Multiple Approvers for Role

Hi,
Is it possible to have 2 approvers (primary and secondary/back-up) for a role but only one them need to approve? Both should get the email notification but only one of them should approve. Escalation to alternate approver is not what I am looking for.
When the roles are imported into GRC, do I need to a two entries for each role since I need have 2 approvers for the role? or is Delegation a better option?
If Delegation is used, then do I have to setup both as role owners? or can delegated user approve with the need to setup as role owner?
Thanks,
Jay

Hi Jay
You can have 2 approvers for the same roles where either of the approvers can approve the request. You need to specify 2 entries for the same role in the import file. Both approvers will receive the email notification
A delegate dosent have to be specified as an access control role owner.
Thanks
Anthony

Similar Messages

  • Multiple Approvers for Firefighter Ids

    Hi All,
    we have a scenario at one of our client that for Firefighter there should be multiple Firefigthers.
    ex : FFID1
    Approvers = A and B
    Approver A is the Team Lead.
    Approver B is the Track Lead/ Manager.
    So when requester requests the FFID1 it should first go to the Approver A(Team Lead) and once he approves then it should go to the Approver B(Manager).
    How can we configure this in GRC 10. Please explain in detail and provide config steps if possible.
    Thanks in advance.
    Ansari.M

    Hi Kaushal,
    Thanks for the info.
    Well can you please let me know the step by step configuration for this scenario.
    Like once the Team Lead approve then the request should go to the second level of approval to the Manager.
    As you explained it was clear that it can be done, I am working on your steps. But can you also refer to any document or forward me the steps.
    Thanks
    Ansari.M

  • Multiple workflows for Role generation

    Is it possible to have 2 or more ERM workflow types configured in CUP?
    Please suggest,
    Regards,
    Nitin

    As far I know, it's not possible. I have never tried it either.
    Alpesh

  • Approval workflow with multiple approvers in sharepoint

    Hi All,
    I have created a sequential workflow using visual studio 2012 for sharepoint 2013.
    I have multiple approvers for approving a document. I am able to create individual tasks for each approver by code
    my problem here is tasks should be created based upon the hierarchy, i.e. the second task will be created only when first task is approved.
    All my approvers are dynamic so I did this development in visual studio. Please give me some idea how to proceed for my problem.
    Sarath Sannadi Sharepoint Dev at Saksoft

    Hi sarath,
    Thanks for the sharing.
    Regards,
    Rebecca Tu
    TechNet Community Support

  • Different approvers for 2 roles of the same name in 2 different systems

    Hi experts,
    in our SAP landscape we have roles of the same name in different systems. I couldn't find any possibility to select different approvers for these two roles in GRC 5.3 SP08.
    For example role XYZ exists in system P1 and P2. In P1 I want to select only person A as role approver, in system P2 only person B.
    Is there any chance to select an approver for a combination role and system?
    Thanks,
    Manuel

    Hi Manuel,
    Yes. You can create a custom approver determinator. Go to CUP>>Configuration>>Workflow>>Custom approver determinators. Chose create new.
    CAD type: Attribute
    Workflow type: Access Enforcer
    Select your attributes and save.
    Go back. Select your new approver determinator in change mode.
    Click on the Approve button.
    Create logic between the attributes and approvers.
    Modify your role approval stage. Select your new custom approver determinator.
    Regards,
    Vit

  • Reg:Auto Approve Roles without Approvers for GRC 10.0

    Hello,
    Is anyone using this option on GRC 10.0 as according to my understanding , if someone selects a role and it has no approver then the role has to be assigned to the user automatically but it is not happening in my system..The request is going to decision pending and it is still looking for role approver.
    Can someone provide their expertise on this issue .
    Thanks
    Uday

    Hi Uday,
    I have not used that functionality myself, as I find it too risky if a SOD or Critical risk would be introduced by assigning that role.
    I would have thought that by setting the correct values in SPRO would have enabled this functionality. It might be worth checking the settings again and resaving it.
    However, if you are purposly leaving the approver value blank for non-risky roles, as an alternativethe document below is worth a consideration for implementing via BRF+ in GRC 10. (I know the document is more GRC 5.3 related, but the concept is valid).
    Link: [http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/203d2716-ef84-2d10-3f81-a6f6643e308d?QuickLink=index&overridelayout=true]

  • UAR Approvals for roles with multiple owners

    Hi All,  We have in many cases, two role owners for roles defined in CUP. When running the UAR, both owners are notified.
    However, when one of the owners submits the approved/removals UAR request, the request closes out and the other owner does not have the opportunity to validate the request also.
    Any suggestions how to be able to accomodate both owners?
    The UAR CAD option is out of scope since it makes no sense to upload and maintain 4000 roles in the CAD.
    Thanks! -Dylan

