HOW TO CONFIGURE MANAGER or APPROVER USER IN ACCESS REQUEST MANAGEMENT TO APPROVE OR REJECT REQUEST

hi sap gurus,
i configured grc 10 system successfully. I created one user: GR_AR_APP001 and assign following roles:
SAP_GRAC_ACCESS_APPROVER
SAP_GRAC_ACCESS_REQUEST_ADMIN
SAP_GRC_FN_BASE
SAP_GRC_FN_NUSINESS_USER
and I maintained GR_AR_APP001 in access control owners as "POINT OF CONTACT", "SECURITY LEAD" and "WORKFLOW ADMINISTRATOR"
but when i am creating access request for new user and defining MANAGER under user details tab as GR_AR_APP001.
the user GR_AR_APP001 is not receiving any request for APPROVE or REJECT in his WORK INBOX.
can u please guide me how to configure APPROVER or MANAGER to approve or reject request.
I will be very much thankful if you guide me successfully.

Hi Colleen,
thanks a lot for your time.
PIC1: I created one user: GR_AR_APP001
and assigned all the GRC ROLES.
PIC2: I assigned owner type to GR_AR_APP001 user : POINT OF CONTACT, SECURITY LEAD and WORKFLOW ADMINISTRATOR in NWBC ACCESS CONTROL OWNERS
PIC3: I created one EUP 980 (copied from default EUP)
PIC4: I maintained default manager as GR_AR_APP001 user in 980 EUP
PIC5: I selected SAP_GRAC_ACCESS_REQUEST process id
PIC6: I created one agent id as ZGRAC_MANAGER11 in which I added approver user id: GR_AR_APP001
PIC7: I saved agent id
PIC8: I added agent id as ZGRAC_MANAGER11 in stage5 in manager stage.
PIC9: I saved
PIC10: I maintained EUP 980 (in which I configured manager as GR_AR_APP001 user) in stage 5 task settings
PIC11: Maintain Route Mapping, I clicked on next
PIC12 and PIC13: I saved and activated.
After this process I created one request for new account and selected the manager as GR_AR_APP001 and one request is created with request no 9000000030.
now I logged into system by user GR_AR_APP001 and checked, there is no request under his work inbox.
please guide me at least one procedure, how to receive request in approver work inbox so that I can learn other procedures to configure approver as per our organization requirement.
thanks for your support Colleen.

Similar Messages

How to configure Email notification for User login's in Exchange Infrastructure?

How to configure Email notification for User login's in Client Machines?

Hi ,
Based on the description , you need to assign logon scripts to the end users via group policy and also use your exchange server as the smtp server in that logon script to relay emails to the internal recipients.
Thanks & Regards S.Nithyanandham

How to configure OSTS to propagate user identity from OAM to OSB Service?

I have a 11.1.1.7 OAM environment and I need to protect applications and web services deployed in different domains with OAM.
I have already configured the applications security but I am having problems with the web services.
The issue is that I do not know how to protect a WS and can not find a document that explains which configurations should be done.
I think I should use OSTS but I don't know how to configure it and how to request tokens from a web service?
Regards.
Gonzalo.

The truth is that your design should be done in the way that it doesn't matter which profiles in which order you will execute. At the end, if you will run all import, synch and export profiles on each data source you should get same result. This is beauty
of synch engine here.
Your steps from 1-4 will synch data to your data sources and at the end will give you expected result. But not because of the order you are executing them but because of correct attribute flows. If flows from CSV file and from FIM portal might be done for
the same attributes you need to think also about attribute precedence.
Tomek Onyszko, memberOf Predica FIM Team (http://www.predica.pl), IdAM knowledge provider @ http://blog.predica.pl

How to get the logged in user to accept remote management

Hi,
It possible to have the currently logged in user to accept or reject a Remote Desktop connection?
The reason is that the remote administrator taking control should not be able to see the currently logged in user without him knowing it. I know about the "being observed" icon but that's not enough.
I want the remote administrator to be able to work freely when no users are logged in but if a user is logged in, I want some kind of request/validation-or-rejection mechanism before the remote desktop administrator can take control of the mac.
Is that possible?
Ludo

ARD supports both modes that you desire... The problem, as I recall, is that these are "all or nothing" switches you get one way, or the other, but you can't have it both ways.
The controls for these options lie behind the "Computer Settings..." button in the Sharing Prefs panel.
"Anyone may request permission to control the screen"
and
"VNC viewers may control the screen with password:"

I need to configure WSA Ironport for user to access FTP on port 2235

We have internal users who need to connect ftp on port 2235.
can anyone share the information on how to configure it

Hi,
First you need to make sure the traffic is going to the proxy server, i.e. WCCP is redirecting traffic or you're set up correctly fro explicit.
Then you need to mkae sure that FTP is allowed in the Protocols and User Agents and that port 2235 is in the HTTP connect Ports.
Thanks
Chris

How can I check if an user has access to an url within my web app?

