New User Request cannot be submitted in GRC AC 10

Hello Gurus,
We have configured GRC AC 10 along with workflows and for all scenarios things are working fine , except for "New User".
When we select
Request Type : New Request
Request for: Others
User : XYZ (This user is not present in "HR system(ERP system)", which is our data source for User search, user details & authentication)
and we select certain roles to be assigned to the user.
Then when we click "Submit Button" , it gives us an error , XYZ is not a valid User
In SPRO under CUP --> Maintain Provisioning Settings
For Global Provisioning under
"Create User if does not exist"
i have selected both "check boxes" for
1) For Change User Action
2) For Assign Role Action
Also in System Provisioning, i have ticket the option "create User".
Note: Under Data Source Configuration i have selected "End User Verification" as Yes.
Will you please provide your inputs on what could be the reason for getting this error .
Regards,
Victor

Hello Sabita!
Sabita Das wrote:
The system should validate in both cases whether User ID exists or not. It was working fine in AC 5.3 later patches.
If you want to validate against LDAP, SAP or other datasource, you should set this parameter to "YES", but in this case you have to make sure that the user exist there. If the parameter is set to "no", no validation takes place. If you want to create the user if the user doesn't exist in the "change account" request, you have another option to do it: Maintain Global Provisioning Settings --> Create User if does not exist
> In new account, we are able to create a request for a User ID which already exists.
This is not documented as a controlled in the parameter 2051. Is it a missing functionality??
Cheers,
Diego.
Edited by: Diego I. Yaryura on Feb 8, 2012 12:23 AM
Edited by: Diego I. Yaryura on Feb 8, 2012 12:26 AM

Similar Messages

  • New user request screen problems

    HI all,
    I am trying to use the funcitonalty where a new portal user clicks on "Register now" screen, it sends a message to the portal admin (which comes in "User administration->Users->New user requests") and the portal admin approves it and then creates the user.
    But this is not working for me. I try to create the new user from the register screen, it gives a blank screen (as no roles are assigned to this user) and it does not send mail to the admin.
    Please let me know if I need to do any configuration for this to work. This would be of great help for me.
    Thanks.
    Regards,
    Narahari

    Hi Narahari,
    For the user self registration to work you need to have companies enabled. The reason this the user sees no role attached as since the administrator has not accepted the user request the user is still a guest user. You need to enable the same. This link will take you through each step on how to confiugre self registration.
    http://help.sap.com/saphelp_nw04/helpdata/en/c6/37eaeccab21849847802ec3586676a/frameset.htm
    http://help.sap.com/saphelp_nw04/helpdata/en/8e/53921c6d00064b8c58e528fd914dd4/content.htm
    Cheers,

  • Forcing users to select existing properties in New User Request form

    Hi,
    We have just started using Service Manager and Orchestrator.  So far we have successfully managed to create user accounts using orchestrator and service manager.  Now we want to start forcing users to utilise the information we already have in
    our existing Active Directory environment.
    So for example, in the new user request form we want users to select an existing "office" using the attributes already in Active Directory as opposed to allowing them to type in an office and potentially accidentally misspelling the office name.
     What we would like to see is a unique list of offices and a user to select  
    How can this be achieved?  Any help would be greatly appreciated.
    Thanks

    Well, if you don't want to create a list manually, create a sealed management pack that defines the root of the new enumerator. Then create a workflow that will pull all users from AD, build the list of the locations used in AD and update the child enumerators
    if required.
    Cheers,
    Marat
    Site: www.scutils.com 
    Twitter: LinkedIn:
    Graveyard:

  • Cannot successfully add new user account, cannot activate Guest account

    I've been attempting to add a new user account on my MacBook but to no avail.
    After entering data and hitting the Create Account button in System Preferences, no new user appears in the list. Strangely, in the /Users folder of my HD, the new user files/folders have been created.
    If I attempt to add a new user with completely different account name and details, I have the same issue. If I attempt to add a previously inputted user again using the exact details as before, or merely the same account name, I receive a red error message indicating that the account name is already in use when hitting the Create Account button.
    Probably related to this, when I attempt to activate the Guest account, I get an infinite loading wheel next to the checkbox sentence "Allow guests to log in to this computer" and the Guest account in the user list pane remains disabled.
    I've tried instantly logging out/in and instantly restarting my machine after creating an account, erasing all related preference files... I'm fully updated. Even though it seems like the incorrect option, I can't think of any other solution than a OS reinstall. Can anyone help before I take more drastic measures?

