GRC Escalation request is Hold

Hi,
I have configured the Workflows with escalations,
the problem is that when hold the request, still running the time of escalation.
How I can set so that the scaling is not executed while an application is hold?
My sistem es GRC AC SP 15.
Regards.

Hi,
did you created a dedicated path for escalation?
You need to have it in place in order to effectively maintain escalation.
Filip

Similar Messages

  • Email content in GRC access request

    Dear Experts,
    Can any one let me know from where GRC access request email content is picked up which creating creating throught access request.?
    I.e when ever the requestor creating request, the manager will get an email( and in my scenario the email document is maintained in document maintenance(se61 tcode) ). Now i need to prefix user full name in email content(which the manager receives) with Mr./Ms.
    Thanks
    Katrice

    Hi,
    My issue is resolved my enhancing the method GET_NOT_VARS_AND_ATTACHMNTS( ) of class CL_GRFN_MSMP_NOTIFICATION
    """""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""$"$\SE:(1) Class CL_GRFN_MSMP_NOTIFICATION, Method GET_NOT_VARS_AND_ATTACHMNTS, End                                                                          A
    *$*$-Start: (1)---------------------------------------------------------------------------------$*$*
    ENHANCEMENT 1  ZGRC_EMAIL_TITLE.    "active version
    DATA: lw_fullname  TYPE string,
           lw_variables TYPE grfn_s_msg_variable,
           lw_logsys    TYPE logsys,
           lw_system_id_temp  TYPE string,
           lw_user            TYPE grac_user,
           lw_return TYPE int4,
           lW_user_details    TYPE grac_s_user_detail.
           SELECT SINGLE logsys  INTO lw_logsys FROM t000 WHERE mandt = sy-mandt.
           IF sy-subrc = 0.
            lw_system_id_temp = lw_logsys.
           ENDIF.
    READ TABLE et_variables INTO lw_variables WITH KEY name = 'USER_ID'.
       IF sy-subrc EQ 0.
        lw_user = lw_variables-value.
          TRY.
                  CALL METHOD cl_grac_ad_access_mgmt=>get_user_detail
                    EXPORTING
                      iv_system_id    = lw_system_id_temp
                      iv_user         = lw_user
                    IMPORTING
                      ev_return_code  = lw_return
                      es_user_details = lw_user_details.
               CATCH cx_grfn_exception .                   "#EC NO_HANDLER
              ENDTRY.  
    ENDIF.
       READ TABLE et_variables INTO lw_variables WITH KEY name = 'USER_FULL_NAME'.
       IF sy-subrc EQ 0.
         CONCATENATE lw_user_details-address-title_p lw_variables-value INTO lw_variables-value SEPARATED BY space.
         MODIFY et_variables FROM lw_variables index sy-tabix.
       ENDIF.
    ENDENHANCEMENT.
    *$*$-End:   (1)---------------------------------------------------------------------------------$*$*
    Thanks
    KH

  • GRC Access requests - Audit Log

    Dear All, GRC access requests is noticed with Provisioning failed messages. Access Request Audit Log is displayed with " Log on Failed / CPI - CALL: ThSAPCMRCV " message ( Screen shot enclosed ). Could you please share an insight on these messages and it's resolution. Thanks raj 

    Dear Raj,
    please check with your basis team if the connection to the system works. Basically it seems like you have a connection error as the log on does not work.
    Regards,
    Alessandro

  • GRC 10 - Request Priority Field

    Hi All,
    I have activated the below BC set in GRC 10.
    GRAC_ACCESS_REQUEST_PRIORITY
    Below mentioned values have been updated.
    Problem is during access request creation, priority field is empty and these values are not coming there and priority drop down field is empty. Please suggest if i am missing anything. Apart from this all are working and everything is fine.
    Regards,
    Madhu.

