MSMP version
Hello experts,
I have a test GRC system, that all my colleagues come there and make configurations...
Now after 1 year, many configurations are there and they cause error while i'm trying to generate new version of MSMP workflow.
So is there anyway for me to reset/clean the version of MSMP workflow(Access request), or can we reactivate the BC Set to overwrite all the configurations ?
Thanks in advance and best regards.
Dear Toan,
you have following possibilities to manually recreate the configuration:
- Do manual copy of MSMP Workflow Configuration to your target system using transaction GRFNMW_CONFIGURE_WD in target system
- In source system you can use transaction GRFNMW_CONFIGURE - expert mode maintenance view based configuration of MSMP Workflow - to visit and save relevant parts of MSMP configuration to NEW transport request. The transport keys generated by GRFNMW_CONFIGURE are correct. You have to visit every referenced part of your process configuration and save it to the NEW request. Releasing transport request with transport keys generated by transaction GRFNMW_CONFIGURE won't cause any other issues (unless you violate any other limitations - i.e. if you try to modify SAP namespace entries of some configuration tables - aka. E-tables)
Please be aware that the transaction GRFNMW_CONFIGURE is expert mode only transaction and does not have lot of validation checks implemented (opposite to transaction GRFNMW_CONFIGURE_WD which should be primarily used when maintaining MSMP Workflow configuration). Thus using GRFNMW_CONFIGURE to maintain MSMP Approval Workflow configuration requires deep expert knowledge.
This transaction (GRFNMW_CONFIGURE) also allows deleting/modification of SAP-namespace pre-delivered entries which will cause MSMP Workflow to stop functionig properly. In such case fall back solution is to re-activate pre-delivered BC set GRC_MSMP_CONFIGURATION (transaction scpr20, expert mode activation) - this will overwrite MSMP configuration to it's post-delivery state. In some rare cases you can still have problems even after reactivating the BC set. In that case you have to compare the BC set values/entries with real content of the configuration DB tables included in this BC set. If you experience any extra entries in the DB table(s) which are not part of the BC set, you will have to delete them (i.e. programatically).
Hope this helps.
Regards,
Alessandro
Similar Messages
-
Hi All,
We have a situation where one client has already connected to GRC system to one system and configured workflows.
Now we are connecting GRC system to another 3 systems and configuring workflows.
Their configuration is completed. They have their MSMP version created with all their configurations. Now i have added few entries in the initiatoras required for newly connected systems and setup workflows required and created new MSMP version and added it to the transport request.
Does the new version I added to transport request contains only the updated entries by me or all the data.
My query is, If i transport my changes to from DEV to STG, only changes done by me will be transported to STG or all the data including things done by other client also will be in my transport request?
I assume that new version will have all the data including updated things as well as old things. So I assume that all data will be transported to next landscape.
I assume this would be the same case with BRF+ initiator i modified.
Is my understanding correct?
We are in a situation where, If other client has some more changes to be done and they come into DEV environment and made some changes and only their data needs to be moved to PRD without the changes added by us. Is this possible?
We are confused about transport requests concerning BRF+ and MSMP workflows
Someone please advise on how to handle our situation.
BR,
Sai.HI Sai
Have you tried putting the version into a transport and then go to SE01 to have a look at the contents. You know if the transport is the entire scope or just you changes (e.g. if table with asterisk is mentioned then it is being completely transport)
Assuming all MSMP changes originate from DEV and proper change control is in place you should ot have an issue on transporting someone elses - unless you mean that two people are maintaining MSMP at the same time and one person is not yet ready to release their change. The "unless" would depend on looking at the transport contents (possible, it limits to the Process Id and related configuration).
For BRF+, as this generates an SE37 function module, I would assume that the entire function is transport. Again you would need to look at the transport content. You would also search bpm community.
Regards
Colleen -
Error while creating stages & Generating a version for MSMP Workflow
Hello Everyone,
I am facing the below error while trying to create stages pertaining to the Z_PATH_2 defined by me.
