Email content in GRC access request

Dear Experts,
Can any one let me know from where GRC access request email content is picked up which creating creating throught access request.?
I.e when ever the requestor creating request, the manager will get an email( and in my scenario the email document is maintained in document maintenance(se61 tcode) ). Now i need to prefix user full name in email content(which the manager receives) with Mr./Ms.
Thanks
Katrice

Hi,
My issue is resolved my enhancing the method GET_NOT_VARS_AND_ATTACHMNTS( ) of class CL_GRFN_MSMP_NOTIFICATION
"""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""$"$\SE:(1) Class CL_GRFN_MSMP_NOTIFICATION, Method GET_NOT_VARS_AND_ATTACHMNTS, End                                                                          A
*$*$-Start: (1)---------------------------------------------------------------------------------$*$*
ENHANCEMENT 1  ZGRC_EMAIL_TITLE.    "active version
DATA: lw_fullname  TYPE string,
       lw_variables TYPE grfn_s_msg_variable,
       lw_logsys    TYPE logsys,
       lw_system_id_temp  TYPE string,
       lw_user            TYPE grac_user,
       lw_return TYPE int4,
       lW_user_details    TYPE grac_s_user_detail.
       SELECT SINGLE logsys  INTO lw_logsys FROM t000 WHERE mandt = sy-mandt.
       IF sy-subrc = 0.
        lw_system_id_temp = lw_logsys.
       ENDIF.
READ TABLE et_variables INTO lw_variables WITH KEY name = 'USER_ID'.
   IF sy-subrc EQ 0.
    lw_user = lw_variables-value.
      TRY.
              CALL METHOD cl_grac_ad_access_mgmt=>get_user_detail
                EXPORTING
                  iv_system_id    = lw_system_id_temp
                  iv_user         = lw_user
                IMPORTING
                  ev_return_code  = lw_return
                  es_user_details = lw_user_details.
           CATCH cx_grfn_exception .                   "#EC NO_HANDLER
          ENDTRY.  
ENDIF.
   READ TABLE et_variables INTO lw_variables WITH KEY name = 'USER_FULL_NAME'.
   IF sy-subrc EQ 0.
     CONCATENATE lw_user_details-address-title_p lw_variables-value INTO lw_variables-value SEPARATED BY space.
     MODIFY et_variables FROM lw_variables index sy-tabix.
   ENDIF.
ENDENHANCEMENT.
*$*$-End:   (1)---------------------------------------------------------------------------------$*$*
Thanks
KH

Similar Messages

  • GRC Access requests - Audit Log

    Dear All, GRC access requests is noticed with Provisioning failed messages. Access Request Audit Log is displayed with " Log on Failed / CPI - CALL: ThSAPCMRCV " message ( Screen shot enclosed ). Could you please share an insight on these messages and it's resolution. Thanks raj 

    Dear Raj,
    please check with your basis team if the connection to the system works. Basically it seems like you have a connection error as the log on does not work.
    Regards,
    Alessandro

  • Approving the access request gives error in Sharepoint Foundation 2013 / Email notification codepage problem