Hi,
I have a web application where I allow the users to set their startup page by presenting them a list of startup pages. However, some startup pages can accessed only by certain users, so I want to present the user only those pages the user has access to.
How can I do this with weblogic?
One way is to read the web.xml file and determine the roles that have access to the page, then check whether the user has any of those roles.
Is there a better way eventually using some weblogic api?
Thanks

Just for the record, I decided to parse the web.xml file and to simulate whatever the container does.

CWMS v.2 - how to configure CWMS to authenticate user with CUCM

Hi,
I have a CUCM with no LDAP or AD integration. I already configured the directory integration with CUCM and it synchronized the user accounts to CWMS. When trying to login with end user account, password configured in CUCM doesn't work. What is the process to configure CWMS to authenticate with CUCM user database? Thanks.
-Alan

Hi Alan,
CUCM and LDAP integration is a prerequisite for using Directory Integration on CWMS.
http://www.cisco.com/c/en/us/td/docs/collaboration/CWMS/1_5/Administration_Guide/Administration_Guide_chapter_01011.html#task_DB0D271D6EB1459EB4DA269461E93B36
Before You Begin
You must configure AXL and LDAP directory service on CUCM before you can use the directory integration feature. CUCM is required to import users into your Cisco WebEx Meetings Server system. Use CUCM to do the following:
Enable Cisco AXL Web Service
Enable Cisco directory synchronization
Configure LDAP integration
Configure LDAP authentication
-Dejan

How to configure SCCM 2012 discover user group only?

Hi,
I'm wondering if there is a way to discover user group only (ignore computer group) in SCCM 2012?
Jason

Hi,
Also note that by default, only security groups are discovered. However, you can discover the membership of distribution
groups when you select the checkbox for the option Discover the membership of distribution groups on
the Option tab
in the Active Directory Group Discovery Properties dialog box.
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Allow Windows AD domain user to access and manage objects in Oracle 11g

Hi,
I'm using Oracle 11g on Windows environments, XP, server 2003 etc.
If I use a domain user (user1) maintained on domain server (adsvr.company.com) to manage Oracle objects in DB server (dbsvr), do I have to assign user1 as member of administrator on DB server (dbsvr)?
I'm asking this because my software vendor requires for it but our security policy doesn't allow us to assign normal domain user (user1) to administrator group on local machine (dbsvr).
If I have to assign user1 to administrator group on dbsvr, please point me which document says so.
Thank you in advance.
Jeffrey

Looks like some left-over processes keeping a hold on configuration files.
Manually kill the left-over processes and start the DB Console.
Refer:
How To Identify and Remove an Agent or DBConsole Processes From a Windows Server (Note 785772.1)
Refer this as well:
EMCA Troubleshooting Tips
http://docs.oracle.com/cd/E11882_01/server.112/e25494/dbcontrol.htm#ADMIN13444
HTH
Mani

New Outlook 2013 Installation - How to configure for default pop email and access exchange 2003 server for shared folders only

I have successfully installed and configured outlook 2013 to access my pop.integra.net email accounts. We have an 2003 exchange server we use for shared folders which I am having difficulty accessing.
My preference would be to set up my access to the exchange server and use the same data folders for email as are in use for my pop email account. In outlook 2003 this was simple, but in 2007 on up it seems this feature has been hobbled. Is there
a workaround to get both accounts to use the same database?
Next issue is if I use the Mail client wizard under Control Panel to set up access to the exchange server - everything looks fine but when launching outlook I receive the following 2 error messages:
"The resource that you are trying to use is located on an unsupported version of Microsoft Exchange. Contact your e-mail administrator for assistance."
"Cannot start Microsoft Outlook. Cannot open the Outlook window. The set of folders cannot be opened. Your Microsoft Exchange administrator has blocked the version of Outlook that your are using. Contact your administrator for assistance."
Obviously the optimal solution is to upgrade the Exchange Server - assuming that is not an option - are there any workarounds?
Any assistance would be appreciated.