I have entered the path ID and description , then pressed enter. Thereafter, I am clicking on the Z_PATH_2 row, and click on ADD in Stages section.
Still it gives me below error.
Also, the second screenshot shows the errors I get while saving and simulating the path. Since I was unable to define Z_PATH_2 stages, I considered GRAC_Default path.
Kindly help in this. I am sure I am missing something .
Screenshot 1:
Screenshot 2:
Thanks much in advance,
Regards,
ShrutiHi Shruti
What changes beyond MSMP custom path Z_PATH_2 have you done in the MSMP?
ERROR LOG
Database Table GRFNMWCDAGNT - record not found (key: SAP_GRAC_AR/MANAGER)
Checking defintion of Agent 'Manager (Process Type SAP_GRAC_AR/Manager)
AGent ID 'MANAGER' is not requested for purpose 'Approval', 'agent purpose ='
Can you also have a look at your agent configuration for MANAGER as I suspect have it set for notification. If you are using the agent for both approval and notification then you must have two agents with the same rule.
I recommend you delete the Z_PATH_2 and generate MSMP to ensure all other errors are fixed. Exit out completed to refresh buffers and then re-launch MSMP. Try to add the Z_PATH_2 again
You can also execute MSMP in SAPGUI power mode via transaction GRFNMW_CONFIGURE to check the table configuration. Be careful what you maintain here, however, sometimes you need to come in here and fix values before switching back to MSMP screen to fix issues.
Regards
Colleen -
Error when generate a new version for MSMP Process ID
Helly guys, again,
I have created a new custom workflow.
When I am trying to test the new workflow i have some errors: Incorect path and stage entry for process XXX.
Can you help me?
Thank you,
OvidiuHi,
I checked :
1) I have rules generated for my process id.
2) Route mapping
3)
4) Agent ID
Did I forgot something? When I try to generate my process, I have the same error(described before in my first post).
Can you please help me? I am a "poor" developer with no "coaching help" in customizing the MSMP workflow -
Hello Experts,
We are just trying to configure the basic components of Access Control on AC 10.
We have configured PSS and when we are trying to configure workflow for access requests we are running into issues.
I Just wanted to check what I configured makes sense.
We only need basic functionality.
1.User Lock,Unlock ---Where the only Approver is Manager ( We have configured LDAP so the system picks up manager details for the user)
2.Next is Validity Extension where we don't want any stage but the users can change their validity date just by submitting request and request is auto approved (Auto Provisioning has been configured)
3.We need Change Acct(For Adding of new roles)
4.We need New Acct(For creating new acct and also adding roles in same step)
I see that the major difference w.r.t. 5.3 to 10 is that in 5.3 we have different kind of Request types and we can have different initiators but in 10 we have a process id (Access Request) which pretty much covers above 1-4 etc and we have a single standard initiator(If we want more we need to use BRF+)
So Initially I configured in such a way that the request only goes to manager and it is approved .Here I had to use the system name and it worked fine.
Then I configured second stage of role owner approval and then when i add system and role it was erroring out so i just added the role and did a change acct and it worked fine.Don't know why it wasn't taking system and role together(could be because the role already has system name and maybe it didn't want redundant values)
So after configuring second stage when I tried to use it for user lock/unlock it is erroring out as obviously it doesn't like taking just system name.
My Config settings based on MSMP workflow.
1. Process ID -- SAP_GRAC_ACCESS_REQUEST
2. Rule ID-GRAC_AC_INITIATOR(Rule Result --GRAC_DEFAULT_RESULT)
5.Maintain Paths-GRAC_DEFAULT_PATH
Maintain Stages- GRAC_MANAGER,GRAC_ROLEOWNER
sorry for such a long post but I am at my wit's end as I am so near yet so far from the solution.