    Hi Nandita,
    No erros during BC set activation. Values are also available in the view GRACV_PRIORITY. But they are not populated in priority field during access request creation. If i make this Priority field as editable, even then it is not working as i am not able to enter any values manually. I maintained a default value for this priority field and even that was not reflecting. Am i missing anything? Please suggest.
    One more thing is when i am defining my BRF+ rules with priority fileld, I am able to see these values there but not coming in access request screen.
    Regards,
    Madhu.

  • GRC AC Request Role Creation

    Hello all,
    I noticed that by default GRC AC doesn´t have a Request Type for Role Creation. Normally how this is done? I mean, if someone realizes that a new role is necessary, how can this person report the need for a new role creation? What are my option here?
    Regards,
    SAP Legend

    Hi SAP Legend,
    You can not request a new role to be created via an Access Request workflow. You still need a business governance strategy where someone has to raise a request outside of the GRC system for the new roles through the right channels deemed fit in your company to get the new role made. Maybe you have a support ticketing system in place or some SAP security department you can raise the formal requests to.
    The BRM Role creation/maintenance workflow runs separately from the Access Request workflow. Further more, the definition and creation process of roles via GRC should only involve and be used by Business Process Owners/Role Owners and the Authorisation security team only, i.e. not general end users.
    A role build methodology will have to be set up and then the underlying approval workflows (based in MSMP technology also, like the AR workflow).
    Once the role has been built (either via back end PFCG) or via GRC using the BRM methodology and approval flows, the role will be available to the end user to request via AR.
    Hope that helps.

  • GRC 10 - request not able to go to next stage

    Dear Expert ,
    Getting very strange behaviour from MSMP workflow . Request is able to pick right path reaches first stage (Line manager) without any problem . But when line approver approves it ,its not going to next stage i.e role owner .
    Getting error messge " Error when trying to complete/forward work item xxx" .
    I have already checked WF-Batch user permisison ,its fine .I am SP07.
    Thanks in advacne for your help .
    Best Regards
    Asheesh

    Hello Asheesh
    Check SWIA and see the error, and take the task id and make sure the Task ID should be General Task.
    Regards,
    Chandra

  • GRC Report (Request Details vs Approver Details)

    Hi All,
    I want to prepare a report which gives the request number and approvers at different stages.
    I found that information is available in below tables.
    1. GRACREQ - With Request ID, Request number, Request Created Date
    2. GRFNMWRTDATLG - with MSMP Instance ID, Stage Sequence Number, Stage Status,Approver User
    3. GRFNMWRTINST - with MSMP Instance ID, External Key (ACCREQ/REQUESTID)
    I am not able to connect GRFNMWR* tables with GRACREQ* tables as I couldn't find any mapping.
    However in GRFNMWRTINST table, I could see there is a column called "EXTERNAL KEY"
    for example with value as "ACCREQ/529CEC1BA0701A30E1008000C0A8141C".
    In this second part of value corresponds to Request ID in GRACREQ* tables.
    I am trying to create a table join using SQVI for above mentioned 3 tables but not able to connect
    GRFNMWR* tables with GRACREQ* tables.
    Someone please suggest how to connect GRFNMWR* tables with GRACREQ* tables.
    Thanks in advance.
    Regards,
    Sai.

    Hi Sai,
    Just make use of two tables GRFNMWRTINST and GRFNMWRTDATLG you will get the required result .
    In table GRFNMWRTINST give the request number in EXTERNAL_KEY_DIS and get the INSTANCE_ID . Give this INSTANCE_ID in the table GRFNMWRTDATLG , you will get the stage approvers for request .
    Regards,
    Sandeep Devaki