Downgraded to Office 2007.
So now have a new Windows 8.1 laptop with outlook 2007 installed.
From what I have been told this should allow me to connect to the Exchange2003 server
I set up the pop account - works fine
set up the exchange account through Mail.exe and am unable to launch outlook.
"Microsoft Exchange is Unavailable"
"Retry - Work Offline - Cancel"
Then
"Cannot start Microsoft Office Outlook. Cannot open the Outlook Window. The set of folders cannot be opened. The information store could not be opened."
The data file path is the same for both the pop account and the exchange account:
C:\Users\Scott\app data\local\microsoft\outlook\outlook.pst
How do I get this to work?
Help!

How do I allow two account users to access pSE6 on their own accounts?

how do I set up PSE 6 to allow two account users on one computer to access pSE6 on their own accounts?

They can't share a catalog stored on the main hard drive, if that's what you want to do, but to just use the program separately, log in to the other user account, open PSE, and if PSE wants to register itself again, let it.

How do I allow parental controlled users to access third party apps on the admin account?

I just set my son up with a separate parental controlled user account and he can't seem to access some third party games that we installed for him under my admin account. He has saved progress on these games that we don't want to lose, so I don't want to reinstall them. I checked them off as allowed apps, but when he tries to play- the game icon shows up in the doc then changes to the updater icon and they won't run. I've searched for answers to this question, but can't seem to find any. Please help? My son and I would be very grateful!

jeremiahfromva wrote:
Mavericks (isn't that an old Ford model?
Sure was! They used it on 4 different models. But that was Maverick, as in horse. This will be Mavericks as in ocean waves.

How to Configure the Datasource In JNDI and access it through Java Code

I have declared under web.xml
<resource-ref>
      <res-ref-name>MSDataSource</res-ref-name>
      <res-type>javax.sql.DataSource</res-type>
      <res-auth>Container</res-auth>
      <res-sharing-scope>Shareable</res-sharing-scope>
</resource-ref>
Under Jrun-resource.xml
<data-source>
            <dbname>xxxxxxx</dbname>
            <driver>macromedia.jdbc.sqlserver.SQLServerDriver</driver>
            <url>jdbc:macromedia:sqlserver://xxx.xxx.xx.xx:1433;databaseName=xxxxxxx</url>
            <username>xxxxxxxx</username>
            <password>xxxxxxxxx</password>
            <encrypted>false</encrypted>
            <encryption-class>jrun.security.JRunCrypterForTwofish</encryption-class>
            <native-results>true</native-results>
            <remove-on-exceptions>true</remove-on-exceptions>
            <pool-statements>false</pool-statements>
            <initial-connections>1</initial-connections>
            <connection-timeout>1200</connection-timeout>
            <transaction-timeout>20</transaction-timeout>
            <cache-enabled>false</cache-enabled>
            <cache-size>5</cache-size>
            <cache-refresh-interval>30</cache-refresh-interval>
            <jndi-name>MSDataSource</jndi-name>
            <poolname>Pool</poolname>
            <minimum-size>0</minimum-size>
            <maximum-size>2147483647</maximum-size>
            <user-timeout>20</user-timeout>
            <skimmer-frequency>420</skimmer-frequency>
            <shrink-by>5</shrink-by>
            <maximum-soft>true</maximum-soft>
            <debugging>false</debugging>
            <disable-pooling>false</disable-pooling>
            <isolation-level>READ_UNCOMMITTED</isolation-level>
            <description/>
     </data-source>
Under jrun-web.xml
<resource-ref>
      <res-ref-name>MSDataSource</res-ref-name>
      <jndi-name>MSDataSource</jndi-name>
</resource-ref>
Java Code
String dsndb="java:comp/env/MSDataSource";
Properties p = new Properties();
p.put(Context.INITIAL_CONTEXT_FACTORY,"jrun.naming.JRunContextFactory");
p.put(Context.PROVIDER_URL, "localhost:2932");
InitialContext context=new InitialContext(p);
System.out.println(context.getEnvironment());
DataSource ds=(DataSource)context.lookup(dsndb);
ds.getConnection();
System.out.println(ds.getConnection().toString());
Error is
{java.naming.provider.url=localhost:2932, java.naming.factory.initial=jrun.naming.JRunContextFactory}
Exception in thread "main" javax.naming.NameNotFoundException: No such binding: MSDataSource
    at jrun.naming.ContextManager.getBinding(ContextManager.java:680)
    at jrun.naming.ContextManager.getBinding(ContextManager.java:686)
    at jrun.naming.ContextManager.getObject(ContextManager.java:690)
    at jrun.naming.ContextManager.lookup(ContextManager.java:463)
    at jrun.naming.JRunNamingContext.lookup(JRunNamingContext.java:501)
    at jrun.naming.JRunNamingContext.lookup(JRunNamingContext.java:644)
    at jrun.naming.JRunNamingContext.lookup(JRunNamingContext.java:470)
    at javax.naming.InitialContext.lookup(Unknown Source)
    at Controller.DBManager.getConnection(DBManager.java:29)
    at Controller.DBManager.main(DBManager.java:42)
Please help me .
Thanks in advance