Thanks
UdayHi Kuashal,
I had imported only 1 role using role import from access mgmt.I am not using ERM.
I also found out yesterday that the error i was getting gave me a new description
Incorrect path and stage class entry for process SAP_GRAC_ACCESS_REQUEST
Error when generating a new version 000027 for process SAP_GRAC_ACCESS_REQUEST
and also when i try to activate other process id's it works fine but only for this process id i am getting an error.
logged an OSS message .
Will get back with any reply -
- Rule id is created on BRF+, and this Rule id contains Path(s) and their Rule Result(s). I have created 1 Rule Result, for a New/Change account.
- after creating this Rule Id, i open MSMP, and the Rule Id appears against the Process Id, in Step1. I am not using any Escape path, so as to have my first workflow creation simple.
- In Step 2, the Rule ID is Result is given a Trigger value description. So, i provide a description, for my Rule Result.However could you please say, the usage of this Trigger value, except that, it proivdes Description of the Rule result
- then i go to Step 5 , for creating Path, Add a Path-> Add a stage (GRAC_SECURUTY). Since, this is for testing purpose, i am not giving GRAC_ROLEOWNER/GRAC_MANAGER. I just want a workflow to be completed for New/Chnage Account request.
- I do not maintain Agents or Variables & Templates.
- In route Mapping, I assig the Path to the Rule Id, Then i generate the version, and it is created succesfully.
So, from the above steps , i understand that When a user raises a New/Change Request(eg. process ID: SAP_GRAC_ACCESS_REQUEST), the Rule ID is identified , from Step1. Then the Rule result is identified from Decision Table( in BRF+). Then the Rule Result identifies the path from Step 'Route mapping'. Aftre Path is identified, it travels through the Stages, defined in 'Maintain Path'
Therafter , the Security team or Role Owner can provison the request.
Please let me know, about my understanding.Hi Plaban
I wrote a piece about explaining how MSMP works with the mappings. It might help clarify your understanding: MSMP - Multi Step Multi Process – GRC’s answer to Workflow Configuration Flexibility
When you submit a request each type has a Process Id. In the case of an Access Request that is the SAP_GRAC_ACCESS_REQUEST. The webdynpro has a heap of code that finds that process id and goes to look at the MSMP configuration.
The very first item to be executed is the Initiator rule. Each Process Id can only have one active Initiator Rule as it is mapped (visible on Step 1 of the MSMP). If you have created a BRF+ Initiator Rule then it will go and execute it. Initiator Rules are designed to handle multiple scenarios (hence the results).
In your BRF+ you would have specified the possible combinations (again look at my post). In MSMP Step 2 for the Initiator rule for Rule Results you need to tell the MSMP how to handle each value that the BRF+ rule might return. As a result, you have to map each value. The description won't matter much except as meaningful information.
After you finish Step 2, you then need to go over to Step 6 to maintain the routings. This is where you have to tell the MSMP which Path the rule result should go to for the Initiator Rule. After that you jump back to Stage 4 for Paths/Stages to maintain them.
This mapping assumes that you are not building any new Agents or Paths. If you were to build a new Path and Stages you would have to configure them first and then go to Step 6 to map them
Please let me know if there is still any further confusion.
Regards
Colleen -
Iphone 5s voice memo version in iPad app store? same
i want to make sure after my quickvoice horror i download the correct version. i don't see any with the zig zag line for iPad? voice memo.
The iPhone version is not available separately for download in the App Store. You'll need to read the reviews for the available third party apps.
-
New Applescript version breaks old code
Hi there,
First off, I'm not an Applescripter, but I have one script I wrote a few years back (with help from kind people on the net) to generate and save tiny applications which, when called from within an Adobe Flash executable, would open the required file using the Mac OS native application associated with them (i.e a doc file wouldbe opened by Word if installed, TextEdit if not...)