  • Error while trying to submit Access request to GRC from IDM

    Hello
    We have SAP IDM 7.2 SP8 installed and done all the prerequisite for connecting to GRC AC 10 as in configuration document.
    We are trying to submit request to GRC using Standard GRC provisioning framework task ( AC Validation) but pass: Submit AC Request fails with error: "Pass stopped by script"
    Is there anything wrong with the script which put RoleData details since its getting aborted ?
    I tried providing Role name directly in Role data attribute inside the action task and got following error:
    Error
    putNextEntry failed
    storingcn=IDMUSR0023,ou=useraccessrequest,o=grc
    Exception from Add operation:javax.naming.NamingException: [LDAP: error code
    82 - (GRC User Access Request:82:Script execution failed)]; remaining name
    'cn=IDMUSR0023,ou=useraccessrequest,o=grc'
    I checked VDS Logs and there was one error :
    Additional message = msgcode=4;msgdescription=Mandatory field ITEM NAME  is empty in line no 1 ;msgtype=ERROR
    From where exactly ITEM NAME field value will be fetched and pass to GRC for request creation ?
    Regards
    Deepak Gupta

    Thanks Christopher
    I got my issue fixed, There was issue with my GRC Initial load job which couldn't enrich repository privileges and hence the issue was coming since script wasn't able to find GRC ROLE ID and Application ID attribute from privileges.
    Regards
    Deepak Gupta

  • Error when submitting GRC request

    Hello IDM Gurus, <br>
    We were running into an issue when trying to set up our IDM - GRC integration; when submitting a request to GRC via the AC Validation task the "Submit AC Request" task always encounters an error, but in spite of which the request still gets created on the GRC end; weirdly enough, 2 requests get created each time:<br>
    putNextEntry failed storingcn=TESTUSER,ou=submitrequest,o=grc
    Exception from Add operation:javax.naming.CommunicationException: [LDAP: error code 2 - (GRC Submit Request:2:oracle.jdbc.driver.OracleDriver)]; remaining name 'cn=TESTUSER,ou=submitrequest,o=grc'
    <br>
    On the GRC end we noticed that we are getting the following error:<br>
    2011-12-05 20:21:32,046 [SAPEngine_Application_Thread[impl:3]_30] ERROR com.sap.security.api.NoSuchUserAccountException: Cannot find user when logonid is null!
    com.virsa.ae.service.umi.UMIException: com.sap.security.api.NoSuchUserAccountException: Cannot find user when logonid is null!
         at com.virsa.ae.service.umi.ume.UMESearchUser.getUserById(UMESearchUser.java:304)
         at com.virsa.ae.search.bo.SearchUserBO.getUserById(SearchUserBO.java:198)
         at com.virsa.ae.ejbutil.submitrequest.RequestSubmissionBean.submitRequest(RequestSubmissionBean.java:564)
         at com.virsa.ae.ejb.submitrequest.SubmitRequestEJBBean.getSubmitRequest(SubmitRequestEJBBean.java:45)
         at com.virsa.ae.ejb.submitrequest.SubmitRequestEJBObjectImpl0_0.getSubmitRequest(SubmitRequestEJBObjectImpl0_0.java:119)
    2011-12-05 20:21:32,064 [SAPEngine_Application_Thread[impl:3]_30] ERROR com.virsa.ae.core.BOException:  Error in Searching Users...
    com.virsa.ae.core.BOException:  Error in Searching Users...
         at com.virsa.ae.search.bo.SearchUserBO.getUserById(SearchUserBO.java:201)
         at com.virsa.ae.ejbutil.submitrequest.RequestSubmissionBean.submitRequest(RequestSubmissionBean.java:564)
         at com.virsa.ae.ejb.submitrequest.SubmitRequestEJBBean.getSubmitRequest(SubmitRequestEJBBean.java:45)
         at com.virsa.ae.ejb.submitrequest.SubmitRequestEJBObjectImpl0_0.getSubmitRequest(SubmitRequestEJBObjectImpl0_0.java:119)
    As a result of this error GRC AC Submit request never completes successfully and so the polling task never starts, instead immediately the pending values are skipped and removed from the user in question.<br>
    <br>
    What are we supposed to set the User data source as within CUP? Is there something else we should be doing to fix this?<br>
    <br>
    Would greatly appreciate your help with trying to fix this!<br>
    <br>
    Thanks a lot in advance!<br>
    <br>
    Best regards,
    Sandeep
    Edited by: Sandeep Jayendran on Dec 6, 2011 11:22 AM