    FYI, We were not able to find an acceptable workflow solution but decided to restrict access via authorization. We will allow the role primary Role Owner to make the UAR line item updates but not allow the Role Owner to submit the UAR.
    The Secondary Role Owner will be allowed to Submit final version of the UAR.
    Role makeup:
    ZAE_UAR_ROLE_OWNER (UAR Role Owner Approver)
    AE.ViewAccessEnforcer
    AE.ViewRemoveAccess
    AE.ViewApprove
    AE.ViewSaveRequest
    ZAE_UAR_QUARTERLY_OWNER (UAR Quarterly Owner Approver)
    AE.ViewAccessEnforcer
    AE.ViewSubmitRequest
    Hopefully, more workflow flexibility is will be built-in to the UAR just like with normal CUP requests.
    Best Regards, Dylan

  • Single step workflow with multiple approvers (without using a group)

    Hi,
    is it possible to have a single step workflow with multiple approvers without using a group? This is for a contract document.
    i want to add a number of users based on particular logic. The approvers are random and do not belong to any particular group.
    DO let me know if it is possible or if any of you have done that.
    thanks in advance.
    regards,
    rubio

    Hi Rubio,
    I believe the behavior would be, if individual users are added as approvers then the system would require each approver to approve the document. However, if you use the user group, you could set the role so that it would be either ALL or ANY.
    Regards,
    Vikram

  • Send a request to multiple approvers in a stage?

    Dear forum,
    I was in the impression that Distribution Lists could be used generally for approval, but it seems to work only for role approvers.
    Is there a way to send a request to multiple approvers in a stage?
    Kind Regars,
    Vit Vesely

    Hello
    If you want the request be sent to several approvers you can set into the Custom Approver Determinator all approvers you want to check the request.
    However the CAD that you created from before must be linked to the stage. In this stage you can configure: "Anyone approver" it is enough to pass throug the next stage that only one of this several approvers has approved. And I guess "Everyone approver" is a necessary condition that every approver from the list has approved the request.
    Hope to be useful.
    Margarita.

  • How to get the approver from a wf notification in case there are multiple approvers ?

    I created an ad hoc role to store mutliple approvers for a wf notification.
    My question is how to get the user_name of the first responder so I can stamp the record I need to update with it.
    I''m assuming it would be using wf_notifications.GetAttrText but I don't know what that attribute name would be.
    Please help.

    Hello,
    I think you can try with script to capture the duplicate booking on presave action. Just try to give a shot to this solution:
    http://aleemsheikh.wordpress.com/2011/08/08/warn-users-of-double-booking-in-sharepoint-calendar-in-real-time/
    http://social.msdn.microsoft.com/Forums/en-US/9a10a110-a18b-4b5b-a15f-b563322ca0a6/how-to-prevent-duplicate-calendar-list-items-sharepoint-2010
    Hemendra:Yesterday is just a memory,Tomorrow we may never see
    Please remember to mark the replies as answers if they help and unmark them if they provide no help

  • Multiple address for the same customer code

    Hi,
    Suppose we have a customer name XYZ LTD whose sap code is 123.
    Now user want to maintain multiple addresses for the same customer in the same code.So that during billing he can have option to chose one of the address in which he want to sent the invoice.
    Is it posible if yes then let me know.
    Thanks in advance.
    Regards,
    SATYA

    Hi Satya,
    you can define for a vendor/customer several partner functions with different        
    adresses. You can create certain partner roles several times.               
    If you create a purchase order, than you can choose the wanted              
    address and partnerrole on the header level. In the standard system you     
    can use the patner role 'OA' ordering address and for the finance           
    the 'IP' Invoice presented by.
    I hope I was able to help you.
    Kind regards,
    Zsuzsanna

  • Multiple Partners for the same customer in Message tracking of SEEBURGER

    Hi,
    This is for third party customers which use EDI messages. We have for one customer multiple partner numbers configured in Partner profile. I would like to know while configuring the trading partners in SEEBURGER Message Tracking, can we have multiple keys for the same customer for multiple partners for an INVOIC02. Like the following keys:
    12345_INVOIC02
    34567_INVOIC02
    45678_INVOIC02

    Hi Satya,
    you can define for a vendor/customer several partner functions with different        
    adresses. You can create certain partner roles several times.               
    If you create a purchase order, than you can choose the wanted              
    address and partnerrole on the header level. In the standard system you     
    can use the patner role 'OA' ordering address and for the finance           
    the 'IP' Invoice presented by.
    I hope I was able to help you.
    Kind regards,
    Zsuzsanna

  • OIM 11gR1 : Parallel approval for role assignment.