It used to run fine on my old Powerbook G4 on an old version of AppleScript, but times change and, one whizzy Intel processor later, I'm trying to get the same script running on OS 10.8 with AppleScipt 2.5.1, with varied results.
Basically, what the script should do is read a comma delimited file in the same folder as the script, called 'fileNames.csv' which contains the names of all the files that I want the tiny apps to open. Each item will then have its own file created by the AppleScript, named after each item, which get saved in an pre-existing folder in the same directory as the script and fileNames.csv file, called 'fscommand'.
The example of the fileNames.csv file I'm having issues with:
yr2_unit_1_tn.doc,yr2_unit_2_tn.doc,yr2_unit_3_tn.doc ... etc up until yr2_unit_20_tn.doc
The script always used to work fine, but the new version of AppleScript seems to have broken it. When I run it now, it creates all the .app files up until 'yr2_unit_11_tn.doc.app' but then stalls in 'Running...' mode in the AppleScipts editor, and refuses to save apps for the final nine files in the .csv file.
It still runs ok from an older AppleScript editor (2.2.1) but this only saves PowerPC applications, which won't run on Intel Macs. And this would be me running away from the problem, rather than attempting to solve it ;-)
I'm thinking it's a filename issue, as it always seems to break when attempting to save "yr2_unit_11_tn.doc.app" when "yr2_unit_1_tn.doc.app" already exists in the 'fscommand' folder. If I create a new 'fileNames.csv' file which only contains ten entries from 'yr2_unit_11_tn.doc' to 'yr2_unit_20_tn.doc', and run the script to an empty 'fscommand' folder, it processes all the files fine. It just won't do all twenty entries from 1 to 20.
Here's the script. I know I'm doing something really stupid here, but as a rock bottom novice AppleScripter, I can't see the error, or why it would work in one version of AppleScript and not another. I can post a link to the zipped files if this is any help in solving it. Thanks in advance for any help! :-)
tell application "Finder" to get folder of (path to me) as Unicode text
set cwd to result
set fileRef to open for access alias (cwd & "fileNames.csv")
set theList to read fileRef using delimiter ","
close access fileRef
set theFolder to alias (cwd & "fscommand")
set theFolderPath to theFolder as string
#Create the .app files and save them in theFolder
set NL to ASCII character 10
tell application id "com.apple.ScriptEditor2"
launch
repeat with theItem in theList
set x to make new document
set x to the front document
set theCharacters to characters of theItem
set theReversedCharacters to reverse of theCharacters
set theReversedFileName to theReversedCharacters as string
set theOffset to offset of "." in theReversedFileName
set theReversedSuffix to text 1 thru (theOffset - 1) of theReversedFileName
set theSuffix to (reverse of (characters of theReversedSuffix)) as string
set the text of document 1 to "tell application \"Finder\"" & NL & "activate" & NL & "set cwd to get folder of container of (path to me) as Unicode text" & NL & "open file (cwd & \"assets:" & theSuffix & ":" & theItem & "\")" & NL & "end tell"
compile document 1
set file_path to theFolderPath & theItem & ".app"
save document 1 as "application" in file file_path
close window 1
end repeat
end tellThat seemed to be it. I put a tiny delay in between saving the document and closing the window and the file runs smoothly through all 20 items.
compile document 1
set file_path to theFolderPath & theItem & ".app"
save document 1 as "application" in file file_path
delay 0.3
close window 1
Never thought that I'd reach the day where I was trying to slow the computer down to process something more carefully :-D -
I have a problem with wifi in my iphone 4s, i already try everything and download latest version 7.1(11D167) but wifi switch is not working, its my humble request to Apple support team that pls resolve this problem as soon as possible because its a prestiage of Apple Company.
Pls inform me how can i resolve the problem of wifi.You have to go to autherized iPhone agent.
