Multiple Approvers for Role
Hi,
Is it possible to have 2 approvers (primary and secondary/back-up) for a role but only one them need to approve? Both should get the email notification but only one of them should approve. Escalation to alternate approver is not what I am looking for.
When the roles are imported into GRC, do I need to a two entries for each role since I need have 2 approvers for the role? or is Delegation a better option?
If Delegation is used, then do I have to setup both as role owners? or can delegated user approve with the need to setup as role owner?
Thanks,
Jay
Hi Jay
You can have 2 approvers for the same roles where either of the approvers can approve the request. You need to specify 2 entries for the same role in the import file. Both approvers will receive the email notification
A delegate dosent have to be specified as an access control role owner.
Thanks
Anthony
Similar Messages
-
Multiple Approvers for Firefighter Ids
Hi All,
we have a scenario at one of our client that for Firefighter there should be multiple Firefigthers.
ex : FFID1
Approvers = A and B
Approver A is the Team Lead.
Approver B is the Track Lead/ Manager.
So when requester requests the FFID1 it should first go to the Approver A(Team Lead) and once he approves then it should go to the Approver B(Manager).
How can we configure this in GRC 10. Please explain in detail and provide config steps if possible.
Thanks in advance.
Ansari.MHi Kaushal,
Thanks for the info.
Well can you please let me know the step by step configuration for this scenario.
Like once the Team Lead approve then the request should go to the second level of approval to the Manager.
As you explained it was clear that it can be done, I am working on your steps. But can you also refer to any document or forward me the steps.
Thanks
Ansari.M -
Multiple workflows for Role generation
Is it possible to have 2 or more ERM workflow types configured in CUP?
Please suggest,
Regards,
NitinAs far I know, it's not possible. I have never tried it either.
Alpesh -
Approval workflow with multiple approvers in sharepoint
Hi All,
I have created a sequential workflow using visual studio 2012 for sharepoint 2013.
I have multiple approvers for approving a document. I am able to create individual tasks for each approver by code
my problem here is tasks should be created based upon the hierarchy, i.e. the second task will be created only when first task is approved.
All my approvers are dynamic so I did this development in visual studio. Please give me some idea how to proceed for my problem.
Sarath Sannadi Sharepoint Dev at SaksoftHi sarath,
Thanks for the sharing.
Regards,
Rebecca Tu
TechNet Community Support -
Different approvers for 2 roles of the same name in 2 different systems
Hi experts,
in our SAP landscape we have roles of the same name in different systems. I couldn't find any possibility to select different approvers for these two roles in GRC 5.3 SP08.
For example role XYZ exists in system P1 and P2. In P1 I want to select only person A as role approver, in system P2 only person B.
Is there any chance to select an approver for a combination role and system?
Thanks,
ManuelHi Manuel,
Yes. You can create a custom approver determinator. Go to CUP>>Configuration>>Workflow>>Custom approver determinators. Chose create new.
CAD type: Attribute
Workflow type: Access Enforcer
Select your attributes and save.
Go back. Select your new approver determinator in change mode.
Click on the Approve button.
Create logic between the attributes and approvers.
Modify your role approval stage. Select your new custom approver determinator.
Regards,
Vit -
Reg:Auto Approve Roles without Approvers for GRC 10.0
Hello,
Is anyone using this option on GRC 10.0 as according to my understanding , if someone selects a role and it has no approver then the role has to be assigned to the user automatically but it is not happening in my system..The request is going to decision pending and it is still looking for role approver.
Can someone provide their expertise on this issue .
Thanks
UdayHi Uday,
I have not used that functionality myself, as I find it too risky if a SOD or Critical risk would be introduced by assigning that role.
I would have thought that by setting the correct values in SPRO would have enabled this functionality. It might be worth checking the settings again and resaving it.
However, if you are purposly leaving the approver value blank for non-risky roles, as an alternativethe document below is worth a consideration for implementing via BRF+ in GRC 10. (I know the document is more GRC 5.3 related, but the concept is valid).
Link: [http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/203d2716-ef84-2d10-3f81-a6f6643e308d?QuickLink=index&overridelayout=true] -
UAR Approvals for roles with multiple owners
Hi All, We have in many cases, two role owners for roles defined in CUP. When running the UAR, both owners are notified.
However, when one of the owners submits the approved/removals UAR request, the request closes out and the other owner does not have the opportunity to validate the request also.
Any suggestions how to be able to accomodate both owners?
The UAR CAD option is out of scope since it makes no sense to upload and maintain 4000 roles in the CAD.
Thanks! -DylanFYI, We were not able to find an acceptable workflow solution but decided to restrict access via authorization. We will allow the role primary Role Owner to make the UAR line item updates but not allow the Role Owner to submit the UAR.
The Secondary Role Owner will be allowed to Submit final version of the UAR.
