How to define role approver/owner - through condition id in ERM 10.0

Hi All,
We have created a BRF + rule for Role approver with Business Process & Function area by giving the Result value as Condition ID eg., Z001
We have provided this condition ID Z001 - in Role Owners table [Under Set Up- Role Owners] and defined the role approver and assignment approver with the User details.
Now when we are trying to create a role with the above attribute combination of Business Process & Function area - the role is not picking up the Role Owners automatically in Owners/Approver tab [In 5.3 we can maintain approval criteria where we can define the role owners/approvers based on different attributes].
Are we missing any configuration setting here for auto pick up of Role Owners based on defined attributes from Role Owner table.
Thanks and Best Regards,
Srihari.K

Hello All,
Please help us , I am also struggling with same issue.
Thanks in advance,
Jagat

Similar Messages

How to define roles for the reports that i have created using WAD?

Hi all,
Can anyone let me know how to define roles for the reports generated using WAD. And what is the procedure for creating and defining roles. Is this process take care of Bw consultant nor the basis guys.
Can anyone let me know the entire procedure about the roles in bw 3.5
thanxs
haritha

Following links might helps you
create a role
https://www.sdn.sap.com/irj/sdn/wiki?path=/display/bi/authorizationinSAPNWBI&

How to define Sparse/dense settings through MAXL script ?

Hi,
How to define Sparse/dense settings through MAXL script ?
By default its taking all dimensions as sparse dimension type. I want to define sparse and dense through MAXLand automate everything.
Please help me out or advice me work around.
Thanks,
Rajendra Prasad Gella.

you cannot modify sparse/desne settings directly through MAXL.
The only way you will be able to build/modify/remove dimensions/members through maxl is using rules files.
So if you are building dimensions using rules files, for a new dimension you can specify dimension properties.
in rules file options -> dimension build settings -> dimension definition -> Rules file -> dimensions.
Here you can specify new dimensions and after specifying you can right click and edit properties where you can change various dimension level properties including sparse/dense settings.
And you knw me well (Krishna from Hyd) and so you can call me on my mobile if you need more info.. lol :)
- Krish

ARQ: How to configure Role Approve/Reject Email Notifications???

Hi,
I would like to achieve below for my business scenario with below MSMP stage configurations:
MSMS Stages Configurations:
MANAGER --> Can act on both request and line items level
Role Owner--> Can ONLY act on line items
Requirement
In best case, a Manager approves all the line items in an Access Request. Then an email notification mail for "NEW WORK ITEM" would be sent to Role Owner(s) at next stage. This is achieved.
Now at Role Owner Stage, below 3 cases are possible:
1. All Role Owners can approve the line items
2. All Role Owners can reject the line items
3. Some of the Role Owners approve and Some of them reject line items
In all the above cases, a Role Owner ALWAYS click on "SUBMIT" button (as he is not authorized to reject a request as a whole) and this action is considered to be as "APPROVED" and eventually, "APPROVED" event is triggered.
This looks good in case numbers: 1 & 3. Meaning, even a single role is approved, request can be considered as approved and the request details can be sent to business user.
However, I am facing a problem when ALL the line items are rejected by ALL the Role Owners!
This will surely close the request. However, the email notification that will be sent to user in this case will be of "APPROVED" though the request is rejected in a sense (because all the roles are rejected)!
Can anybody please he understand this and design proper solution?
Regards,
Faisal

Hi Faisal,
We are on GRC SP13.
Please do below settings to make role approval/rejection comments mandatory.
2040 - Set this parameter value as YES
In MSMP - Role Owner - Stage settings - Please maintain these settings
I have come across the same scenario as yours. Below is my observation.
When all role owners rejects all roles by REJECTING roles at LINEITEM level, request instead of getting closed at ROLE OWNER stage, it is going to next stage and getting closed there. I assume this is standard behaviour
Let's see if we can get experts advise on this.
Regards,
Madhu.

How to Handle Blank Field Value based Condition in SmartForms

Dear Sir,
In SMARTFORM , we need to define a Condition that incase Field Value is not equal to BLANK value (blank means that field is empty) then a specific text gets printed .
Our problem is that We do not know as how to define Empty Field Value based condition .
Had it been Non Empty Field value based condition then solution was simple and could be done in following way :
Field Value                        R                     Comparision Value
WA_KZDKZ                      =                      'X'
In our case , we need to give Blank (Empty Value) instead of 'X' .
Kindly help us pl .
Rgds
B Mittal

Hi,
To handle blank field values in SMARTFORMS,
Go to the conditions tab in your SMARTFORM and give condition there
Field                Comparision operator          value
<Field name>      <> Here symbol is diff     space.
eg:
wa_mara-matnr    =/                                   space.
Regards,
Santosh Kumar M.