-
I want to know what to expect in terms of moving from one OS to another. Having been a Windows guy until last summer, my only experience is going from one version of Windows to another, which is usually a fairly costly purchase. I will want to go to Lion, but as a retired teacher, my income is fixed. I am not looking for a specific price, I am sure that is unknown, but I would just like to know help Apple does these things so I won't be sadly surprised.
Historically Apple has sold OS X upgrades via DVD media however with the advent of the Mac Apple Store that throws another possibility into the mix. That's about as much as I can say as these forums don't allow us to speculate about future products. As for the cost historically Apple has priced OS X upgrades between $29-$129, the last upgrade (Snow Leopard) was only $29 but that was an exception. Again we cannot speculate on these forums about that. The good news is that Apple is unlike Microsoft which makes OS upgrades expensive and complicated. The choice with OS X is do you want a server version (most users don't need one) or a single computer license. The users that buy server versions tend to have a number of Macs they manage from a server, most consumers don't have this issue.
Keep reading the news, as you know Apple has announced a Summer release for Lion.
Upgrades on OS X are usually very simple. I've upgraded from Tiger to Leopard to Snow Leopard and each transition has been very easy. With any major OS upgrade there are some basic rules to follow, for example always, always, always backup prior to any update. When Lion is released to the general public post again for what to do to prepare or even do a Google search on "How to prepare for OS X upgrade" and you will find a number of articles that will provide some suggestions and valuable insight. You can also re-post here and users will be happy to assist. -
Itunes wont open error says I need Quicktime version 7.5 5 for it to work
Computer wasn't working got a new operation system installed not when I plug my Iphone in it only brings Iphoto up I can't get Itunes to come up and every time I try it says error I need version 7.5 5 Quicktime player for Itunes to work How do I fix this
Click here and install the software.
(80824) -
Each time I try to synch photos from my Windows7 PC to my iPad2, iTunes stops working and the error message is:
Problem Event Name: APPCRASH
Application Name: iTunes.exe
Application Version: 10.3.1.55
Application Timestamp: 4deec351
Fault Module Name: ntdll.dll
Fault Module Version: 6.1.7601.17514
Fault Module Timestamp: 4ce7ba58
Exception Code: c0000005
Exception Offset: 0002e3fb
OS Version: 6.1.7601.2.1.0.768.3
Locale ID: 1033
Additional Information 1: 0a9e
Additional Information 2: 0a9e372d3b4ad19135b953a78882e789
Additional Information 3: 0a9e
Additional Information 4: 0a9e372d3b4ad19135b953a78882e789
I reloaded iTunes 10 (64 bit) successfully, but the problem remains the same.
Any suggestions?I looked in the folder from which I want to synch photos, but there is no such thing as an "ipod photo cache" in that folder, or sub-folders, as suggested in the link which you were nice enough to provide.
I have also tried removing photos from my iPad2 Photos App, and "iTunes has stopped working" shows up again as soon as I click on the "Synch photos from" button. -
I am not technically sophisticated and have been reading other post about people having problems with what appears to some problem with Flash Player. I have checked my computer and it tells me that I have version 10,0,32,18. In tools it shows in "Manage Ad Ons" that I have "Shockwave Flash Object" version 10.0.38.18under the catgory "all ad ons" but not in the catgory "currently installed ad ons." I have no tired to unistalled anything since I don't show any flash player installed. Yet when I go to a video it says I need the current edition of Flash Player which when I try to install freezes up. I have IE8 with all Windows updates.
Ineed simple help. Not tech jargon, please
Message was edited by: BlairMacI replied to you on the "Is it this simple?" thread.
-
There was no "update failed" message
I wonder whether I'm doing the right thing when I drag to the dock. There's only one ff icon in the applications folder. The first time I was prompted to update it showed that days date next to the icon as if the update was successful. The second time was a few days later but I think it was still the same date next to the icon (25/8/10) I've only just noticed that (on 10/9/10) so can't be sure but I'm sure the second time was around 2nd or 3rd of Sept.
