GRC 10.1 Simplified Access Request and Remediation View Issues

Hi Everyone,
We recently upgraded our GRC 10.0 environment to 10.1, SP 5 and am having the following issues--has anyone else also experienced?
In the simplified access request form, it keeps telling me to enter a “valid user ID”—even though the ID is valid and works fine in the normal access request screen. Also tried to search and then select the ID in this field with the same error.
In the SoD Remediation view, I keep getting “No Data Found”, even though in the detail view, there are risks the same request:
I’ve checked the following things:
I’ve used IE 8, IE 9, FireFox, Chrome, and the NWBC to see if any of these fix the issue
I double checked the 10.1 “upgrade guide” to make sure Gateway configurations are correct
It looks like we are on the latest support packs:
Any help on this would be greatly appreciated!
Thanks,
Brett

Hi Brett,
For Remediation issue you can check the below thread.
http://scn.sap.com/thread/3574790
Regards,
Neeraj

Similar Messages

SharePoint 2013 - Site Settings - Users and permissions - "Access Request and invitations" link missing

I am site collection administrator and have configured the outgoing email in Central administration but "Access Request and invitations" link is missing, pl advice any additional configurations for this link to show up
I was though able to configure access requests by going to Site Settings->Users and permission and on the ribbon selected "Access Request Settings"
What is the difference in either of the approaches?
Thanks
Abhishek

Hi there,
I noticed this post, and didnt really find an appropriate solution to your issue. I noticed the same issue when dealing with Access Requests. First of all to make sure that the Request feature is enabled, you need to access
Site Settings -> Site Permissions -> Access Request Settings -> Make sure the
'Allow access requests' option is enabled.
The Allow access screen just allows you to enable the feature and also to specify a email address that notifications are sent to. Whereas the 'Access Requests and Invitations' section provides a screen to manage Access Requests and request history.
I noticed then that the Access Requests and Invitations link under 'User and Permissions' didnt actually appear until someone actually requests to join the site. It seems that this is needed to display the screen. Once actioned once, the option stays there.
Hope it helps

Access Denied Error while accessing "Site Settings Access requests and invitations"

Hi,
I am getting Access Denied Error while accessing "Site Settings > Access requests and invitations" in SharePoint 2013 online. Currently I am the owner of the site and have "FULL CONTROL" access. I am able to access using
site collection account. So, what permission I have to give my regular account to access this page?
Thanks, Pal

Hello,
Have you recently changed the Owners group of the site collection or removed the user from the original owners group?
The reason I am asking is when the Access requests and invitations list are created, the permissions are given only to the default owners group at the time that the Access Request list was created. If this "regular account" is not part of that owners
group, the user will receive access denied. Site Collection Admins always have permissions for the Access Request List.
A workaround for the Access Denied issue is listed in the KB article http://support.microsoft.com/kb/2911390/en-us. By giving the correct group or user the permissions to this list, the users will not receive
the Access Denied issue anymore.
Preferably, in order to grant the user the full permissions ( you will see features like resending invitations may still fail after implementing the above workaround) there is one other workaround that may be required depending on what the original issue
was. Below are additional steps to restore full functionality.
1)Access the /_layouts/15/permsetup.aspx of the site collection, make sure the default Owners Group
is set correctly. (There is a group selected)
2) Add user to that Owners Group. (Issue may be resolved at this step if the site collection Owners
Group was never changed, if not continue to next step.)
3) Implement workaround on http://support.microsoft.com/kb/2911390/en-us, by adding that owners
group as Full control on Access Request list Permissions.
Let me know how this works out for you.
- Shpendi Jashari

Can't find "Access requests and invitations" in PS2013

Hi
I can't see Access requests and invitations on a project site settings. Do I need to enable anything else besides ticking the box for <label for="ctl00_PlaceHolderMain_ctl00_chkRequestAccess">Allow access requests?
I tried to follow the instructions on
this thread but I can't find the </label>Global External Sharing
in the SharePoint Central Administration, because this is not a Project Online instance.
Thanks!

