Making request in CUP

Hi !
We have our workflow currently designed for Aproving Access, but when somebody create a request for New User I don`t want they have to choose any role but it`s seem to be mandatory if the request type is New_Account. ( I try to take off the action Assign_roles but nothing happen)
I don`t want the requesters or managers to select roles. I just want they ask for a role or a tcode in the Request Reason and Security Admins ultimately choose the role at their stage.
Can you help me?
Thanks a lot!

Hi Karen,
CUP is designed to have a "Role" while creating a request. CUP cannot creat request without having a "Role" assigned.
If you want this functionality, please open an enhancement request following the note below.
Note # 1083615 - GRC Access Control Enhancement Process.
Best Regards,
Sirish Gullapalli.

Similar Messages

Unable to create a request in CUP

Hi All,
We are unable to create a request in CUP 5.3.We have created the "Number Range" and it is activated. Workflow path is looking fine.
The strange thing is I am not getting any error message after submitting the request.
Please let me know the possible causes of this.
Regards,
Rakesh Narne

Rakesh,
What message do you get? There has to be some message. If you are not receiving any message then you might not have uploaded the .xml files into CUP. CUP comes with some initial data in the form of xml files and you need to import these files into CUP before using the tool.
Without error message or some kind of long information, we won't be able to help you.
Regards,
Alpesh

Error in RAR while approving request from CUP

Dear GRC Gurus,
I am getting error while approving request in CUP for RAR. Checked the related threads for this issue but still not getting any solution.
Connectors are working fine. Also web service URL is maintained correctly and password for the same is working fine in backend.
Error message is
Risk analysis failed: Exception in getting the results from the web service : Service call exception; nested exception is: java.rmi.RemoteException:
Pl help.
Regards,
Muskaan

Hi ,
You need to clarify what you are trying to do, type of request, timeout time, moment it fails...
If you are referring to the RAR SOD web-service call from CUP, the timeout defined may be too short, problems on the web service/backend connectors configuration or performance/resources available. I advise you to see the SAP Notes below.
Troubleshoot issues with risk analysis, see the SAP Notes 1136379, 1049058, 1145700, 1234807, 1085586, 1061088, 1003239, and 1166368.
This is the most common issue between CUP and RAR when running the SOD analysis, and some times the only solution is to improve the performance of the server with more memory/processor.
Regards,
N

Error creating a request in CUP

Hi Experts,
I am trying to create a request in CUP. I get the error "Error creating a request". My initiator is setup correctly and I am pretty sure the conditions meets. The error message doesn't give any specific details.
Could any one please help me out on analyzing this message!
Thanks!
CP

Hi Sunny,
I get the below error in the log file.
] ERROR Exception during EJB call, Ignoring and trying Webservice Call
com.virsa.ae.service.ServiceException: Exception in getting the results from the EJB service : com/virsa/cc/xsys/webservices/dto/WSRAInputParamDTO
     at java.lang.Throwable.<init>(Throwable.java:216)
     at java.lang.Exception.<init>(Exception.java:59)
     at com.virsa.ae.core.AEException.<init>(AEException.java:49)
     at com.virsa.ae.service.ServiceException.<init>(ServiceException.java:45)
     at com.virsa.ae.service.sap.RiskAnalysisEJB53DAO.getViolations(RiskAnalysisEJB53DAO.java:294)
     at com.virsa.ae.service.sap.RiskAnalysisEJB53DAO.getViolations(RiskAnalysisEJB53DAO.java:418)
     at com.virsa.ae.service.sap.RiskAnalysisEJB53DAO.determineRisks(RiskAnalysisEJB53DAO.java:526)
     at com.virsa.ae.service.sap.RiskAnalysis53DAO.determineRisks(RiskAnalysis53DAO.java:103)
     at com.virsa.ae.accessrequests.bo.RiskAnalysisBO.findViolations(RiskAnalysisBO.java:182)
     at com.virsa.ae.accessrequests.bo.RiskAnalysisBO.findViolations(RiskAnalysisBO.java:80)
     at com.virsa.ae.accessrequests.bo.RequestBO.saveRiskAnalysis(RequestBO.java:3984)
     at com.virsa.ae.accessrequests.bo.RequestBO.saveNewRequest(RequestBO.java:369)
     at com.virsa.ae.accessrequests.actions.CreateRequestAction.createRequest(CreateRequestAction.java:325)
     at com.virsa.ae.accessrequests.actions.EUCreateRequestAction.createRequestHandler(EUCreateRequestAction.java:126)
Also, if I try to do a risk analysis I get an error message that system is not found. Any Ideas?
Thanks!
Chinmaya