Also, I am running two versions of ff- one is english, the other is the Italian version. They can't be opened at the same time but they seem to talk to eachother in the background, so to speak, because when I open one after a long gap, it opens with all the history and settings of the other one, right up to the last website I went to. I think I closed both when updating because it prompts you to close all programmes and restart (I think/ remember) so I just clicked ok to that prompt.
By the way, I got the prompt to update twice for ''BOTH'' the Italian and the English version- so 4 times altogether so it would seem that ff does recognise them as separate but still has problems concluding the update for each separate one respectively.
Thank you very much if you can help.
TrapperjohnDownload a new copy of the Firefox program: http://www.mozilla.com/firefox/all.html
Trash the current Firefox application to do a clean reinstall.
Install the new version that you have downloaded.
Your profile data is stored elsewhere in the [http://kb.mozillazine.org/Profile_folder_-_Firefox Firefox Profile Folder], so you won't lose your bookmarks and other personal data. -
I was updating Firefox to the newest version 7.0.1 from version 6.0.2 I think it was, I clicked the restart Firefox button that always comes up after updating. It started updating and then Firefox never restarted like it was supposed to after it was done updating. I then tried to open Firefox and it told me "This application has failed to start because xul.dll was not found." I did have Firefox crash on maybe about 30 minutes or so earlier which bothered me because I have been using Firefox for years and never had it crash on me before but I didn't think much of it at the time it happened because I was able to go back onto Firefox and finish what I had been working on. A while later I checked for updates and updated. The first time I tried to update it didn't work though so I had to shutdown Firefox and reopen Firefox and start the update a second time. It was after the second time that when I tried to open Firefox I got that message about failing to start because xul.dll can't be found. I filed a crash report when my Firefox crashed. This would have been around 1am-2am in the morning that Firefox first crashed and then wouldn't allow me to open it after updating. I have a DELL laptop running the Windows XP operating system but the laptop is probably at least 6 or 7 years old. The laptop will no longer charge so I always have to have it plugged into an outlet. Both my laptop hard drive and my external hard drive give me messages that I am running out of disk space on my hard drive. I bought this laptop 6 or 7 years ago second hand so it could be even older. In short it's a piece of crap and it gives me all kinds of issues but I currently can't afford a new one, but I have never had any problems with Firefox and I use Firefox more than any other aspect of my laptop so it's really really bothering me. May you please help me fix it?
Unfortunately I tried that and it didn't work. Thanks for the help though. I tried to uninstall and it said I couldn't because the file is corrupt or something, but I think I finally got it uninstalled and/or deleted or whatever, but now I try to reinstall/download it again from the beginning and I can't. No matter what I do I can not get Firefox working again. No matter how many times I try to redownload it. Any other suggestions?
Maybe you are looking for
-
Resolution Problems with 30-inch Apple Display and my new iMac
I'm not very good at computers, so I could use some help. I just bought a new iMac 24-inch, 3.06 Duo and I have an Apple 30-inch display I had connected to my MacBook Pro. Now I can't get a resolution better than 1280x800 and the cinema screen flicke
-
What is the best Partition size for a windows 7 Home Premium. I'm trying to install Windows using Boot camp
-
The Truth about Apple's Pro Care---
I am debating whether or not I should purchase Apple's Pro Care for my new ibook. So I am interested in knowing if the level and quality of support is worth the cost. -anyone out there have thoughts on this?
-
How to separate RTF under conditions
Hi all, I want to separate an RTF. After submitting a concurrent program under some conditions i want to take the first or second page of the RTF attached to it. Is there an appropriate PL/SQL API or another method to solve the issue. Or maybe i have
-
IMac G5 (iSight) - My daughter can't make a video diary.
I bought a 17" iMac (iSight) to my daughter because you can record iSight (for video diary) and use it with 3:d party MSN. It looked good because if the web cam will work with iMovie it will work with the 3:d party MSN videoconference. We found out a