Hi Pedro,
You first have to configure outgoing email.
See this reference below, it might help:
http://sharepointrevealed.blogspot.ca/2013/08/access-request-in-sharepoint-2013.html
Hope this helps,
Guillaume Rouyre, MBA, MCP, MCTS |

MSMP Access request and mitigation assignment workflows

Hi Guys,
Need help in understanding access request workflow. Here is the flow:
Requester submitted access request.
1. Manager stage (010)
2. Role owner (020) - at this stage routing enabled for DETOUR_SODVIOL with standard rule ID by creating detour path with new stage (021).
3. Security Lead (030).
Instead of going to SoD stage (021) request is diverted to MIT_ASSIGNMENT workflow for applying mitigation control with a new number generated.
I am confused with system behavior, Please suggest.
Thanks all for your time.
Thanks & regards
Harry

Hello,
Based on your requirement you need 2 PATH .
PATH A : where you have 3 stages
Manager
Roleowner
Security Lead
and PATHB 2 stages if security Lead is required after SOD Stage.
1)SOD stage
2)Security Lad
Requester submitted access request. nThis is Go in PATHA
1. Manager stage (010): Manager Appoves then goes to Next stage
2. Role owner (020) - at this stage routing enabled for DETOUR_SODVIOL with standard rule ID by creating detour path with new stage (021).: After Role owner approves with check for condition and route mapping based on rule result value
3. Security Lead (030).
Instead of going to SoD stage (021) request is diverted to MIT_ASSIGNMENT workflow for applying mitigation control with a new number generated.
Ensure MITIGATION workflow in not active in Configuration parameter.
Good Luck
Prasant

Access Requests and Approvals

We all know Site owners can set up the access request feature so that it sends them an email when someone requests access to a site.
But what about the other side of it. Can we configure if/how an email is sent to the requestor (not the site owner)??
Any thoughts on this???

I am not really clear about "an email is sent to requester part". But i think you are already aware while you are adding the user in share point site, there is already a feature to send email to the user.
Please mark as helpful if it is really helpful

10.1 Remediation View Issue

Hi Folks,
Am trying to use the remediation view in 10.1 when i encountered the below issue
1. Used the "Remove Role" option and ARM request was raised which went thorugh the stages fine.
2. The role was removed from the backend system and the ARM request status is Finished
But when i tried to add the role again and tried to run the analysis using remediation view the role appears but with no option to remove, rather it just says Remove role is in progress (Previous ARM request number is mentioned)
P.S: I have already run the Repository Sync.
Any help would be appreciated

Hi Ameet,
Thanks for the response. The Repository job ran successfully
Below is a capture of the SLG1 log and this the only error which has repeated. I am not sure whether its relevant

Can't access "Network" and other performance issues

Hi all,
I'm facing a catch-22 and am not sure what to do to get myself and my mac out of this downward spiral. Any help you can offer would be greatly appreciated (fyi I am admittedly not great with macs and probably don't maintain my MacBook Pro well enough).
I've had a serious slowdown in performance starting a couple weeks ago. the system moves at a glacial pace and most of the time is spent watching the spinning rainbow.
To add to my issues, my ISP recently performed a system upgrade which requires me to change some settings under "Network" in my system preferences. Well, when I try to access "Network", the machine thinks for a while, then an error message appears telling me that the network preferences has shut down unexpectedly. When I hit "retry" the error message eventually reappears.
So, because of the upgrade, I can't access the internet to download any repairs for the machine, and because of the problems with the machine, I can't modify the preferences to access the internet. Obviously a vicious cycle which someone of my expertise level is struggling to solve.
Side notes
- I've passed the 90-day phone support period so can't call for help.
- I'm on my work computer now. Could I download some repair/diagnostic tool here, then run it on my machine at home?
If anyone can throw me a lifeline I would be grateful!
MacBook Pro 15" Mac OS X (10.4.3)