Error creating request on CUP

Dear All,
I am trying to create a new account request on CUP and I am getting the message "Error creating request", without any other help or info.
I checked the log and that's what I got:
Unknown Errorcom.virsa.cc.comp.wdp.IPublicBackendAccessInterface$IAuthForUserInputElement.wdGetObject(IPublicBackendAccessInterface.java)
com.sap.tc.webdynpro.progmodel.context.NodeElement.getAttributeAsText(NodeElement.java:888)
com.virsa.cc.comp.BackendAccessInterface.execBAPI(BackendAccessInter... [see details]
And the details are:
Unknown Errorcom.virsa.cc.comp.wdp.IPublicBackendAccessInterface$IAuthForUserInputElement.wdGetObject(IPublicBackendAccessInterface.java)
com.sap.tc.webdynpro.progmodel.context.NodeElement.getAttributeAsText(NodeElement.java:888)
com.virsa.cc.comp.BackendAccessInterface.execBAPI(BackendAccessInterface.java:401)
com.virsa.cc.comp.BackendAccessInterface.executeBAPI(BackendAccessInterface.java:302)
com.virsa.cc.comp.wdp.InternalBackendAccessInterface.executeBAPI(InternalBackendAccessInterface.java:4227)
com.virsa.cc.comp.BackendAccessInterface.getObjPermAuth(BackendAccessInterface.java:623)
com.virsa.cc.comp.wdp.InternalBackendAccessInterface.getObjPermAuth(InternalBackendAccessInterface.java:4271)
com.virsa.cc.comp.wdp.InternalBackendAccessInterface$External.getObjPermAuth(InternalBackendAccessInterface.java:4740)
com.virsa.cc.dataextractor.bo.DataExtractorSAP.getObjPermissions(DataExtractorSAP.java:307)
com.virsa.cc.dataextractor.bo.DataExtractorSAP.getObjPermissions(DataExtractorSAP.java:263)
com.virsa.cc.xsys.meng.MatchingEngine.getObjPermissions(MatchingEngine.java:987)
com.virsa.cc.xsys.meng.MatchingEngine.matchPrmRisks(MatchingEngine.java:466)
com.virsa.cc.xsys.riskanalysis.AnalysisEngine.performActPermAnalysis(AnalysisEngine.java:1536)
com.virsa.cc.xsys.riskanalysis.AnalysisEngine.riskAnalysis(AnalysisEngine.java:315)
com.virsa.cc.xsys.riskanalysis.AnalysisEngine.riskAnalysis(AnalysisEngine.java:244)
com.virsa.cc.xsys.bg.BgJob.runJob(BgJob.java:566)
com.virsa.cc.xsys.bg.BgJob.run(BgJob.java:362)
com.virsa.cc.xsys.riskanalysis.AnalysisDaemonBgJob.scheduleJob(AnalysisDaemonBgJob.java:334)
com.virsa.cc.xsys.riskanalysis.AnalysisDaemonBgJob.start(AnalysisDaemonBgJob.java:86)
com.virsa.cc.comp.BgJobInvokerView.wdDoModifyView(BgJobInvokerView.java:444)
com.virsa.cc.comp.wdp.InternalBgJobInvokerView.wdDoModifyView(InternalBgJobInvokerView.java:1236)
com.sap.tc.webdynpro.progmodel.generation.DelegatingView.doModifyView(DelegatingView.java:78)
com.sap.tc.webdynpro.progmodel.view.View.modifyView(View.java:337)
com.sap.tc.webdynpro.clientserver.cal.ClientComponent.doModifyView(ClientComponent.java:481)
com.sap.tc.webdynpro.clientserver.window.WindowPhaseModel.doModifyView(WindowPhaseModel.java:551)
com.sap.tc.webdynpro.clientserver.window.WindowPhaseModel.processRequest(WindowPhaseModel.java:148)
com.sap.tc.webdynpro.clientserver.window.WebDynproWindow.processRequest(WebDynproWindow.java:335)
com.sap.tc.webdynpro.clientserver.cal.AbstractClient.executeTasks(AbstractClient.java:143)
com.sap.tc.webdynpro.clientserver.session.ApplicationSession.doProcessing(ApplicationSession.java:333)
com.sap.tc.webdynpro.clientserver.session.ClientSession.doApplicationProcessingStandalone(ClientSession.java:741)
com.sap.tc.webdynpro.clientserver.session.ClientSession.doApplicationProcessing(ClientSession.java:694)
com.sap.tc.webdynpro.clientserver.session.ClientSession.doProcessing(ClientSession.java:253)
com.sap.tc.webdynpro.clientserver.session.RequestManager.doProcessing(RequestManager.java:149)
com.sap.tc.webdynpro.serverimpl.defaultimpl.DispatcherServlet.doContent(DispatcherServlet.java:62)
com.sap.tc.webdynpro.serverimpl.defaultimpl.DispatcherServlet.doGet(DispatcherServlet.java:46)
javax.servlet.http.HttpServlet.service(HttpServlet.java:740)
javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:401)
com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:266)
com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:386)
com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:364)
com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:1039)
com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:265)
com.sap.engine.services.httpserver.server.Client.handle(Client.java:95)
com.sap.engine.services.httpserver.server.Processor.request(Processor.java:175)
com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:33)
com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)
com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)
java.security.AccessController.doPrivileged(Native Method)
com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:104)
com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:176)
Could you guys help me out on identifying the problem?
Thks!