    Hello Gents,
    I ran another test and had a look at the VDS Operation log to get more detail around the error; here's an excerpt from the operation log:
    Time: Tue Dec 13 18:01:43 GMT 2011  Level: Debug  Thread: Thread[3,3,LDAP Sessions:main_listener_4389] Logger: Plain Message:
    End element SOAP-ENV:Envelope
    Time: Tue Dec 13 18:01:43 GMT 2011  Level: Debug  Thread: Thread[3,3,LDAP Sessions:main_listener_4389] Logger: Plain Message:
    org.apache.axis.i18n.resource::handleGetObject(empty00)
    Time: Tue Dec 13 18:01:43 GMT 2011  Level: Debug  Thread: Thread[3,3,LDAP Sessions:main_listener_4389] Logger: Plain Message:
    NSPop (empty)
    Time: Tue Dec 13 18:01:43 GMT 2011  Level: Debug  Thread: Thread[3,3,LDAP Sessions:main_listener_4389] Logger: Plain Message:
    org.apache.axis.i18n.resource::handleGetObject(setMsgForm)
    Time: Tue Dec 13 18:01:43 GMT 2011  Level: Debug  Thread: Thread[3,3,LDAP Sessions:main_listener_4389] Logger: Plain Message:
    Setting current message form to: FORM_OPTIMIZED (currentMessage is now org.apache.axis.utils.ByteArray)
    Time: Tue Dec 13 18:01:43 GMT 2011  Level: Debug  Thread: Thread[3,3,LDAP Sessions:main_listener_4389] Logger: Plain Message:
    Exit: SOAPPart::saveChanges(): org.apache.axis.utils.ByteArray@7ecd78
    Time: Tue Dec 13 18:01:43 GMT 2011  Level: Debug  Thread: Thread[3,3,LDAP Sessions:main_listener_4389] Logger: Plain Message:
    Operations result is:SUCCESS
    Time: Tue Dec 13 18:01:43 GMT 2011  Level: Debug  Thread: Thread[3,3,LDAP Sessions:main_listener_4389] Logger: Plain Message:
    Additional message = msgcode=000;msgdescription=Request Created;msgtype=SUCCESS;requestno=92
    Time: Tue Dec 13 18:01:43 GMT 2011  Level: Debug  Thread: Thread[3,3,LDAP Sessions:main_listener_4389] Logger: Plain Message:
    Requst number: 92
    Time: Tue Dec 13 18:01:43 GMT 2011  Level: Debug  Thread: Thread[3,3,LDAP Sessions:main_listener_4389] Logger: Plain Message:
    Exception in GRC WS API call:oracle.jdbc.driver.OracleDriver
    Time: Tue Dec 13 18:01:43 GMT 2011  Level: Debug  Thread: Thread[3,3,LDAP Sessions:main_listener_4389] Logger: Plain Message:
    *** Fetch result code ***
    Time: Tue Dec 13 18:01:43 GMT 2011  Level: Info  Thread: Thread[3,3,LDAP Sessions:main_listener_4389] Logger: Plain Message:
    Operation result: 2
    Time: Tue Dec 13 18:01:43 GMT 2011  Level: Warning  Thread: Thread[3,3,LDAP Sessions:main_listener_4389] Logger: Plain Message:
    Exception: (GRC Submit Request:2:oracle.jdbc.driver.OracleDriver)
    Time: Tue Dec 13 18:01:43 GMT 2011  Level: Debug  Thread: Thread[3,3,LDAP Sessions:main_listener_4389] Logger: Plain Message:
    Returning: opResult:2,info: ((GRC Submit Request:2:oracle.jdbc.driver.OracleDriver))
    Time: Tue Dec 13 18:01:43 GMT 2011  Level: Debug  Thread: Thread[3,3,LDAP Sessions:main_listener_4389] Logger: Plain Message:
    Finished add operation
    Time: Tue Dec 13 18:01:43 GMT 2011  Level: Debug  Thread: Thread[3,3,LDAP Sessions:main_listener_4389] Logger: Plain Message:
    Sending operation result
    Time: Tue Dec 13 18:01:43 GMT 2011  Level: All  Thread: Thread[3,3,LDAP
    Sessions:main_listener_4389] Logger: Plain Message:
    Sending response to socket: 63621
    Time: Tue Dec 13 18:01:43 GMT 2011  Level: Debug  Thread: Thread[3,3,LDAP Sessions:main_listener_4389] Logger: Plain Message:
    LDAP Session continues ...
    It's the strangest thing, because it seems to send the request across successfully which is how the request is getting created in CUP but after it succeeds it encounters the exception with the GRC WebService call from the API; any ideas why this is happening? how can we possibly fix this?
    Would greatly appreciate any insight / advice on this!
    Cheers!
    Sandeep

