workflows start to have issues when this WF History list get a lot of items in it.
my questions are now that I have it cleaned up...
I have workflows that trigger 30 days prior to when an item expires. so for example if an item expires 12-15-15, the workflow sends an email 11-15-15. but these expiration dates can be at any time of the year. for example lets say the
item was entered on 2-2-15 with expire date of 12-15-15 - workflow is now triggered so that emails would be send in 11-15-15 ....
So if I delete the workflow history list item will it affect the workflow waiting to be triggered?
Is there a way with the code below to capture workflows that have completed, error'd out, or failed to start?
As I figure those would be safe to delete if deleting items from the workflow history list affects workflows waiting to be triggered?
or would it be possible for the code below to be modified to delete based on either ID of list item and or date range??
like say delete completed workflows at 100 items every thirty days?
but I can not have a current waiting workflow to trigger & history beaffected by the workflow history list delete.
********************************** Code **************************************************************
$weburl = "http://"
$listname = "Workflow History"
#param($weburl,$listname)
#if ($weburl -eq $null -or $listname -eq $null)
#    write-host -foregroundcolor red "-weburl or -listname are null."
#    return
Add-PSSnapin Microsoft.SharePoint.Powershell -EA 0
$web = get-spweb $weburl
$list = $web.lists[$listname]
$stringbuilder = new-object System.Text.StringBuilder
try
    $stringbuilder.Append("<?xml version=`"1.0`" encoding=`"UTF-8`"?><ows:Batch OnError=`"Return`">") > $null
    $i=0
$spQuery = New-Object Microsoft.SharePoint.SPQuery
    $spQuery.ViewFieldsOnly = $true
$spQuery.RowLimit = 1 // # of items to delete
$items = $list.GetItems($spQuery);
    $count = $items.Count
  $now = Get-Date
write-host ("Deleting Items from list started at " +$now.toString())
    while ($i -le ($count-1))
        #write-host $i
        $item = $items[$i]
        $stringbuilder.AppendFormat("<Method ID=`"{0}`">", $i) > $null
        $stringbuilder.AppendFormat("<SetList Scope=`"Request`">{0}</SetList>", $list.ID) > $null
        $stringbuilder.AppendFormat("<SetVar Name=`"ID`">{0}</SetVar>", $item.Id) > $null
        $stringbuilder.Append("<SetVar Name=`"Cmd`">Delete</SetVar>") > $null
        $stringbuilder.Append("</Method>") > $null
        $i++
    $stringbuilder.Append("</ows:Batch>") > $null
    $web.ProcessBatchData($stringbuilder.ToString()) > $null
catch
    Write-Host -ForegroundColor Red $_.Exception.ToString()
$now = Get-Date
write-host ("Deleting Items from list ended at " +$now.toString())
write-host -ForegroundColor Green "done."
**************************************End of Code***************************************************

Hi Cowboy,
Per my knowledge, if we delete the workflow history list items, it will not affect the workflows waiting to be triggered.
However, if you go to the workflow status page, the history will be empty as the events
have been deleted in workflow history list.
The code in your post will delete 2000 items in workflow history list.
As there is no status for the items in workflow history list, so I recommend to use the date as the query condition.
For example, if you want to delete items created between 2015-02-01 and 2015-02-16, then you can change the query as below in your code:
$query="<Where><And><Geq><FieldRef Name='Created'/><Value Type='DateTime'>2015-02-01T00:00:00Z</Value></Geq><Leq><FieldRef Name='Created' /><Value Type='DateTime'>2015-02-01T00:00:00Z</Value></Leq></And> </Where>"
$spQuery=$query
Thanks,
Victoria
Forum Support
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
[email protected]
Victoria Xia
TechNet Community Support

How to set the conditions for item deletion approval workflow?