    Hello
    On our SharePoint Foundation 2013 server approving Access Requests fails with "request approval failed" after pressing the approve button. The user is site administrator, site collection administrator and site owner.
    In the ulsviewer we see the following error:
    System.NotSupportedException: No data is available for encoding 1033.     at System.Text.Encoding.GetEncodingRare(Int32 codepage)     at System.Text.Encoding.GetEncoding(Int32 codepage)     at Microsoft.SharePoint.Email.SPMailMessageHelper.GetSocialNotificationMailMessage(SPWeb
    web, String senderAddress, String senderName, Boolean useSenderAddressAsFromAddress, String recipientAddress, CultureInfo recipientCulture, String subject, String sidebarHtml, String descriptionHtml, String customMessageHtml, List`1 embeddedAttachments)    
    at Microsoft.SharePoint.SPSharingEmailHelper.SendAccessRequestsEmail(SPCachedItemEventProperties eventProperties, SPUser sender, String message, SPUser recipient, String recipientEmailAddress, String strSubject, String body)     at Microsoft.SharePoint.SPSharingEmailHelper.SendRequestorNotification(SPCachedItemEventProperties
    eventProperties, String objRequestedTitle, SPUser reqByUser, SPUser reqForUser, String message, Boolean isMessageUpdate, Int32 status)     at Microsoft.SharePoint.SPAccessRequestsOperationHandler.HandleStatusChangingToApprove(SPCachedItemEventProperties
    properties, Int32 reqByUserId, Int32 reqForUserId, Int32 newStatus, SPUserCollection users, SPGroupCollection groups, IEnumerable`1 roleDefs)     at Microsoft.SharePoint.SPAccessRequestsOperationHandler.HandleRequestStatusChanging(SPCachedItemEventProperties
    properties, SPUserCollection users, SPGroupCollection groups, IEnumerable`1 roleDefs)     at Microsoft.SharePoint.SPAccessRequestsOperationHandler.ItemUpdating(SPCachedItemEventProperties properties, SPUserCollection users, SPGroupCollection
    groups, IEnumerable`1 roleDefs)     at Microsoft.SharePoint.SPAccessRequests.UpdateItem(Int32 newStatus, SPUser reqFor, String convStr, String permType, Int32 permissionLevel, Boolean extendInvitation, String anonLinkType, SPList accReqList,
    SPListItem item, SPUserCollection users, SPGroupCollection groups, IEnumerable`1 roleDefs)     at Microsoft.SharePoint.SPAccessRequests.ChangeRequestStatusCore(Int32 newStatus, SPUser reqFor, String convStr, String permType, Int32 newPermissionLevel,
    Boolean extendInvitation, String anonLinkType, SPList accReqList, SPListItem request)     at Microsoft.SharePoint.SPAccessRequests.ChangeRequestStatus(Int32 itemId, Int32 newStatus, SPUser reqForUser, String convStr, String permType, Int32
    permissionLevel, Boolean extendInvitation, String anonLinkType, SPWeb web)     at Microsoft.SharePoint.SPAccessRequests.ChangeRequestStatus(Int32 itemId, Int32 newStatus, String convStr, String permType, Int32 permissionLevel)    
    at Microsoft.SharePoint.ServerStub.SPAccessRequestsServerStub.ChangeRequestStatus_MethodProxy(XmlNodeList xmlargs, ProxyContext proxyContext)     at Microsoft.SharePoint.ServerStub.SPAccessRequestsServerStub.InvokeStaticMethod(String methodName,
    XmlNodeList xmlargs, ProxyContext proxyContext, Boolean& isVoid)     at Microsoft.SharePoint.Client.ServerStub.InvokeStaticMethodWithMonitoredScope(String methodName, XmlNodeList args, ProxyContext proxyContext, Boolean& isVoid)    
    at Microsoft.SharePoint.Client.ClientMethodsProcessor.InvokeStaticMethod(String typeId, String methodName, XmlNodeList xmlargs, Boolean& isVoid)     at Microsoft.SharePoint.Client.ClientMethodsProcessor.ProcessStaticMethod(XmlElement
    xe)     at Microsoft.SharePoint.Client.ClientMethodsProcessor.ProcessOne(XmlElement xe)     at Microsoft.SharePoint.Client.ClientMethodsProcessor.ProcessStatements(XmlNode xe)     at Microsoft.SharePoint.Client.ClientMethodsProcessor.Process() 449c7b9c-6cec-f09a-9792-3d76c4d7e351
    The server is running on an English Windows 2012 Server and also the English version of SharePoint Foundation 2013 with the June 2013 CU.
    We see exactly the same error when add users to a group with the option "Send an email invitation" enabled.
    Any ideas what could cause this problems?
    Regards,
    Reinhard