    Hi,
    I'd like to add custom attributes to a role : "District security officer" and "Department security officer" (Can those be used for searching users? -- i.e. users lookup)
    When the role is to be assigned to a user, I'd like the workflow engine to open tasks for the members entered on those custom attributes.
    Also, Is it possible to assign a Role instead of the users in the custom attributes ?
    Meaning, Approving user assignment of a role named "Role A" will be done by users that belong to "Role_A_Approvers".
    Will appreciate pointers to the online docs, I've search and didn't find information related to the usecase I've described.
    Thanks,
    Meni,

    Bikash Bagaria wrote:
    Meni wrote:
    Hi,
    I'd like to add custom attributes to a role : "District security officer" and "Department security officer" (Can those be used for searching users? -- i.e. users lookup)
    When the role is to be assigned to a user, I'd like the workflow engine to open tasks for the members entered on those custom attributes.Try modifying the dataset. But I think there was an issue which someone reported here which said that you cannot add additional attributes to the role dataset. Logically it makes sense because there is no custom attribute for role in OIM so dataset should not allow it either.
    I've noticed that the design console allows adding custom attributes to roles.
    This can be done via Administration --> User Defined Field Definitions --> UGP (Table name).
    Once a field is added, you'll need to choose "Properties" and add a "Visible Field = true" prop to the attribute chosen.
    This will add a custom attributes section where your attributes will be shown.
    Question is how you can add a "search users" lookup instead of plain string for this custom attribute,
    and how those attributes will find their ways into the BPEL composite where business decisions based on those attributes may be taken (assign task per this attribute for an example).
    Also, Is it possible to assign a Role instead of the users in the custom attributes ?
    Meaning, Approving user assignment of a role named "Role A" will be done by users that belong to "Role_A_Approvers".You can create request for multiple roles in a single request and in your approval process you need to dynamically set the human task assignee based on the role selected. You also need to attach the approval process to orchestration level so that it generates a separate child request for each role selected.
    I'm not sure I understand how the proposed approach helps avoid the decoupling of users to role admins attribute.
    The intention was to have two roles, "Role_A" and "Role_A_Approver" where people that belong to "Role_A_Approver" will be assigned workflow tasks whenever Role_A is to be granted to end-users.
    Currently, each role has a "Role Admin" attribute, this attribute however holds a user and not a container of users (role)..
    Will appreciate pointers to the online docs, I've search and didn't find information related to the usecase I've described.
    All about requests
    Thanks,
    Meni,-Bikash

  • Multiple Plants for Material and customer

    Hi,
    I have downloaded the Plants from the R/3 to CRM using DNL_PLANT object. The BP with Role 'PLANT' are created.
    we  have multiples plants for the same material,
    I have downloaded the material master data, but in COMMPR01, the field DELIVERING LOC. is empty. Is that correct? How the system works with multiples plants.
    What I can do?
    Best regards
    Lidisaid

    Hi Lidisaid,
    Ideally, the field Delivery location must get populated. Just ensure that the followig settings have been maintained.
    1. Adapter Object MATERIAL
    Tcode: R3AC1
    Choose the tab Tables/Structures Within Object
    Add tables MARC and MARC_KEY
    Please also check that MARC_KEY that the field Inactive is not flagged for this entry.(This is needed to download the PLANT information as   interlinkages to CRM Online in the table COMM_IL_PRDLOC.)
    The plant information is seen in the Sales & Distribution tab of the product master by double clicking on the Distribution Chain.
    2. Add Relationship type PRDLOCS- LOCATION OF PRODUCTS
    Tcode: COMM_HIERARCHY
    Check if the corresponding Material Categories for which the PLANT information is to be downloaded has the interlinkage type LOCATION OF PRODUCTS maintained in the RELSHIP types for the products categories that are to be downloaded to CRM from R/3.
    Note:
    If no relationship types are assigned to the product category, the PLANT information will be downloaded to the interlinkage table COMM_IL_PRDLOC. But even if a single RELSHIP entry is maintained then additionally the RELSHIP type LOCATION OF PRODUCTS also have to be maintained. E.g. MAT_FERT
    Wish this helps.
    Regards,
    Shalini Chauhan

  • GRC AC 10- Multiple detour for single stage path

    Hi Experts,
    I wanted to know about a possibility or view. Do you know anyway where we can have multiple detour activated(like first detour 1 then detour 2 check) for single stage.
    Actually once we click on routing rule, we get only select single detour selection option.
    Please suggest idea.
    (I would like to update that we do not want system to have multiple level of approver but only single role owner stage).
    Final solution is creating custom detour having ability to handle multiple scenario but we are looking for no custom initiator)
    Regards,
    Nishant

    Hi Nis,
    unfortunately in standard solution only one detour path can be added to single stage.
    When we had such a challenge, like you described, we simply used custom initiator and this is truly the best option to go.
    In our case we wanted to have different path (detour) for roles with special attribute an in the same time different path in case sod issue occurs. In other words we wanted to have 2 detours condition on one stage like you want to have. The option that suites our needs in the best way was to have custom initiator rule.
    Filip

Maybe you are looking for