Hello Rodrigo,
While you are getting error in CUP, the logs it seems like states problem with risk analysis. Did you check if you have Configuration parameter "Perform Risk Analysis on Request Submission" Set to YES in CUP? Kindly check this. If this is set to YES, change it to NO and then try to submit request in CUP. This should clear up situation a little.
This parameter is at CUP configuration -> Risk Analysis.
Regards, Varun

Error in Provisioning Risk Update Request in CUP

Dear Experts,
I have configured all the required settings to configure Risk create/Update and change workflow in CUP.
I am even successfully generate the requests type Create Risk in CUP from RAR.But , not able to generate request type update risk from same path and recieving error provisioning request at stage -
Please provide any clue to resolve this issue.I am in SP12
Thanks,
Mukesh

Please find..
I am trying to remove a function from the below risk ID in RAR.
getting this error when approving in CUP.
2011-04-19 09:15:29,943 [SAPEngine_Application_Thread[impl:3]_74] ERROR com.virsa.ae.accessrequests.bo.RequestExitServiceHelper : callExitService() :   : Exception in calling the exit service, error code : -1, error message : ERROR: Risk: B001 has exceeded the maximum number of rules (46,655) that can be generated for a risk
2011-04-19 09:15:29,946 [SAPEngine_Application_Thread[impl:3]_74] DEBUG com.virsa.ae.accessrequests.bo.RequestBO : updateRolesForProvision() :   : INTO the method for reqno : 1116
2011-04-19 09:15:29,946 [SAPEngine_Application_Thread[impl:3]_74] DEBUG com.virsa.ae.accessrequests.bo.RequestBO : updateRequestApplicationForProvisionStatus() :   : INTO the method for reqno : 1116
2011-04-19 09:15:29,946 [SAPEngine_Application_Thread[impl:3]_74] DEBUG com.virsa.ae.accessrequests.bo.RequestBO : updateRequestApplicationForProvisionStatus() :   : listApplicationDTOs : []
2011-04-19 09:15:29,946 [SAPEngine_Application_Thread[impl:3]_74] DEBUG com.virsa.ae.accessrequests.bo.RequestBO : insertRequestApplicationForProvisionStatus() :   : INTO the method for reqno : 1116
2011-04-19 09:15:29,948 [SAPEngine_Application_Thread[impl:3]_74] ERROR Exception in calling the exit service, error code : -1, error message : ERROR: Risk: B001 has exceeded the maximum number of rules (46,655) that can be generated for a risk
com.virsa.ae.service.ServiceException: Exception in calling the exit service, error code : -1, error message : ERROR: Risk: B001 has exceeded the maximum number of rules (46,655) that can be generated for a risk
     at com.virsa.ae.accessrequests.bo.RequestExitServiceHelper.callCCExitService(RequestExitServiceHelper.java:277)
Thanks,
Mukesh