Role makeup:
ZAE_UAR_ROLE_OWNER (UAR Role Owner Approver)
AE.ViewAccessEnforcer
AE.ViewRemoveAccess
AE.ViewApprove
AE.ViewSaveRequest
ZAE_UAR_QUARTERLY_OWNER (UAR Quarterly Owner Approver)
AE.ViewAccessEnforcer
AE.ViewSubmitRequest
Hopefully, more workflow flexibility is will be built-in to the UAR just like with normal CUP requests.
Best Regards, Dylan -
Single step workflow with multiple approvers (without using a group)
Hi,
is it possible to have a single step workflow with multiple approvers without using a group? This is for a contract document.
i want to add a number of users based on particular logic. The approvers are random and do not belong to any particular group.
DO let me know if it is possible or if any of you have done that.
thanks in advance.
regards,
rubioHi Rubio,
I believe the behavior would be, if individual users are added as approvers then the system would require each approver to approve the document. However, if you use the user group, you could set the role so that it would be either ALL or ANY.
Regards,
Vikram -
Send a request to multiple approvers in a stage?
Dear forum,
I was in the impression that Distribution Lists could be used generally for approval, but it seems to work only for role approvers.
Is there a way to send a request to multiple approvers in a stage?
Kind Regars,
Vit VeselyHello
If you want the request be sent to several approvers you can set into the Custom Approver Determinator all approvers you want to check the request.
However the CAD that you created from before must be linked to the stage. In this stage you can configure: "Anyone approver" it is enough to pass throug the next stage that only one of this several approvers has approved. And I guess "Everyone approver" is a necessary condition that every approver from the list has approved the request.
Hope to be useful.
Margarita. -
How to get the approver from a wf notification in case there are multiple approvers ?
I created an ad hoc role to store mutliple approvers for a wf notification.
My question is how to get the user_name of the first responder so I can stamp the record I need to update with it.
I''m assuming it would be using wf_notifications.GetAttrText but I don't know what that attribute name would be.
Please help.Hello,
I think you can try with script to capture the duplicate booking on presave action. Just try to give a shot to this solution:
http://aleemsheikh.wordpress.com/2011/08/08/warn-users-of-double-booking-in-sharepoint-calendar-in-real-time/
http://social.msdn.microsoft.com/Forums/en-US/9a10a110-a18b-4b5b-a15f-b563322ca0a6/how-to-prevent-duplicate-calendar-list-items-sharepoint-2010
Hemendra:Yesterday is just a memory,Tomorrow we may never see
Please remember to mark the replies as answers if they help and unmark them if they provide no help -
Multiple address for the same customer code
Hi,
Suppose we have a customer name XYZ LTD whose sap code is 123.
Now user want to maintain multiple addresses for the same customer in the same code.So that during billing he can have option to chose one of the address in which he want to sent the invoice.
Is it posible if yes then let me know.
Thanks in advance.
Regards,
SATYAHi Satya,
you can define for a vendor/customer several partner functions with different
adresses. You can create certain partner roles several times.
If you create a purchase order, than you can choose the wanted
address and partnerrole on the header level. In the standard system you
can use the patner role 'OA' ordering address and for the finance
the 'IP' Invoice presented by.
I hope I was able to help you.
Kind regards,
Zsuzsanna -
Multiple Partners for the same customer in Message tracking of SEEBURGER
Hi,
This is for third party customers which use EDI messages. We have for one customer multiple partner numbers configured in Partner profile. I would like to know while configuring the trading partners in SEEBURGER Message Tracking, can we have multiple keys for the same customer for multiple partners for an INVOIC02. Like the following keys:
12345_INVOIC02
34567_INVOIC02
45678_INVOIC02Hi Satya,
you can define for a vendor/customer several partner functions with different
adresses. You can create certain partner roles several times.
If you create a purchase order, than you can choose the wanted
address and partnerrole on the header level. In the standard system you
can use the patner role 'OA' ordering address and for the finance
the 'IP' Invoice presented by.
I hope I was able to help you.
Kind regards,
Zsuzsanna -
OIM 11gR1 : Parallel approval for role assignment.
Hi,
I'd like to add custom attributes to a role : "District security officer" and "Department security officer" (Can those be used for searching users? -- i.e. users lookup)
When the role is to be assigned to a user, I'd like the workflow engine to open tasks for the members entered on those custom attributes.
Also, Is it possible to assign a Role instead of the users in the custom attributes ?
Meaning, Approving user assignment of a role named "Role A" will be done by users that belong to "Role_A_Approvers".
Will appreciate pointers to the online docs, I've search and didn't find information related to the usecase I've described.
Thanks,
Meni,Bikash Bagaria wrote:
Meni wrote:
Hi,
I'd like to add custom attributes to a role : "District security officer" and "Department security officer" (Can those be used for searching users? -- i.e. users lookup)
When the role is to be assigned to a user, I'd like the workflow engine to open tasks for the members entered on those custom attributes.Try modifying the dataset. But I think there was an issue which someone reported here which said that you cannot add additional attributes to the role dataset. Logically it makes sense because there is no custom attribute for role in OIM so dataset should not allow it either.
I've noticed that the design console allows adding custom attributes to roles.
This can be done via Administration --> User Defined Field Definitions --> UGP (Table name).