    Hi Reinhard ,
    According to your error message, it says that no data is available after  encoding the social notification mail message. It  should be caused by the E-Mail encoding setting.
    For troubleshooting your issue, please check the character set of your E-Mail Settings:
    Verify that the user account that is performing this procedure is a member of the Farm Administrators group.
    On the Central Administration Home page, click System Settings.
    On the System Settings page, in the E-Mail and Text Messages(SMS) section, click Configure outgoing e-mail settings.
    On the Outgoing E-Mail Settings page, make sure
    Character set setting is  65001(Unicode UTF-8).
    Best Regards,
    Eric
    Eric Tao
    TechNet Community Support

  • Error while trying to submit Access request to GRC from IDM

    Hello
    We have SAP IDM 7.2 SP8 installed and done all the prerequisite for connecting to GRC AC 10 as in configuration document.
    We are trying to submit request to GRC using Standard GRC provisioning framework task ( AC Validation) but pass: Submit AC Request fails with error: "Pass stopped by script"
    Is there anything wrong with the script which put RoleData details since its getting aborted ?
    I tried providing Role name directly in Role data attribute inside the action task and got following error:
    Error
    putNextEntry failed
    storingcn=IDMUSR0023,ou=useraccessrequest,o=grc
    Exception from Add operation:javax.naming.NamingException: [LDAP: error code
    82 - (GRC User Access Request:82:Script execution failed)]; remaining name
    'cn=IDMUSR0023,ou=useraccessrequest,o=grc'
    I checked VDS Logs and there was one error :
    Additional message = msgcode=4;msgdescription=Mandatory field ITEM NAME  is empty in line no 1 ;msgtype=ERROR
    From where exactly ITEM NAME field value will be fetched and pass to GRC for request creation ?
    Regards
    Deepak Gupta

    Thanks Christopher
    I got my issue fixed, There was issue with my GRC Initial load job which couldn't enrich repository privileges and hence the issue was coming since script wasn't able to find GRC ROLE ID and Application ID attribute from privileges.
    Regards
    Deepak Gupta

  • User details are missing in Access request in GRC 10.0

    Hello All,
    When we are trying to create Access request in GRC 10.0 for an user it results as user  details not found.
    Under SPRO - Maintain data source configuration we have configured 2 HR systems HR1 and HR2.
    But the User details exits in HR1 system and lies in validity also. We have tried to run the Repository Object Sync also still unable to search the details.
    But we observed even after the Sync job User details are not created in table GRACUSER and GRACUSERCONN. Is this could be the problem. Why its not updating even after the Sync job many times almost 10 times.
    We have also configured parameter 5023 to YES.Please advise.
    Thanks in advance.

    Did the sequence for HR1 set to 1 or 2, I hope you are following the suggestions given by Luciana in other thread.
    Please post your data source config screenshots otherwise.
    BR,
    Mangesh

  • GRC 10.0: Access Request Creation - LDAP user advanced search not working

    Dear Experts,
    We are implementing SAP GRC Access Control and we have an issue in Access Request Creation. If we put the user name in “User” field and press intro, the user details are updated, but if we want to make an "Advanced search" the user is not found and the application give us the following message: “No records found for the search criteria entered.”
    Scenario 1: If we put the user name in “User” field and press intro, the user details are updated:
    Scenario 2: If we want to make an "Advanced search" the user is not found and the application give us the following message: “No records found for the search criteria entered.”
    We are using the Active Directory as Data Source.
    Thanks and Regards.