  • Error when submitting GRC request from IDM

    Hello GRC gurus,
    We were running into an issue when trying to set up our IDM - GRC integration; when submitting a request to GRC via the AC Validation task the "Submit AC Request" task always encounters an error, but in spite of which the request still gets created on the GRC end; weirdly enough, 2 requests get created each time:<br>
    putNextEntry failed storingcn=TESTUSER,ou=submitrequest,o=grc
    Exception from Add operation:javax.naming.CommunicationException: [LDAP: error code 2 - (GRC Submit Request:2:oracle.jdbc.driver.OracleDriver)]; remaining name 'cn=TESTUSER,ou=submitrequest,o=grc'
    <br>
    On the GRC end we noticed that we are getting the following error:<br>
    2011-12-05 20:21:32,046 [SAPEngine_Application_Thread[impl:3]_30] ERROR com.sap.security.api.NoSuchUserAccountException: Cannot find user when logonid is null!
    com.virsa.ae.service.umi.UMIException: com.sap.security.api.NoSuchUserAccountException: Cannot find user when logonid is null!
         at com.virsa.ae.service.umi.ume.UMESearchUser.getUserById(UMESearchUser.java:304)
         at com.virsa.ae.search.bo.SearchUserBO.getUserById(SearchUserBO.java:198)
         at com.virsa.ae.ejbutil.submitrequest.RequestSubmissionBean.submitRequest(RequestSubmissionBean.java:564)
         at com.virsa.ae.ejb.submitrequest.SubmitRequestEJBBean.getSubmitRequest(SubmitRequestEJBBean.java:45)
         at com.virsa.ae.ejb.submitrequest.SubmitRequestEJBObjectImpl0_0.getSubmitRequest(SubmitRequestEJBObjectImpl0_0.java:119)
    2011-12-05 20:21:32,064 [SAPEngine_Application_Thread[impl:3]_30] ERROR com.virsa.ae.core.BOException:  Error in Searching Users...
    com.virsa.ae.core.BOException:  Error in Searching Users...
         at com.virsa.ae.search.bo.SearchUserBO.getUserById(SearchUserBO.java:201)
         at com.virsa.ae.ejbutil.submitrequest.RequestSubmissionBean.submitRequest(RequestSubmissionBean.java:564)
         at com.virsa.ae.ejb.submitrequest.SubmitRequestEJBBean.getSubmitRequest(SubmitRequestEJBBean.java:45)
         at com.virsa.ae.ejb.submitrequest.SubmitRequestEJBObjectImpl0_0.getSubmitRequest(SubmitRequestEJBObjectImpl0_0.java:119)
    As a result of this error GRC AC Submit request never completes successfully and so the polling task never starts, instead immediately the pending values are skipped and removed from the user in question.<br>
    <br>
    What are we supposed to set the User data source as within CUP? Is there something else we should be doing to fix this?<br>
    <br>
    Would greatly appreciate your help with trying to fix this!<br>
    <br>
    Thanks a lot in advance!<br>
    <br>
    Best regards,
    Sandeep