ERM Role con't be deleted Automatically after rejecting the request in CUP

Hi Experts,
I am involving the GRC implimentation project and ERM component is succefully configured with post-installation activites and also configure the workflow(1-stage) in CUP for role approval.
After initiating request, the request was sent to appropriate approver for approval process and approved/ Rejected by the approver.For first case(Request approved) everything is looks fine.
but whenever the request is rejected (second case) by the approver, the role is still present in ERM and ABAP backend as well as.
please suggest me, if the role is deleted in ABAP/ERM system after rejecting the request by Role Approver in CUP. or still present the role in systems.
Regards,
Arjuna.

Hi Jes,
We so have a feature called Password Self Service which is used by users to reset their password using CUP. Also if the password is locked by multiple failed attempt, CUP even activate this user.
However in your case administrator will be locking the user or deactivating the password, so CUP will not allow users to unlock their users as it has been locked by administrator.
So CUP can only unlock those users which were locked due to failed attempts etc.
Regards,
Shweta

User deletion Requests in CUP

Hi Experts,
I have a question regarding CUP 5.3 SP11, I am wondering if you all have had the same scenarios before. We have about 20 systems connected to the CUP. When an employee leaves the company a person in HR usually sends a termination request and they are not usually aware where all does the user exist. When we do a select all for the systems and procede with the request it gives you an error message with the systems in which the user does not exist.
Is there any way to ignore this and process the request to delete the user in the systems in which they exist, so that one does not have to slect the systems manually?
Regards,
Chinmaya

Kumar,
As you know CUP is an ticket creation, user provisioning tool with automated workflow. So CUP will need to bring user details or user information for requestor, approver, manager etc. from some kind of source. This is where data source comes into picture. Whenever you need to search for an user ID, CUP will look at the search data source and whenever CUP needs to bring in user information like name, email, phone etc., CUP will use user details data source.
DO NOT USE JCO IN CUP, ERM AND SPM. You will need to have exactly same connector names in all four modules of AC 5.3 for all of the integration functionality to work. When you use JCo, it will not allow you to change the default name (virsahr_model in your case).
ONE MORE THING, NEVER EVER TOUCH JCo OTHER THAN VIRSAXSR3 EVEN FOR RAR (CC). VIRSAHR AND VIRSAR3 ARE NOT RECOMMENDED TO USE.
I hope this helps.
Regards,
Alpesh

Risk Analysis for 2 open request in CUP

Hi Team,
If in CUP i have 2 open request by same user which individually may not give any Risk but collectively may have some risk assosiated with it how do i address this real time.
(I iunderstand that this risks can be discovered in RAR but i want to address this in CUP itself)
Scenarios:
1]My Manager approves the request No. 1 and before this request is closed by Security he has another request ,request No. 2 by same user.
2]Both the request by same user are pending with Manager.
Is it possible to discover the risks in this 2 open request by Manager or say anyone in the path?.
How should we handle such scenarios?
Is there any way i can set a rule for open request.( The user should not be able to create same request type if he has an open request in this category)
Please suggest.
best regards,
Charukesh

Charukesh,
I have not seen anyone configure risk analysis based upon consolidation of two pending requests.
It would, of course, be possible to perform a manual simulation of the addition of the two roles.
Or, once one is approved, the second would then trigger conflicts if re-run at the point of approval but I don't think that it is possible to configure automated analysis of one request while taking into account the other one which is also still pending.
I would suggest contacting the Customer Advisory Group of SAP to get the confirmed answer to this though.
Simon