OZ 99,
For logic's sake, I'm gong to take these out of order a bit:
2) A "disk error" occurs when the "file system" (sometimes called the "disk directory") becomes damaged. This is data that is written to the HD, so yes, it could be considered a software error. Your file system is, basically, a map of your physical HD, and it indexes the location on the drive of all the other files. When it is damaged for whatever reason, your disk "forgets" where some amount of data lives. Because of this, the associated files become damaged, or "corrupt." If those files happen to be critical components of the OS, bad things can happen. At worst, the disk will become unmountable, and all of your files unrecoverable.
1) Disk errors can be caused by several things. Sometimes, one or more "blocks" (let's call them physical locations on the disk) on your HD can become physically damaged. Whether this is because of a slight flaw in manufacturing, a scratch, magnetic particles that lose their "oomph," whatever, matters not. What is important is that some data is lost. Because the file system still believes there is data living in this location, it (the file system) is no longer reliable; it is damaged. While the initial loss of data could be considered hardware-related, the disk error is not. I'll come back to this.
Another potential cause is some random error in the process of writing data to the disk. Again, this is a software problem, not a hardware problem. The most common cause for this occurs when your computer is shut down improperly, either a forced shutdown or a power loss. Journaling, which is the default for an OS X boot volume, goes a long way toward automatically fixing these types of disk errors, but it is not always a guarantee.
If you have had your MBP for only a short period of time, it is not surprising that a disk error has occurred, and probably because of a bad block. Absolutely flawless drives are rare, and many computers ship with incipient disk errors. For this reason, many people like to format any new drive, even one in a new computer, right out of the box (I'll get to reasons why this is a good thing to do).
3) Yes. Disk Utility can check or repair your file system. Any repairs must be made using Disk Utility while booted to the OS X install disk. Your HD can be "verified," however, while booted to the HD. Simply open Disk Utilty (in the "Utilities" folder), select your startup disk, then click "Verify" in the "First Aid" pane.
4) Yes, you will have to reinstall all of your applications after formatting and reinstalling. Formatting erases everything on the volume or drive selected. Settings and data for all of those applications can be saved, however, then transferred back to the MBP after reinstalling OS X. Once the applications, themselves, have been reinstalled, you will be right back where you started. I can talk about making a comprehensive backup in another post, if you like.
DISK UTILITY: In my first post, I recommended that you select your entire drive, then using the "Zero All Data" option. This process takes a considerably longer amount of time (as much as an hour and a half, depending on the size of your drive), but it has one big advantage. When this option is used on an entire physical drive (also called a "device"), it will scan for those pesky bad blocks, and "map out" any it finds. Since these bad spots on the disk will not be included in the new file system's list of "useable" locations, your chances of encountering another disk error in the near future is drastically reduced. So, even though a bad block could be considered a hardware error, management of them is handled by software.
Scott

Meeting Request and Calendar View not there

I just received a meeting request in my email. I open the email on my Playbook and I have the options of Accept, Tentative or Decline. Before I accept I need to check my calendar to avoid over booking. Oh no, where is the option, I swept the top frame down and no option. How do I check with out switching to my calendar finding the day and time in question and then going back to the email app to click the required button. This is Black Berry, this should all be seamless, are my configurations not right? Can someone please advise???
Thanks,
George
BB Curve 8530 paired with Playbook

Hi cncgeorge
To check your calendar, you would have to minimize your email application and open the calendar.
Thanks
-CptS
Come follow your BlackBerry Technical Team on twitter! @BlackBerryHelp
Be sure to click Kudos! for those who have helped you.Click Solution? for posts that have solved your issue(s)!

2010 15" HiRes Anti-Glare video and photo viewing issues

In January 2012 I bought my MBP through Apple's refurb dept.
After some weird glitchy things, which a recent format may have fixed, and some overall speed issues that i cant figure out, my monitor seems to suck.
Movies are WAY too dark, and while I can fix it a little in the DVD options, the movies look like they're on a 13 year old plasma TV, not too vivid and not too sharp.
I also do photo editing which is why I bought my 24" matte screen iMac in 2006 and why I bought the upgraded screen on this MBP. But my iMac screen played back movies and photos much sharper and with better color rendition than this MBP screen. (On top of that, my 3GB iMac was peppier and just seemed faster running programs than this 8GB MBP.)
Help.
I can't really go to an apple store because I moved from the US to Japan. The move here is the whole reason I bought the MBP, and now I miss my old iMac.

That said .. please keep in mind that running your machine with faster card will cause it heat up more and drain battery rather quickly .. gfx card status has a nice switch in it's preferences that allows you to set the preferred card for machines power states
hope this helps

FF 19 and PDF viewer issue

So the latest version of Firefox 19 comes with a built in PDF viewer.
The problem that I found is that this viewer at its present time does NOT show fillable fields ina PDF, or let the user type into these fillable fields, or show the electronic print and instructions buttons we place at the top of most of our PDF "forms".
Ex: http://www.tmcc.edu/financialaid/downloads/forms/1213/FINAConsortiumAgree1213.pdf
This form should show buttons at the top and let a user fill it out. It does with the Reader plugin. In FF 19's built in PDF viewer I cant seem to do anything.
We presently make all our PDF forms fillable, so if this is an issue, hopefully a fix or update can be found.

This new viewer was an ugly surprise. I DO NOT want pdfs to open in Firefox. I want FIrefox to give me the option to open or download. If I select open, I want it to open in my copy of Acrobat (not the Reader), and certainly not inside Firefox. Can anybody help me?