    Hi Diego,
    Thanks a lot for your quick response! Sorry for the delay in responding; I was travelling.
    Uploading the new files from the Note you mentioned allowed us to view what the actual errors were; but we've started running into new errors now; when looking at the operation logs for VDS, I see that the webservice actually returns an operation result of SUCCESS also quoting that "Finished add operation"; which is why the request does in fact get created in CUP but a couple of log entries later after the webservice returns the request number I encounter the following error within VDS:
    Exception in GRC WS API call:oracle.jdbc.driver.OracleDriver
    Here's the error found in sequence within a set of other operational log messages within VDS:
    Time: Tue Dec 13 18:01:43 GMT 2011  Level: Debug  Thread: Thread[3,3,LDAP Sessions:main_listener_4389] Logger: Plain Message:
    End element SOAP-ENV:Envelope
    Time: Tue Dec 13 18:01:43 GMT 2011  Level: Debug  Thread: Thread[3,3,LDAP Sessions:main_listener_4389] Logger: Plain Message:
    org.apache.axis.i18n.resource::handleGetObject(empty00)
    Time: Tue Dec 13 18:01:43 GMT 2011  Level: Debug  Thread: Thread[3,3,LDAP Sessions:main_listener_4389] Logger: Plain Message:
    NSPop (empty)
    Time: Tue Dec 13 18:01:43 GMT 2011  Level: Debug  Thread: Thread[3,3,LDAP Sessions:main_listener_4389] Logger: Plain Message:
    org.apache.axis.i18n.resource::handleGetObject(setMsgForm)
    Time: Tue Dec 13 18:01:43 GMT 2011  Level: Debug  Thread: Thread[3,3,LDAP Sessions:main_listener_4389] Logger: Plain Message:
    Setting current message form to: FORM_OPTIMIZED (currentMessage is now org.apache.axis.utils.ByteArray)
    Time: Tue Dec 13 18:01:43 GMT 2011  Level: Debug  Thread: Thread[3,3,LDAP Sessions:main_listener_4389] Logger: Plain Message:
    Exit: SOAPPart::saveChanges(): org.apache.axis.utils.ByteArray@7ecd78
    Time: Tue Dec 13 18:01:43 GMT 2011  Level: Debug  Thread: Thread[3,3,LDAP Sessions:main_listener_4389] Logger: Plain Message:
    Operations result is:SUCCESS
    Time: Tue Dec 13 18:01:43 GMT 2011  Level: Debug  Thread: Thread[3,3,LDAP Sessions:main_listener_4389] Logger: Plain Message:
    Additional message = msgcode=000;msgdescription=Request Created;msgtype=SUCCESS;requestno=92
    Time: Tue Dec 13 18:01:43 GMT 2011  Level: Debug  Thread: Thread[3,3,LDAP Sessions:main_listener_4389] Logger: Plain Message:
    Requst number: 92
    Time: Tue Dec 13 18:01:43 GMT 2011  Level: Debug  Thread: Thread[3,3,LDAP Sessions:main_listener_4389] Logger: Plain Message:
    Exception in GRC WS API call:oracle.jdbc.driver.OracleDriver
    Time: Tue Dec 13 18:01:43 GMT 2011  Level: Debug  Thread: Thread[3,3,LDAP Sessions:main_listener_4389] Logger: Plain Message:
    *** Fetch result code ***
    Time: Tue Dec 13 18:01:43 GMT 2011  Level: Info  Thread: Thread[3,3,LDAP Sessions:main_listener_4389] Logger: Plain Message:
    Operation result: 2
    Time: Tue Dec 13 18:01:43 GMT 2011  Level: Warning  Thread: Thread[3,3,LDAP Sessions:main_listener_4389] Logger: Plain Message:
    Exception: (GRC Submit Request:2:oracle.jdbc.driver.OracleDriver)
    Time: Tue Dec 13 18:01:43 GMT 2011  Level: Debug  Thread: Thread[3,3,LDAP Sessions:main_listener_4389] Logger: Plain Message:
    Returning: opResult:2,info: ((GRC Submit Request:2:oracle.jdbc.driver.OracleDriver))
    Time: Tue Dec 13 18:01:43 GMT 2011  Level: Debug  Thread: Thread[3,3,LDAP Sessions:main_listener_4389] Logger: Plain Message:
    Finished add operation
    Time: Tue Dec 13 18:01:43 GMT 2011  Level: Debug  Thread: Thread[3,3,LDAP Sessions:main_listener_4389] Logger: Plain Message:
    Sending operation result
    Time: Tue Dec 13 18:01:43 GMT 2011  Level: All  Thread: Thread[3,3,LDAP
    Sessions:main_listener_4389] Logger: Plain Message:
    Sending response to socket: 63621
    Time: Tue Dec 13 18:01:43 GMT 2011  Level: Debug  Thread: Thread[3,3,LDAP Sessions:main_listener_4389] Logger: Plain Message:
    LDAP Session continues ...
    It's the strangest thing, because it seems to send the request across successfully which is how the request is getting created in CUP but after it succeeds it encounters the exception with the GRC WebService call from the API; any ideas why this is happening? how can we possibly fix this?
    Would greatly appreciate any insight / advice on this!
    Cheers,
    Sandeep