Hi,
I have created approval workflow for item modifications ie, when user try to modify an item, it will send a mail to Project Manager. For that I set the conditions in Change the behavior of the overall task: 1. When the task process starts 2 . When the task
process completes .
Change the behavior of the single task: 1.when a task is Pending.
[I followed this https://www.nothingbutsharepoint.com/sites/eusp/Pages/5-Steps-to-Enhance-SharePoint-2010-Approval-Workflow.aspx ]
My Requirement is that I want to set this same workflow for the scenario: when the user deletes an item it will send a mail (intimation mail for item deletion) to Project Manager. here i dont want to send modification mails when user deletes an item.
When user modifies an item: 1. intimation mail, 2. Approve/Reject mail 3. intimation for approval / rejection mail.
When user deletes an item: 1. intimation mail.
How can we set it in one approval workflow?? where i have to set the condition for sending either item modification mails or deletion mail.
Thanks,
Praveen ji

Hi,
According to your post, my understanding is that you wanted to start approval workflow when item deleted.
You should first make some changes to trigger the workflow when you delete the item.
You can use the Event Receiver to achieve it.
In order to trigger workflow on item delete you need to create event receivers and from event receiver call the workflow already attached with list.
http://ravendra.wordpress.com/sharepoint-workflow-on-list-item-delete/
You can also create custom action to start the workflow, you can refer to the following article, then modify the workflow as your need.
http://blogs.sharepoint911.com/blogs/jennifer/Lists/Posts/Post.aspx?ID=50
Thanks & Regards,
Jason
Jason Guo
TechNet Community Support

Deleting all workflow items from SAP inbox

hi ,
I'm doing some Workflow testing and I've got a bunch of work items in my
Inbox. Is there a utility I can run that will just delete all of the work
items in my Inbox, regardless of the status?
any suggestions????
thanks in advance for your kind attention.
Ashish

So if I don't want a user to receive a particular Workflow message everyday, how can I cancel that? Can someone tell the transaction code and procedure to do this?
Thanks
> Ashish,
>
> In Dev & Test environments you can delete work items
> using txns SWWL or SWWL_TOPLEVEL (Menu Path: Tools ->
> Business Workflow -> Development -> Administration ->
> Workflow Runtime -> Reorganization). However it is
> not recommended to do this in Production. You cancel
> the Workflow in Production
>
> Cheers,
> Ramki Maley.
>
> Please reward points if the answer is helpful.
> For info on awarding points click on this link:
> https://www.sdn.sap.com/sdn/index.sdn?page=crp_help.ht

Trying to delete bpm workflow items using SWWL

Hi All,
I'm trying to delete workflow items of a BPM that is stuck. I'm using SWWL for this.
However, I get the following error:
Work item 000000002255 locked by user WF-BATCH.
(enqueue error)
How do I delete this locked work item??
I'm suspect that this is causing all my other BPM's to get stuck waiting forever. These other BPM's were working correctly earlier.
Thanks!
Harsh

HI,
Try completing it manually from SWIA. also check for SM58 (enter WF-batch for user in selection screen) and complete the LUW manually.
alwo try SAP_WAPI_Workflow_resume or resume_workflow. pass the instance id of workflow (not workitem)
Regds,
Nilesh

IDM roles creation / updation and deletion via workflows

Hi,
We are in IDM 7.1. I wanted to know if there is any way to create / update / delete IDM roles using in the workflow / rules on a data driven logic rather than using the IDM admin page (Roles tab) and creating them with LDAP group attributes assingned and making them pre-defined.
I've read in most of the postings that most of the time it has been retreived but no other options being done.
Anyone having ideas???
Regards
Krishna

Hi,
check these FM , i dont know it will work for u or not.
BAPI_USER_ACTGROUPS_ASSIGN     User: Change entire activity group assignment
BAPI_USER_ACTGROUPS_DELETE     User: Delete entire activity group assignment
BAPI_USER_CHANGE               Change User
BAPI_USER_CLONE                Create User with Template in Another System
BAPI_USER_CREATE
BAPI_USER_CREATE1              Create a User
BAPI_USER_DELETE               BAPI to Delete a User
BAPI_USER_DISPLAY              Display Users
BAPI_USER_EXISTENCE_CHECK      Check a user exists
BAPI_USER_GETLIST              Search for Users
BAPI_USER_GET_DETAIL           Read User Details
BAPI_USER_INTERNET_CREATE      Create a user in the Internet
BAPI_USER_LOCACTGROUPS_ASSIGN Change Activity Group Assignment for Dependent Systems from Central Sy
BAPI_USER_LOCACTGROUPS_DELETE Delete Activity Group Assignments in the Dependent Systems
BAPI_USER_LOCACTGROUPS_READ    Change Activity Group Assignment for Dependent Systems from Central Sy
BAPI_USER_LOCK                 Lock User
BAPI_USER_LOCPROFILES_ASSIGN   Change Profile Assignment for Dependent Systems from Central System
BAPI_USER_LOCPROFILES_DELETE   Delete Profile Assignments for Dependent Systems
BAPI_USER_LOCPROFILES_READ     Change Activity Group Assignment for Dependent Systems from Central Sy
BAPI_USER_PROFILES_ASSIGN      User: Assign profiles
BAPI_USER_PROFILES_DELETE      User: Delete All Profile Assignments
BAPI_USER_UNLOCK               Unlock user
Reward points if useful..
Regards
Nilesh