Making requests to a cluster

          Hi,
          I'm a bit confused by the General tab in cluster configuration.
          It contains the following fields:-
          - Name
          - Cluster Address
          - Default Load Algorithm
          - Service Age Threshold
          I understand that hostname/IP(s) that map to one or more servers
          in the cluster goes in Cluster Address. But, if that's the case,
          what party is responsible for scheduling requests to servers
          in th cluster, using the algorithm in Default Load Algorithm? And, how does one
          connect to that party and on what port?
          If the answer is that you have to use your own policy (software
          or hardware load balancing) then what is the purpose of
          the Default Load Algorithm field in WLS 6.1?
          You already configure what servers are on the cluster, so WLS
          knows this already. So why does one have to specify the
          IPs again in Cluster Address? Seems to me, and from other
          messages in this forum, that filling out this tab doesn't have
          much benefit at all.
          Thanks in advance,
          Gary
          FT.com


The cluster address is the DNS round-robin address that clients use in their URL to
          establish
          their initial connection. The cluster address is currently only used by WL in two
          limited cases:
          EJB home handles -- These contain info that can be serialized and passed to a
          client
          which currently may not have a connection to the cluster. The client can use
          the handle to find its associated EJB.
          Entity Bean fail-over -- Allows client to automagically get back to the cluster
          if a connection to the cluster fails.
          Tom
          Gary Watson wrote:
          > Hi,
          >
          > I'm a bit confused by the General tab in cluster configuration.
          > It contains the following fields:-
          > - Name
          > - Cluster Address
          > - Default Load Algorithm
          > - Service Age Threshold
          >
          > I understand that hostname/IP(s) that map to one or more servers
          > in the cluster goes in Cluster Address. But, if that's the case,
          > what party is responsible for scheduling requests to servers
          > in th cluster, using the algorithm in Default Load Algorithm? And, how does one
          > connect to that party and on what port?
          >
          > If the answer is that you have to use your own policy (software
          > or hardware load balancing) then what is the purpose of
          > the Default Load Algorithm field in WLS 6.1?
          >
          > You already configure what servers are on the cluster, so WLS
          > knows this already. So why does one have to specify the
          > IPs again in Cluster Address? Seems to me, and from other
          > messages in this forum, that filling out this tab doesn't have
          > much benefit at all.
          >
          > Thanks in advance,
          > Gary
          > FT.com
          > ______________________________________________________________

Making Requester Mandatory in PO Distributions

Hi,
We have a requirement to make the Requester field mandatory in the PO
Distribution screen. I used forms personalization to make the required
property of that field to True.
But, when i create a new PO, PO line and save it, it does not validate the
field in the distributions screen. The field is required ONLY when i
navigate to the screen. Is there a way we can achieve this?
Thanks,
Ashish

Hi... Try this...
1. Please goto SPRO>Material Management>Purchasing>Purchase Order>Define Screen layout at Document level
2. Choose "Me21n" and select "Details"
3. You will be listed with a bunch of "Field Selection Group", double click on them and look for the specifc field label you are lookin for.
4. choose "Reqd.entry" for the field label.
Hope this is helpful
Regards,
kumara

Google crossdomain.xml when making requests

Hi guys,
Does anyone know how to get round the googles cross domain
when trying to access their services like the maps.google.com
geocode?
Every call i make to try and make a LoadVars request works
fine in the flash IDE where it just trys to pull down the
google.com crossdomain, but any calls in a live enviroment just
request the crossdomain from the appropriate service, i.e. the
maps.google.com and then don't make the actual request.
<?xml version="1.0"?>
<!DOCTYPE cross-domain-policy SYSTEM "
http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd">
<cross-domain-policy>
<site-control
permitted-cross-domain-policies="by-content-type" />
</cross-domain-policy>
Any help would be great, otherwise i'll have to proxy the
requests through a php page.

Howdy,
I have done some further investigations and I have so far concluded that:
- in the cases where the service does NOT work, the following is happening:
I watch a video (video 1), then close the window. I start a new window with a new video (video 2). However, despite closing a window and opening a new window, the TCP session for video 1 remains open. So when I start video 2, the crossdomain.xml request is sent on the old TCP session.
Instead of getting an "OK" reply, I simply get an "ACK" reply and the process is halted.
- in the cases where the service does work, the following is happening:
I watch a video (video 1), then close the window. I start a new window with a new video (video 2). For each window, a new TCP session is set up/ synchronised, and the crossdomain.xml request receices an "ACK".
- it seems that the failure scenario happens when there are no files in the cache.
Any ideas of what this could be?