  • Oracle IAM integration with GRC 10

    Hi All,
    Our client is using Oracle IAM for user provisioning process. Now they have SAP GRC being implemented for two of their SAP systems. Now client wants to integrate SAP GRC Access Risks analysis (ARA) for SOD analysis and User Access Management(UAM) for user provisioning modules of SAP GRC 10 with Oracle IAM.
    As far as i know, webservices needs to be activated in GRC 10 and has done that. Now i want to know how Oracle IAM communicates with GRC 10. How connectors needs to be developed, User account to be created for web service access and how the parameters are passed from oracle to grc.
    Also how many different scenarios are there in oracle IAM for this integration?
    In SAP IDM vs SAP GRC integration we have 2 scenarios.
    1. Request raised in IDM -> SOD analysis in GRC -> Provisioning in GRC -> Return success/failure status back to IDM
    2. Request raised in IDM -> SOD analysis in GRC -> Return SOD success/failure status back to IDM -> Provisioning in IDM
    So can anyone help with possible scenarios for this integration process??

    Hi vikas and Frank,
    Do you have any information related on How to enable the webservices in the GRC 10 (does NWBC holds the key). if you have any information related to it  please share it with me.
    Thanks and regards,
    keerthi

  • Releasing Transport Request Error.

    Hi all,
    I have created the Query Objects under a Transport Request in Development System and has to be transported to the QA system.
    One thing i have observed is, when u create a Transport request for an Object.
    Two Transport Requests will be created,
    For Example,
    If "A" object is assigned a new transport request 1, two Requests will be assigned to this Object "A".
    Those requests would be 1 and 2.
    But here 1 request is empty and 2 request is holding the Object "A".
    So while transporting the request 2, even since 1 is assigned to the object, even it should be transported,
    but im gettin the following message as below and hence the Transport cannot be done,
    "Task 1(TR 1) is unclassified and does not contain any objects,
    As soon as you include objects in the task/request, the SAP system automatically assigns a type to the task"
    So can any1 plz help me out what was the error and my next steps to be followed.
    Thanks,
    Sowrabh

    Sowrabh,
    It's like creating Task under one perticular Request no...
    Go to RSA1-Transport comnnection _ Drag the query you are intended to transport and check whether all objects are under same request..If not change the Owner of the object to you userid and then try to create a request..
    Cheer's
    HVr.