Deleting ruleset in content group not reflecting on storefront

We have a content group with a product set in it. Its working fine a product on storefornt.
We are trying to delete the ruleset so that no product should appear in the storefornt.
We deleted the ruleset and deployed the project. But, still the product is displayed in the storefront.
We checked the .properties file of the CG and it has no ruleset.
We checked the CG component in the prod dyn/admin. But the 'rules' property of the CG has the previous rule still set in it.
Now we restarted the prod server. The product now doesn't appear in the storefront and the rules property in the CG is set to null as well.
Why is it that the CG doesn't reflect changes when we empty the rules in CG and deploy it?
Thanks,
Ashish

Hi,
Can you please explain (without resorting to technicalities) what are you trying to accomplish..? Not populating the Installment plan positions with Installment plan number, I hope..? What document number needs to go into positions of which document?
cheers
Jānis

Delete/Undelete Workflow/Workitem

Hi Gurus
Is there any transaction to "Undelete" workitems/workflows which have been inadvertently deleted using transaction SWWL. We are on MySAP ERP 2004.
Thanks in advance.
T. Ahuja

Hi Srinivas,
SWUE will not start from the point of logically deleted. It just create the event for the object u have used.
For restarting the workflow SWPR is the transaction.
If you want to see the history of workitem deleted you use the transaction SWWH.
Regards,
Amandeep Kumar.

Deleting the workflow open instances

Hi,
I have the below scenario, where user creates a PO and WF triggers and waiting for the approver to approve it. Before approver approves it another user releases the PO manually. In this scenario, when the PO is released, the WF instance which is in In Process status should be completed and the WI for the approval should disappear from the approvers inbox.
Could anyone tell me how to achieve this.
Thanks,
MK.

Hi,
IF you are using a user decision step, then in that step, go to "Control" tab and you will know the task id. If it is TS00008267, it's the std. user decision task. I'd say, create your own custom user decision by copying from TS00008267 and use that custom task.
ONce you have the custom task, go to PFTC, and change mode for this task, and you'll find the "Terminating Events" tab. And you can specify the cont. element and event..
But, remember, you hve to have the BO, for which you are raising the Terminating event, as a cont. element in the custom User decision task.
Hope this helps.
venu

GRC 10: Deleting the Ruleset.

Hello Guys,
Anyone has a clue how to go about deleting an existing Ruleset in the system? I tried in SPRO - Delete Ruleset but it is not working. At the same time, I see an option in the nwbc also, which is to Delete the ruleset.
1. Any idea how we should go about deleting the existing Ruleset?
2. What is the difference between deleting from NWBC and deleting from SPRO?
We have 3 Physical systems A, B and C and the connector groups are:
Logical Group 1 - Having A&B systems.
Cross Group 2 - Having A&C systems.
Any ideas appreciated.
Regards.
Edited by: sapgrc10 on Nov 7, 2011 8:14 PM