How to define an owner for an organization/department/cost center

Hello Friends,
I have a requirement in which i need to route requisition approval to the cost center(fetched from the charge account) owner.
I am trying to find a standard way to achieve this. Is there any standard feature available to establish this relationship.
Any ideas?
Version : 11.5.10.2
Thanks for your help !
Regards,
Amit

Assuming that one person typically raises requisition for one cost center only, you can try the following approach.
You can define a position for each cost center manager.
Then you have do define one approval group for each cost center.
When defining the approval group, you have to use the a/c range such as
000-000-403-000-000 to zzz-zzz-403-zzz-zzz.
where 403 is the dept. number.
Then you have to assign the approval group to the right position.
Then you define your hierarchy (either purchasing or employee-supervisor) where each employee reports to his appropriate department manager.
This way, when an employee raises a requisition, it will go to his boss and his boss will have the authority to approve the requisition only if the requisition is for his department. If not, the requisition will go to boss's boss.
If your requirement is that one person may raise requisitions for different Dept. and they should get routed properly. I believe you will have to go for AME.
Hope this helps,
Sandeep Gandhi

How to define user roles

I am ready to deploy the form, but I want to define user roles. How do I do that?

You can't defines roles for the fillers. You can however define roles for the form design, responses data and summary reports by sharing the form. For more information see http://forums.adobe.com/docs/DOC-2462.
Gen

How to define Approval Hirearchy for Fixed Assets?

Hello All,
Couls someone please tell me How to define Approval Hirearchy for Fixed Assets which should be different as compared to normal item purchase.Reply me ASAP
Regards
Aditya

Hi,
The AP invoice approval used AME rules for finding the approver. You can base you AME rules on virutally anything.
In this particular case, you can base your AME rules on one of the followings:
1. If any of the Distribution Accounts contain Fixed Assets natural account
2. You can define a separate document category which should be used with invoices for FA Purchase and use the category in AME rules to find approver
3. You can have a DFF at the Invoice Header level to indicate that this is a fixed asset purchase invoice and have this DFF to be used in AME rules.
Gajendra

How to define the detail "Condition" item for sales order?

Hi, I checked the condition information of a sales order, the following contents were displayed:
PR00     Price     230.00
     Gross Value     230.00
     Discount Amount     0.00
     Net Value for Item     230.00
     Net Value 2     230.00
     Net Price     230.00
I can understand that the price 230.00 can be maintained via tcode: vk11, what I want to know is:
How to define/control the following items such as:
Gross Value     230.00
Discount Amount     0.00
Net Value for Item     230.00
Net Value 2     230.00
Net Price     230.00
and how to control their currency?
Thanks.

Hi, Dear Ferry Lianto,
Thank you very much.
Commonly I know the total pricing procedures.
But, would you please tell me how to control the CURRENCY for the subitem of a condition type as follows?
For example, I can see the following kind of
contents in the Tab:condition of a sales order:
PR00     Price     130.00000      TEST     100
     Gross Value     20.12      USD     100 <-how to
     Discount Amount     0.00      USD     100
     Rebate Basis     20.12      USD     100
     Net Value for Item     20.12      USD     100
     Net Value 2     20.12      USD     100
     Net Value 3     20.12      USD     100
VPRS     Cost     27.22      HKD
     Profit Margin     16.61      USD
The currency of PR00:price can be controlled via tcode VK12; but how to control the currency of its subitem such as gross value, discount amountm, net value for item, net value 2, & net calue 3...
Thanks and regards.

AE-How can we restrict a role approver to request or approve is own access?

Currently, in our AE a role approver can submit a request to add a role for which he is the approver and therefore he will be able to approve it as well.
We would like to not authorize someone to approve his own access request.
Is that possible and how ?

Patrick-
That enhancement is available in Access Control (CUP, formerly AE) 5.3. It is not available in 5.2.
Ankur

AC10: Define role approvers based on system?

Hi,
we have a ERP landscape consisting of Dev, Test and Prod system.
They all have the same roles, so we uploaded the roles into GRC10 to a landscape of those 3 ERP systems including role approver.
However, we would like to provisioning to all 3 systems from GRC, but only for Prod there should be a role approver.
Due to the same role naming:
How can we differentiate that role A in system Dev and Test goes through without approver and in Prod has an approver. Is there a simple way to do this?
We do not want to set up a different workflow for this.
Thanks,
Daniela

Hi Anjan
I'm very confuse with the creation of BRF+ rule and the MSMP rule.
First, I created a BRF+ rule. With a table decision, but i dont know how to select the "result colum" as "Role Appover or role owner". I selected the result colum with conditioning group, using the Conditing Group ID in Role owner definition in NWBC/Setup
Then in MSMP i tried to created a rule in the step two with error: "Select a valid rule id".
could you help me with this dubt. Or maybe you can share with me material about role approvers and brf+ and MSMP.
Thank you in advanced!!

SOD Detour in Role Approval Workflow possible?