Also, try to log the username/password in your authenticator, just to be sure that credentials changeGood piece of advice, michael. Worth of it. When I changed the credentials manually, it worked correctly,but from the application, when I logout from 'a', 'a' and log in to 'b', 'b', I got a valuable information.
I tried debugging like given below for checking from the application.
class MyAuthenticator extends Authenticator {
    protected PasswordAuthentication getPasswordAuthentication() {
         System.out.println("userrrrrrrrr"+UtilsHTTPS.username);
         System.out.println("pwdddddddddd"+UtilsHTTPS.password);
.........................................The information I got while debugging from the application was, the username and password does not get printed. It implies that, Authenticator.setDefault(new MyAuthenticator()); does not work as desired ie; even on calling new MyAuthenticator(), it does not get inside the MyAuthenticator class.
Why does this happen? What is the solution for this?

OBIEE Security - How to setup SSO-integrated EBS users & mobile access?

I'm looking for the best approach to solution my company's OBIEE Security requirements, they are:
1) Create a standard authentication/security process at an enterprise level
2) Maintain EBS Roles to provide object-level and data-level security in OBIEE
3) EBS Users must go through the EBS portal to get to OBIEE (ie. single signon integration)
4) non-EBS users must go through the OBIEE portal
5) Both EBS and non-EBS users need ability to use the OBIEE iPad mobile application
So for the EBS users, I've implemented the SSO integration between OBIEE 11.1.1.5.0 and EBS R11 based on the Oracle white paper [ID 1343143.1]. I've also set up an Authorization session init block to read the user's EBS Roles and set up object/data level security.
For the non-EBS users, I've kept the default identity store (WLS-LDAP) and authentication provider.
My question is what's the best approach for providing mobile access to the EBS users? Obviously I can't pass an HTML cookie to the iPad for these guys. Assuming these EBS users are in an corporate-LDAP store, I was thinking to setup a dual authentication store that connects to both corporate-ldap(EBS) and the WLS-integrated LDAP(non-EBS).
Will this work? Does anyone have a better approach they'd like to share?

Please post the details of the application release, database version and OS.
We have a customer, who has upgraded to EBS R12 recently. With EBS R12 there comes a responsibility that enables users to directly open embedded BI in EBS. When people do LDAP authentication to EBS, they can directly open the OBIEE inside the EBS. But, when the EBS is SSO (OAM+WNA) integrated, OBIEE SSO in EBS does not work. What is the error?
It could be related that OAM generated cookies are not recognized by embedded OBIEE.
Is there a way to do a setup with both OAM SSO enabled to EBS, and EBS-OBIEE SSO is enabled inside EBS ? I do not think there is a single document that covers all the above (I believe you are aware of the individual docs).
For urgent issue, please always log a SR.
Thanks,
Hussein

How to add bookmark button for user to access application

I would like to add a button that will be an 'ADD BOOKMARK' concept for the user so that they don't try to save the url that is generated at the time they run the application.
I am using Apex 4.0.
Is anyone familiar with this concept?
I see it a lot on the internet with other websites.
Thanks,
Maggie

This post is made for the future Apex users that need this info.
I discovered a fantastic website that helped me generate the code needed for my apex page to add a bookmark link. This website is:
http://www.webmaster-affiliates.net/bookmark-site_doit.php
This was my code used (be sure to replace the curly brackets with a pointed less than/greater than bracket):
{div align=right}{a href="javascript:window.external.AddFavorite('http://your.url.goes.here:7780/pls/apex/f?p=Graphics_Status', 'Graphics Status')"}Bookmark Site{a}{div}
I created a page region and put the above code in the source field. Worked fantastic.
Maggie
Edited by: mjhamilton on Sep 2, 2010 7:59 AM

HOW TO CONFIGURE MANAGER or APPROVER USER IN ACCESS REQUEST MANAGEMENT TO APPROVE OR REJECT REQUEST

Similar Messages

Maybe you are looking for