Hello Asheesh,
Thanks for your reply. Besides SAP_ALL and SAP_NEW, I also have allmost all the roles to myself as under:
SAP_GRAC_ACCESS_APPROVER     Role for Access Request Approver
SAP_GRAC_ACCESS_REQUEST_ADMIN     Role for Access Request Administrator
SAP_GRAC_ACCESS_REQUESTER     Role for End user
SAP_GRAC_ALERTS     Generate, clear and delete SOD Alerts
SAP_GRAC_ALL     Super Admin for AC
SAP_GRAC_BASE     Base Role for all Access Control Users
SAP_GRAC_CONTROL_APPROVER     Create AC MIT control, approve, assign, Alerts and perform Risk Analysis
SAP_GRAC_CONTROL_MONITOR     Ability to assign MIT control to a Risk and perform Risk Analysis
SAP_GRAC_CONTROL_OWNER     Create AC MIT control.
SAP_GRAC_DISPLAY_ALL     Display Access To All AC Objects.
SAP_GRAC_FUNCTION_APPROVER     Approve Function for Workflow
SAP_GRAC_NWBC     View Access Control Information Architecture.
SAP_GRAC_REPORTS     Ability to run all AC reports.
SAP_GRAC_RISK_ANALYSIS     Ability to Perform Risk Analysis
SAP_GRAC_RISK_OWNER     Risk maint. And Risk Analysis
SAP_GRAC_ROLE_MGMT_DESIGNER     Role Management Designer
SAP_GRAC_ROLE_MGMT_ROLE_OWNER     Role Owner
SAP_GRAC_ROLE_MGMT_USER     Role Management Business User
SAP_GRAC_RULE_SETUP     Ability to define Access Rules
SAP_GRAC_SETUP     Ability to setup Access Control
SAP_GRAC_SUPER_USER_MGMT_ADMIN     Super User Administrator Role
SAP_GRAC_SUPER_USER_MGMT_CNTLR     Super User Controller Role
SAP_GRAC_SUPER_USER_MGMT_OWNER     Super User Owner Role
SAP_GRAC_SUPER_USER_MGMT_USER     Super User Firefighter
SAP_GRC_FN_ADISSUE_PROCESS     Ad-hoc Issue Processer
SAP_GRC_FN_ALL     GRC - Power User
SAP_GRC_FN_BASE     GRC - Base role to run GRC applications
SAP_GRC_FN_BUSINESS_USER     GRC - Business User
SAP_GRC_FN_DISPLAY     GRC - Display
SAP_GRC_FN_POST     Role with Post Authority Only
SAP_GRC_MSMP_WF_ADMIN_ALL     MSMP Overall Administrator
SAP_GRC_MSMP_WF_CONFIG_ALL     MSMP Overall Configurator
SAP_GRC_NWBC     Governance, Risk, & Compliance
SAP_GRC_SPC_SCHEDULER     Authorization to schedule background jobs
But still having the problem. When I press the execute botton to delete, the system does not do anything, neither does it give any message or error.
Anything else, that I am missiing?
Also, my second question was if there is any difference deleting the ruleset from NWBC or from the Frontend or are these both the same?
Thanks in advance!
Edited by: sapgrc10 on Nov 8, 2011 5:27 PM

Need help on deleting workflows

Hi experts,
I need to delete workflows that need to be retired. I am veryvery new to workflows. So, what is the Tcode to delete the entire workflow? also, what are the steps that need to be check upon deleting them? i need to delete their custom tables/function modules as well. Can I delete the workflow in one shot? or i need to delete task by task..? thanks in advance

Hi,
Prior to deleting a workflow first Delete/Cancel all the workitems of that workflow. It will help you to avoid unnecessary dump while executing those workitems. Its better to cancel the workitems if it is a productive system.
To delete workflow delete the following items in below mentioned order.
1. Workflow
2. Tasks
3. BO/Classes
Regards,
Anbarasan K
Edited by: Anbarasan K on Jul 7, 2008 1:33 AM

Workflow Items deletion

Hi,
Can anybody please let me know how to delete the Workflow items in ECC 6.0? What is the TC or any other process/ program?
Your help and time will be really appreciate.
Thanks & Regards,
Niki Shah.

Hi,
If by ABAP you have this FM SAP_WAPI_WORKITEM_DELETE
if want a tcode for that use tcode SWWL
Regards
Jaime

How can I delete WorkFlows in Production?

Hello,
We have tons of very old WorkFlows in Production that are not needed because Users long ago manually did their work and completely disregarded their WorkFlow messages.
I have been directed by management to delete these old WorkFlows which are not completed so that User Workflow inboxes will become less clutterred.
I see that SAP does not recommend deleting Production Workflows because of auditing implications but we don't care about that for these ones since we are certain that they are not needed.
Is there an easy way for a WF Administrator (me) to select specific workflows and simply delete them in their entirety? Thank you all in advance.
Dan A

I will recommend you to find the workflow instance from SWWWIHEAD table and use function module found by F4 ing
SWWCANCEL
PLEASE DO NOT USE TCODE SWWL.
Thanks
Arghafdip

Deletion Ruleset Workflow

Similar Messages

Maybe you are looking for