    Hi Jose,
    Try maintaning the parameter 2050 as YES and check once.
    Kindly, also make refer to  the below list of SAP notes:
    1757906 - GRC 10.0 - LDAP user search does not work in NWBC
    1745370 - LDAP search in GRC does not work anonymously
    1718242- UAM: User search not working in Access Request.
    Regards,
    Neeraj Agarwal

  • GRC 10.0 Access Request Creation- Data Source of User Details

    Hi Experts,
    I was doing GRC 10.0 Configuration and found a query which I am not able to resolve.
    While creation of any kind of Access Request in GRC through NWBC> Acces Management Tab>Access Request>Access Request Creation.
    In the user details section, I can see the HR records( like Pernr, position, manager) have been visible to some extent.
    My question is where from these details came in GRC. What configuration we should maintain to achieve these HR records?
    Hope to get a quick response as this is one of the requirement of the implementation which I am doing with my customer.
    Thanks,
    Atanu

    Alessandro,
    Thanks for your response. It helped me to know certain things.
    But when I am navigating to SPRO > GRC > Access Control > Maintain Data Sources Configuration > [User Detail Data Source], it is configured with a ECC system in target connector and User data type is maintained as "SU01".
    Now my question is where from in my case the GRC is pulling the HR records (PA20) like PERNR, POSITION,PERSONEL AREA etc? SU01 does not provide these information. My ECC box is integrated with HR module, so is it taking the data from HR directly?
    Thanks in advance!
    Atanu

  • GRC 10.0 Access request Management Audit

    Hello All,
    Can Anyone let me know what  Auditors Check When they Audit GRC 10.0 Access request Management (excluding Configuration).
    Thanks
    Mohammed Wasim

    Hi,
    ARM supports key ITGC controls for user access management, so probably audit would also cover:
    - review of updated processes & controls
    - check (based on sample) if all requests were properly approved
    - review of correctness of approvers assignment
    - verification if what was requested was provisioned
    - timely removal of terminated access
    - review of SoD controls embedded in process
    - periodic review of user access
    and maybe some more controls. In most cases it will be sample based testing so auditors may ask for a sample of requests to trace them to back-end systems and opposite sample of changes in users privileges to verify if proper requests were prepared for those changes...
    Sometimes they could perform more tests on configuration and process, but this is up to particular auditor.
    Best regards, Andrzej

  • No Roles In Access Request - GRC 10 SP06

    Hello Experts ,
    With GRC 10 SP 06 ,I am facing strange issue .In Access request when I search for roles to be assigned I am not getting any result .
    I have performed all post installation system and same working with SP 05 in other landscape .
    Important steps  like running back ground jobs for user.role.profile  synch role import all is done .
    Thanks & Regards
    Ashish

    Hi,
    You have hit a similar problem I faced after moving to SP06.
    What is the value assigned to the "Role Status"? If it is not "Production/PRD", then Access request doesn't allow it to be displayed as a selectable option for assignment. Prior to SP06, this was not checked, but SP06 got updated to ensure roles that are not in Productive use status can not be assigned for usage.
    Once you change this status over in the roles you wish to make available for assignment via Access Request, you should be able to search and select them.
    Hope that helps.

  • GRC 10.1 Access Request - Provisioning Logs Not Available

    Hello guys,
    I am currently running into an issue with the user provisioning logs, the Request Approval notification which is sent to the user are at the end of an approved access request are as below and the Provisioning Logs tab is throwing a timeout error when opened.
    "Hi Varsha Upadhyay (B001193),
    The Request number : 26 , has been processed and the Request is Closed. The details are as follows:
    Provisioning failed; check provisioning log for details.
    Kind regards,
    Access Control Administrator "
    I have checked the table 'GRACREQPROVLOG'  and I see the logs available in the table, When I open the logs for a particular request no I see the below error message under the 'Prov Message' field
    "Type conflict when calling a function module (field length)"
    Similarly in SLG1, I find the following message at the end of each provisioning task that has taken place at the end of a request being approved.
    "Error in RFC; 'Type conflict when calling a function module (field length)'.
    I made sure I gave SAP_ALL to all the RFC ID's and also the WF-BATCH ID's, and the integration scenarios are also defined correctly for all the target system.
    It seems that this error is just preventing the provisioning details from being displayed in the email or in the Provisioning logs, but the user provisioning has actually taken place as expected (viewed in SU01).
    So i'm wondering even after provisioning has actually taken place successfully, why would this error occur. Does anyone know the source for this error message, please let me know what am I missing?