Error creating request when using CUP in GRC 5.3

Hello guru's
when user is trying to create request in CUP , he is facing an error message at top indicating Error Creating Request ,
The error message is " * Exception in getting the results from the web service : Service call exception; nested exception is: java.lang.Exception: Incorrect content-type found 'text/html' * "
can anyone help me how to trace the problem.
thanks and regards,
keerthi

HI all
I am also gettting same error like this..We created CUP Requests one hour before ..But we are not able to create CUP Requests now.. I got below error message in system log.
Risk analysis failed: Exception in getting the results from the web service : Service call exception; nested exception is: com.sap.engine.services.webservices.jaxrpc.exceptions.InvalidResponseCodeException: Invalid Response Code: (401) Unauthorized. The requested URL was:"http://c700u121.com:50000/SAPGRC_CCRiskAnalysis_V01/Config1?wsdl&style=document"
2012-03-08 13:05:25,558 [SAPEngine_Application_Threadimpl:3]_23 ERROR com.virsa.ae.core.BOException: Exception in getting the results from the web service : Service call exception; nested exception is:
com.sap.engine.services.webservices.jaxrpc.exceptions.InvalidResponseCodeException: Invalid Response Code: (401) Unauthorized. The requested URL was:"http://c700u121.com:50000/SAPGRC_CCRiskAnalysis_V01/Config1?wsdl&style=document"
com.virsa.ae.core.BOException: Exception in getting the results from the web service : Service call exception; nested exception is:
com.sap.engine.services.webservices.jaxrpc.exceptions.InvalidResponseCodeException: Invalid Response Code: (401) Unauthorized. The requested URL was:"http://c700u121.com:50000/SAPGRC_CCRiskAnalysis_V01/Config1?wsdl&style=document"
at com.virsa.ae.accessrequests.bo.RiskAnalysisBO.findViolations(RiskAnalysisBO.java:199)
at com.virsa.ae.accessrequests.bo.RiskAnalysisBO.findViolations(RiskAnalysisBO.java:80)
at com.virsa.ae.accessrequests.bo.RequestBO.saveRiskAnalysis(RequestBO.java:4087)
at com.virsa.ae.accessrequests.bo.RequestBO.saveNewRequest(RequestBO.java:408)
at com.virsa.ae.accessrequests.actions.CreateRequestAction.createRequest(CreateRequestAction.java:381)

Block/Restrict access request page on CUP

Hi All,
I've an interesting requirement.
We use a CUP 5.3 SP7. We would be using the IDM webservices to create access requests to CUP and we want all our requests to be initiated ONLY through our IDM solution. Is there a way we can restrict the /AE/index.jsp page access to only the users with a AEAdmin role? (Assuming the Admins follow the rules !!!)
I've succeeded in taking out the Create Request and Copy Request from the AEApprover role mby adjusting the UME actions, but the same user can still access the /AE/index.jsp page to create a request.
Any insight/work around is greatly appreciated.
Thanks & Regards,
Anil

Anil,
You can edit the index_left_nav.jsp page on the GRC server to disable the request access link on the Index page. To achieve this open the index_left_nav.jsp page and comment the whole tr and th lines containing the following words.
LocaleUtil.getLabel(AELabels.LBL_IDX_NAV_REQUESTACCESS
Commenting is done by the following characters .
- Naveen

GRC 5.3: CUP asks to perform risk analysis even when there are no risks in request

Hi All,
We recently upgraded from GRC 5.3 SP13 to SP22.
The one issue which we are facing after upgrade is that now CUP is forcing approvers to do Risk Analysis, even when there are no risks in the CUP Request, that is Risk Tab is Green.
Previously approvers were able to approve requests without doing risk analysis, if there were no risks in the request.
CUP used to force them to do risk analysis only when there were risks associated with requests.
But now, it is forcing approvers to perform risk analysis, even if there are no risks, i.e. approvers are not able to approve requests without any risks without doing risk analysis.
Please advise.
Thanks
Aditi

Hi,
Can you check if any change is made in Configuration -> Workflow -> Stage -> Approvers
Regards,
Claudio

Making request in CUP

Similar Messages

Maybe you are looking for