Once a field is added, you'll need to choose "Properties" and add a "Visible Field = true" prop to the attribute chosen.
This will add a custom attributes section where your attributes will be shown.
Question is how you can add a "search users" lookup instead of plain string for this custom attribute,
and how those attributes will find their ways into the BPEL composite where business decisions based on those attributes may be taken (assign task per this attribute for an example).
Also, Is it possible to assign a Role instead of the users in the custom attributes ?
Meaning, Approving user assignment of a role named "Role A" will be done by users that belong to "Role_A_Approvers".You can create request for multiple roles in a single request and in your approval process you need to dynamically set the human task assignee based on the role selected. You also need to attach the approval process to orchestration level so that it generates a separate child request for each role selected.
I'm not sure I understand how the proposed approach helps avoid the decoupling of users to role admins attribute.
The intention was to have two roles, "Role_A" and "Role_A_Approver" where people that belong to "Role_A_Approver" will be assigned workflow tasks whenever Role_A is to be granted to end-users.
Currently, each role has a "Role Admin" attribute, this attribute however holds a user and not a container of users (role)..
Will appreciate pointers to the online docs, I've search and didn't find information related to the usecase I've described.
All about requests
Thanks,
Meni,-Bikash -
Multiple Plants for Material and customer
Hi,
I have downloaded the Plants from the R/3 to CRM using DNL_PLANT object. The BP with Role 'PLANT' are created.
we have multiples plants for the same material,
I have downloaded the material master data, but in COMMPR01, the field DELIVERING LOC. is empty. Is that correct? How the system works with multiples plants.
What I can do?
Best regards
LidisaidHi Lidisaid,
Ideally, the field Delivery location must get populated. Just ensure that the followig settings have been maintained.
1. Adapter Object MATERIAL
Tcode: R3AC1
Choose the tab Tables/Structures Within Object
Add tables MARC and MARC_KEY
Please also check that MARC_KEY that the field Inactive is not flagged for this entry.(This is needed to download the PLANT information as interlinkages to CRM Online in the table COMM_IL_PRDLOC.)
The plant information is seen in the Sales & Distribution tab of the product master by double clicking on the Distribution Chain.
2. Add Relationship type PRDLOCS- LOCATION OF PRODUCTS
Tcode: COMM_HIERARCHY
Check if the corresponding Material Categories for which the PLANT information is to be downloaded has the interlinkage type LOCATION OF PRODUCTS maintained in the RELSHIP types for the products categories that are to be downloaded to CRM from R/3.
Note:
If no relationship types are assigned to the product category, the PLANT information will be downloaded to the interlinkage table COMM_IL_PRDLOC. But even if a single RELSHIP entry is maintained then additionally the RELSHIP type LOCATION OF PRODUCTS also have to be maintained. E.g. MAT_FERT
Wish this helps.
Regards,
Shalini Chauhan -
GRC AC 10- Multiple detour for single stage path
Hi Experts,
I wanted to know about a possibility or view. Do you know anyway where we can have multiple detour activated(like first detour 1 then detour 2 check) for single stage.
Actually once we click on routing rule, we get only select single detour selection option.
Please suggest idea.
(I would like to update that we do not want system to have multiple level of approver but only single role owner stage).
Final solution is creating custom detour having ability to handle multiple scenario but we are looking for no custom initiator)
Regards,
NishantHi Nis,
unfortunately in standard solution only one detour path can be added to single stage.
When we had such a challenge, like you described, we simply used custom initiator and this is truly the best option to go.
In our case we wanted to have different path (detour) for roles with special attribute an in the same time different path in case sod issue occurs. In other words we wanted to have 2 detours condition on one stage like you want to have. The option that suites our needs in the best way was to have custom initiator rule.
Filip
Maybe you are looking for
-
I am a long-term user of Lightroom as a standalone product with a perpetual licence. As a retired person on limited income, it is very disappointing to me that Adobe have introduced the 'Creative Cloud' (CC) subscription service in order for me to be
-
I bought dragon dictate with my mac pro. NO DVD DRIVE.. now what do i do?
Can I return it and just get the dragon express in apps? My mom got this Mac book for school and I am paralyzed. I need a talk to text app. She bought the Dragon and we did not know the mac did not have a dvd drive (this is my first mac) PLEASE HELP.
-
Fact Not Found in Rule engine working memory
I am using 11g, I have built a Business Rule, using RL facts, XML facts, Bucketsets and multiple Rulesets which internally has decision table and If-then rules. After deploying the same, Business rules runs successfully for some conditions and faults
-
Discount for paying line rental up front
Do BT still give a discount if you pay your monthly line rental a year in advance? If so how do you do it? Thank you.
-
RFC: new PKGBUILD for odfpy
odfpy is a nice library for producing ODF documents with python. I've created a PKGBUILD for it, any comments before I submit it to the AUR? # Contributor: Joel Schaerer <[email protected]> pkgname=odfpy pkgver=0.7 pkgrel=1 pkgdesc="A complete API fo