    Hi Narsimha,
    The error seems to be associated with wrong type being passed as a parameter to a function module.
    Can you check the field mapping for your connectors in SPRO? There might be a mismatch happenning there.
    Thanks
    Sammukh

  • GRC 10.1 Simplified Access Request and Remediation View Issues

    Hi Everyone,
         We recently upgraded our GRC 10.0 environment to 10.1, SP 5 and am having the following issues--has anyone else also experienced?
    In the simplified access request form, it keeps telling me to enter a “valid user ID”—even though the ID is valid and works fine in the normal access request screen. Also tried to search and then select the ID in this field with the same error.
    In the SoD Remediation view, I keep getting “No Data Found”, even though in the detail view, there are risks the same request:
    I’ve checked the following things:
    I’ve used IE 8, IE 9, FireFox, Chrome, and the NWBC to see if any of these fix the issue
    I double checked the 10.1 “upgrade guide” to make sure Gateway configurations are correct
    It looks like we are on the latest support packs:
    Any help on this would be greatly appreciated!
    Thanks,
    Brett

    Hi Brett,
    For Remediation issue you can check the below thread.
    http://scn.sap.com/thread/3574790
    Regards,
    Neeraj

  • Access Requests Not Sending Email

    Hi Everyone,
    We are having issues with access requests not sending in our new SP 2013 deployment.  All other emails are flowing properly including workflows, alerts and denials for the access requests.  We have verified that the addresses populated
    in the access request can receive email and have tested with multiple accounts and DG's. 
    We were receiving files in the badmail folder on our SMTP Relay every time there was an access request sent.  The error was 5.7.1 Client does not have permissions to send as this sender.  We updated the relay to allow for anonymous access
    in the access and delivery sections and added the WFE as well as the SMTP relay and App servers to the smarthost exception list.   After performing this action, we no longer see badmail files populating, but we are still
    not seeing the access requests coming through.
    Any assistance or guidance on why these emails are not coming through would be greatly appreciated.  Please let me know if I left anything out that could be helpful in solving this issue.
    Thanks,
    Dan

    We had this same surprise issue when we upgraded to SharePoint 2013 from 2010. In SP2013, the access request is being sent as the authenticated user of the SharePoint site that is requesting the access. While this makes it easier to reply to the user instead
    of having access requests coming from the general account specified in Central Admin, it breaks all other outbound emails if you're using an authenticated account on the SMTP server. Unfortunately, we need certain email groups to be restricted to authenticated
    users being able to send to them. This prevents the public from spamming one of our groups. Is anyone aware of a way to have access requests get routed to a different SMTP server than all other outbound emails? Or switch it back to all request coming from
    the general SharePoint outbound email account. When you try to route them through the authenticated SMTP it chokes on the mail because the person submitting the access request isn't authorized to "send as" the authenticated account the SMTP relay
    is configured to use. I've seen a work-around where users can be granted the right to send as the account used by the SMTP server, but that doesn't really scale well with almost a thousand users. 

  • Split of an Access Request in GRC

    Hello GRC Experts,
    I have a following issue in my MSMP workflow:
    I have created a MSMP workflow using detour Rule GRAC_MSMP_DETOUR_SODVIOL ar first stage. If an Access request contains SOD violations the request should be routed to Security stage. If works fine so far, but with one exception. We have requests which contain three roles, two of them have SODs and one is clean. I expect that only two roles which contain SOD should be routed to SOD path, and the role which is clean should go the normal path (No SOD path). However I am facing the situation that the whole request is routed to the SOD path and Security stage.
    Do you have any idea how to solve this issue?
    thank you in advance
    best regards
    Sabrina
    Here are the screenshots from the MSMP workflow