Mail and Safari viewing issues

Hi,
Since updating to 10.5.8 I'm having 2 frustrating issues.
I can't view some pages in Safari e.g. go to google - type in search - can't see any text results.
Also mail I can't view some messages, mainly bulk type messages from companies for their enews (is that HTML?), also some plain text mail from friends don't display the message either. Can see the details of the subject and who its from just not the body of the message.
Please help!

When you purchase DiskWarrior they will send you the disk and all the instructions. It's not hard to do. You will be booting from the DiskWarrior disk, so you don't have to worry about getting your Mac running before you receive DW.
Just my 2 cents... DW has saved my PBookG4 and my iBookG4 both without having to take them in for service.
MacWorld's review on DiskWarrior. http://www.macworld.com/article/55169/2007/02/diskwarrior4.html

Is it possible (and if so, how) to automatically approve Access Requests

SharePoint 2013 (we are using SP 2013 On-Prem.) provides the ability for users to "request" access to a site, or for Site Members to "share" content with users outside of the current site users. In both cases, however, the request
for access/sharing is added to the hidden list Access Requests, and a notification sent to the Site Collection Owner/Administrator, who must then "approve" the request before access is actually granted to the outside user.
We have a use case where we would like to have any access requests (specifically those initiated by Member users to share content with non-site users) automatically approved. We still want the Access Request list to track all the requests, but we want
to somehow set all requests to Approved as soon as they come in, so that the Site Owners/Admins do not become a bottleneck where it takes time for access to be granted.
Is there any way to accomplish this without the need for custom code?
I tried leveraging a SPD-based workflow, but there are not properties on Access Request that seem to represent the Approved/Declined selections available in the Request user interface, so there does not appear to be a way (at least via workflows) to set
a request to approved.
Any ideas/thoughts on how to maybe accomplish this?

Don't think there is a way to do this OOB.
--Cheers

Provisioning log is not available on Access request type Change Account

Hi,
So I have and issue when I try to submit a request to add a role to a user and I'm trying to understand what could be the reason for it. Basically I have a workflow that works perfectly for a "Change Request". I can see that all the steps are executed and then at the end of the request when is suppose to do the actual role assignment I see the message "Provisioning log is not available" then the approval path is finish and the request is closed but when I take a look at the user in the back end the role is not assign. In terms of access I have try giving SAP_ALL to WF-Batch, nothing shows in Yellow or Red on SLG1 and in SPRO->AC-> User Provisioning -> Define request Type I see "Change Account" with SAP_GRAC_ACCESS_REQUEST. What else can I do to troubleshoot this error?
Note: I when back to the to the AC 10.0 Pre-Implementation From Post-Installation to First Access Request and everythings looks right in terms of the AC Configuration settings.

Hi Jonathan,
In my question I was referring to SPRO - GRC/access control/user provisioning / maintain provisioning settings. Those need to be setup (min. global provisioning settings) in order to have role being assigned to user at the end of path.
Change account option you can see under request type is referring to change user master data(e.g. password/ account validity / details).
Is this system maintain by CUA? If so settings have to be different (see CUA settings in SPRO)
I would recommend moving to SP14 as in SP13 there were many bugs, by the way I believe the worst SP ever since beginning of AC is SP13 (maybe due to number), as it destroys many working functionality.
Filip

PD Profile / Structural Authorization in Access Request - 10.1

Hi - We are upgrading from 5.3 to 10.1 SP6. We are not migrating. In 5.3 we provisioned PD profiles directly to a user in OOSB.
I'm having issues with our PD Profile showing up in my access request search. Here's what I have done.
Business Role Management
- I created a "PD Profile" against my ECC "Landscape". The "Project Release" is Production. The Additonal Details -->Provisioning has my ECC system and allows for provisioning. The "Current Phase" is Complete.
When a search for the PD profile using "Role Type" PD Profile in Access Management-->Role Management-->Role Search, my PD profile appears.
When I go to create an access request and I go to Add --> Role the "Select Roles" search screen appears. I search by Role Type = PD Profile and nothing shows up. I try to search by the actual PD Profile Name with no other selections and nothing shows up. All my composite and single roles show up in my searches.
When I go into table "GRACPDPROFILES", I see the PD Profile I created. Field AC_REF_ROLE_ID contains a long string. It has an updated date of when I created it.
Any idea on what other setting I may be missing to make the PD profile available to select in an access request?
We'll continue to do direct assignment within OOSB and not indirectly via the position.
Thanks,
Rich

Hi Richard,
You need to refer to: http://service.sap.com/sap/support/notes/1666128
Hope this helps.
Regards,
Ameet

GRC 10.1 Simplified Access Request and Remediation View Issues

Similar Messages

Maybe you are looking for