Hello GRC Experts,
we have implemented an Access Request Approval Workflow with a Detour Rule (GRAC_MSMP_DETOUR_SODVIOL).
The second workflow we are working at is the Role Approval Workflow. Is it possible to use the SOD Detour Rule also in Role Approval Workflow? I didnt find the SOD Detour Rule in the MSMP Role Approval Workflow.
We would like to implement a following Scenario:
if the role contains an SOD the request should take Path 1 and if not Path 2.
Is it in MSMP Standard possible or should we use BRF+ for creating a Detour Rule?
Thanks,
Best Regards
Sabrina

Hi Sabrina,
For Access Request workflow, we generally use GRAC_MSMP_DETOUR_SODVIOL to implement routing rule(based on detour condition - risk found). Purpose of same (if I am not mistaken) is to through the request to another level of approver wherein mitigation monitor agent reviews the mitigation performed by role owner stage and approve/reject the request.
But, when we create a role same is not the condition as we do not mitigate role level risk thus no need to go for mitigation monitor stage. May be you have some business scenario, if you can let us know will be gr8.
For the rule ID, did you try adding the rule ID ?(you may already know, still would like to cross check with you).
GRAC_MSMP_DETOUR_SODVIOL under list of rules for "
Role Approval Workflow" In the screenshot you have shown, just click on ADD feed -
Rule ID -GRAC_MSMP_DETOUR_SODVIOL.
Rule description - same as Access request.
Rule type - Function module based
rule kind - routing rule.
Add this and check if it works and let us know the result too.
Regards,
Nishant

AE 5.2 - Detour Workflows - One of the Role Approver not found

Hi All,
My question is regarding using the Detour workflow functionality for the situation below - pls let me know if this possible or if any alternates are available.
- Main path has 2 stages (1) manager approver, (2) Role Approver.
If the Requestor asks for a Role that Does not have a Role Approver we would like to route this request to the Security lead.
- I have created a Detour Path with 1 stages - Secuity lead and associated with Stage 2 (Role approver) of the Main path based on the condition "No Role Owners"
- I still get the error "Approver not found at Stage @@@@"
Is the condition "No Role Owner" in the Detour workflow config for "Role Expert" workflows or for Access requests?
Is it possible to route the Request to Security if the Role being requested does not have a Role Approver? IF yes How?
thanks
T

Hi,
sometimes in the Detour configuration you have the problem that the "Save" action is not saved properly.
If this entry is empty, please go into edit mode and save the detour config again, so that the action will actually display "Save".
Hopefully it works, then.
Regards,
Daniela

Role approver - automatical approver

Hi,
We are testing IDM in our organization and we have following scenario. Managers of department are defined as role approvers. For example manager of operative is defined as role approver for role RW_access_operative. As manager of department is also responsible for adding this role to users in his department. Is it possible to setup IDM this way: If manager add role to the user and he is also role approver (and he is only one approver) the IDM will automatically approve this role assignment for it. As managers are complain that they must assign role and then approve it :-( which is time consuming ...
Thanks for answer

In your workflow, add a condition where you generate the approvers list.
1. Read all the approvers for the role selected.(May be a configuration)
2. If the above list contains only 1 approver = WF owner (Who initiated the workflow), set the list to null and set the variable to approved or true, (so that the rest of the workflow will proceed as if the request is approved).
3. If the list from #1 has more than 1 approver id, remove the case owner id from the list and generate the approval workitem for the rest of the approvers.
Thanks,

Role Approval request not visible in Role Approvers ToDo tab

Hi IDM Experts,
We have implemented IDM 7.2 SP8 in our project. We have performed the basic configuration for Identity center and IDM UI. The initial load from CRM is also completed successfully.
We followed the steps in guide https://scn.sap.com/docs/DOC-26322 to configure workflow such that in case role is requested to be assigned to user, the request goes to role approver(in his todo tab) for approval. The access will then be provisioned into backend CRM system on successfully
approval. However, we are facing an issue where the Role approver does not get anything in "TODO" tab for approval. The request shows in "Pending" status and logs show that tthe request is pending approval, however, it never appears in role approvers queue.
Kindly help on the issue. Please provide below information:
1) We can check in logs that the request is pending approval. Is there any way we can check where is the request routed to and whoose approval is pending here if it did not goto "Role Approver" for approval.
2) Any trouble shooting mechanism/tool available in IDM to debug issues like this.
Thanks in advance for your help.
Thanks and regards,
Nitin

Hi Nitin,
How do you assign the role to the user? if it's trought IDM UI, you loggin with which user?
There is a limitation on approval with SP08 : the requestor of the assignement can not be define as an approver.... but in this case the approval is automaticaly rejected by the system ...
in which logs / table can you see that your request is "pending for approval" ?
I also would recomand you to use the simple scenario "get approver from role/privs" of as krishna mentioned. (unless you need to do more custum actions)
Besides, you can check approval entries and status in DB views :MXWV_ApprovalQueue ...
Fadoua

How to define role approver/owner - through condition id in ERM 10.0

Similar Messages

Maybe you are looking for