    Hi Sabrina,
    we had exactly the same challenge - this is how we solve it:
    - check parameter: 1073 Enable sod violations detour on risks from existing roles (recommended YES)
    - routing level - make sure the stage settings (where your routing rule is executed) are set to "line item level" under MSMP Workflow configuration / Maintain paths/ maintain stage settings
    Hope this helps,
    Filip

  • Add Fields in CUP Request - SAP GRC Access Control 5.3

    Dear Friends,
    I am wondering on how to add fields value in CUP (Compliant User Provisioning) SAP GRC AC 5.3.
    Currently i'm leading 9 SAP Security Coordinators in Indonesia and i want to create Performance Metrics on how long the CUP Requests is processed. It needs to enhance the CUP by adding value Delegation of Authority and the record no. of the DOA requests.
    Really appreciate your inputs on how to add fields value in CUP.
    Thank you so much
    -Mesti-
    Edited by: AnnisaPramesti on Jan 2, 2012 5:37 PM

    Hi.
    Check under http://service.sap.com/instguides
    SAP BusinessObjects -> SAP BusinessObjects Governance, Risk, Compliance (GRC) -> Access Control -> SAP GRC Access Control 5.3
    Cheers,
    Diego.

  • Site Access Request EMail not being sent

    Like others, my Access Request email messages aren't going out. I've read numerous blogs and such about this, but haven't found anything that is quite fitting my happenings.
    I'm using IIS 6 SMTP server on my SP server, Incoming Mail is configured as Advanced Mode, sites can receive mail (and some do and it works), No on SharePoint Directory Management Service, incoming email addy is configured and the e-mail drop folder is c:\inetpub\mailroot\drop.
    Outgoing mail points directly to my Exchange (2007) server, from and reply-to addys are configured, char set is 65001.
    As with others, outgoing email from SharePoint, other than access requests, is working. I get plenty of notices about documents changing, alerts, etc. But the alerts from Access Requests aren't going out. I found one blog somewhere that mentioned permissions
    to the \inetpub\mailroot folders, so I searched my ULS logs for system.net.mail issues, found one where it had an error about insufficient permissions to the \inetpub\mailroot\drop folder. Okay, seems odd, but what the heck, give it a shot. I grant some permissions
    to the drop folder and, surprise, the Outgoing Access Request EML file is dropped in the drop folder!
    But why? It should be going out to my Exchange server! I look in the message, there aren't any routing headers in the message indicating that it even tried the Exchange server, much less got bounced back to SP from Exchange. If I manually copy the EML file
    to the Pickup folder - off it goes and is properly mailed to my Exchange account.
    I don't get it.
    Thanks in advance,
    Steven

    Never mind. Stupid stupid stupid dumb dumb dumb...
    My IIS 7 .NET SMTP settings were to configured to drop outgoing mail in the DROP folder. Changed this setting to the Pickup folder and it starts working.
    Sorry for the interruption, now back to our regularly scheduled emergencies...
    Steven

Maybe you are looking for

  • How to configure dynamic email address for notification

    All, I have a problem in assigning dynamic email address for notification activity in a bpel process, I want to assign a user from a user-properties file. How do I achieve this. I tried using the users in System-jazn-data.xml file, but if i add a ema

  • Preview PDF white out issue.

    I want to white out a couple of lines on a PDF form.  White out.  No box lines, no shadows.  White.  As in those lines disappear.  What is the deal with the shadows?  Is there a way to just have parts of a doc whited out? 

  • Motion 4 Opinion

    I am sure this has been asked numerous times before, but believe it or not it is not easy finding the right information about this subject. I am a film student and am studying all aspects of filmmaking. One of them is compositing, editing and digital

  • Disable partner item pop-up screen

    Hi all, I do have a requirement for Transaction VA01 and VA02. When a Sales Order is created, and I opened that Sales Order via VA02, I wish to grey-off the entire fields of partner's address screen. The partner's screen can be reached via VA02 -> He

  • I receive "Error 11000 occured at AO check"

    While trying to send signals to the analog out of my MIO daq. Test panels show no malfunctions whatsoever