  • Missing Authorizations Scenario (SU53) in GRC AC 10

    Hello Gurus,
    Good evening !!
    I was wondering how can GRC AC 10 system help when an end user has missing authorizations ??
    General scenario is if an end user hits a transaction and gets "Not Authorized" , he will send a SU53 screenshot and depending on that the Basis/Security person will assign a role or directly add a transaction to his "Base/Default" roles.
    I am unable to visualize , how can we handle this scenario of missing authorizations in CUP or BRM .
    Please provide me your inputs on the same.
    Thanks in advance.
    Regards,
    Victor

    Hi Victor.
    Am I correct in understanding that your concern is more about how the Security admin will determine which role/access to assign to the user given the SU53 report?
    Personally, I would still use a report like SUIM within the local system to determine the correct role to assign to the user (if they should have it in the first place). Obviously ensure that the required roles are imported into the GRC system.
    In summary, use your "As-is" process to identify what the authorization issue is, as well as the method for determining which role to provide to the user to resolve the issue, but the only thing that has changed is the "how to assign the access" i.e. you are not using SU01/PFCG as it would be hoped that you are using the GRC Access Request functinality to submit the role request/s.
    I hope that has cleared up the initial misunderstanding I had.

  • Risk analysis Report Error in GRC AC 10.0

    Dear GRC,
    I had problem with Risk analysis Report in GRC Access Request form
    When i run the Risk analysis report on Action Level , Permission Level , Critical Action Level and Critical Permission Level then report showing as "No Violations" but if i run the Risk analysis report only on Critical Action Level and Critical Permission Level then report showing too many Violations.
    I maintained Action Level , Permission Level , Critical Action Level and Critical Permission Level as default risk analysis type in SPRO Configuration Parameters settings.
    i am not understanding why system behaves like this. Could you please help me on this.
    System Details : GRC AC 10.0 , SP-12
    Thanks a lot for swift response.
    Best Regards,
    RK

    Hi GRC Team,
    Please help me on this. I am waiting for your replay.
    Regards,
    KR

  • Approver Delegation failed in GRC AC 10.0

    Hi GRC,
    I am looking for urgent help.
    I delegated my access to respective approver in GRC AC 10.0 System and I created one Request and select manager field as my name in GRC Access Request form. As per delegation process request should go to respective approver but the request comes to me only , its not send to respective approver.
    Could you please help me to resolve the issue.
    System Details :- GRC AC 10.0 , SP12.
    Regards,
    Karnatak.

    Hi Mustafa,
    Sorry for late Replay.
    I check that it is in active status , but not working.
    And one more problam is Main approver deligates his access to backup Approver.
    Now user submit the request and then system sent request to two Approver inbox (Main approver and backup Approver) but e-mail notification is sending only main Approver not to Backup Approver. in this case how backup approver can know the request is pending for his approval.
    Please help me to reslove the issue.
    Regards,
    Karnatak.

Maybe you are looking for

  • IPhoto: can't copy my library to another drive

    I'm trying to back up (and ultimately move) my 94GB iPhoto library to an external harddrive and just before it finishes copying I get a message that says, "The Finder can't complete the operation because some date in "iPhoto Library" can't be read or

  • Sapscript label prints - problem with high print quantity

    Hello, we are printing labels out of deliveries using sapscript. To allow print copies, I have set the DIALOG to 'X' on the function call for OPEN_FORM (see below). We usually print 1 copy for each label. It is working fine for low quantities like fo

  • CS 5.5 screen size - required vs. recommended

    Hi - I installed CS 5.5 Design Standard on my desktop, which has a 1440 x 900 monitor, and it works fine. I plan to buy a new Windows 7 laptop and want to install the software on that machine as well. I'd like to get a smaller 15.6-screen laptop, but

  • End-users creating asset instances

    Hi. I need to implement a subscription page, with end-users posting data that needs to be saved as assets. The obvious solution is to create 2 templates: - The first template with a <satellite:form> that sends data to the second template - The second

  • I changed my Icloud Email and Password on Itunes, Now i cannot change the AppleID on my Iphone 5

    I changed my AppleID on 3 of my Iphones, but my Iphone 5 will not allow me access to change my AppleID in the Icloud Settings. How do  I change it?