    All I can think to suggest is to use Disk Utility to repair permissions, grab the combo update (search the forums - it seems to be a complete update often used to if an updated file has been corrupted from the rolling updates) and then another repair permissions.
    That sequence seems to be a fairly generic suggestion which solves a few issues, whether or not it will help in your case I don't know but that is one odd problem you have.

  • Creating a new user request from the user menu

    I have a menu item that calls a process to create a request for a new account (contractor/applicationID). I have the request form and workflow working, however, IDM uses the requestors context to create the request. How do I open the new view in the form and clear the requestor's user context out of the way?
    What I mean is when the form appears, if I select a resource, the attribute fields all appear with the requestors data filled in. The process I'm calling has a built-in form preceeding the workflow.
    Any help would be greatly appreciated.

    Hi,
    try to add the the tag
    <argument name='Subject' value='Configurator'/>inside your code to check in the view(i asume you use a userview to acomplish your task).
    Does it work then?
    Regards,
    Patrick

  • New User Request Provisoned Before Final Stage.

    Hi,
    We have a four stage workflow
    Manager>Security>Role Owner and BO(Business Owner).
    I found a request where it got auto proviosned at Role owner stage(user created roles assinged) and still displaying open status at BO.
    I have checked the option Auto Provision Type which is at the end of the request.
    Request took six days to get provisioned after it was approved at Role Owner stage.The only other thing i can see related to this is we have created service level of 6 days with type formula.Does SL has any relation to this.
    Thx,
    Mukesh

    At The buisnes owner stage whats the escalation configuration?
    regards,
    Chinmaya

  • Business Contact Manager issue with New Users

    I have an issue with a client when setting up Business Contact Manager for Outlook 2013. The client recently got a new employee and the employee was setup on an existing workstation that has BCM installed. When I launched Outlook 2013, and configured Oultook for
    the new user, BCM started and needed to be configured. I went through the procedure for connecting to a 'Remote Database' on the server, typed in the server name as requested, and clicked Continue. BCM searched for the database but could not find it. The existing
    user account on the workstation works just fine with BCM, and sees the remote database.
    My next step was to remove BCM and re-install. This is the latest version/release of BCM for Outlook 2013. The existing user account was able to configure BCM with no issues, and found the remote database without an issue. The new user account had the same
    issue as before and would not find the remote database.
    I logged onto the same workstation as the administrator account we use to perform Admin tasks. I launched Outlook, configured Outlook 2013, and was able to successfully configure BCM and connect to the remote database with no issues.
    I then created another New User on the server called Testaccount (TAccount), and logged onto the same workstation again, as this new user, and went through the same Outlook 2013 configuration and BCM setup. BCM has the same issue with this new user, and
    cannot locate the remote database. From what I can determine, this looks to be something related to New Users that are created on the server and BCM not locating the remote database. Existing users do not have this issue when configuring BCM and connecting
    to the remote database.
    Has anyone had this issue or seen this issue and knows of a fix to correct this so my client can use BCM with the new user account, and any future new users they hire?
    Thank you in advance for any assistance on this matter.

    If you want to sync subfolders then you will need third party software. (Like Pocket Mirror)
    Post relates to: None

  • How to notify (email) Change Manager when new Change Request is created

    Hi there, I am battling to generate an email when a developer creates a Change Request directly in the SolMan system. When he creates a new Change Request via CRMD_ORDER by filling in the Sold-to-Party, Change Manager, iBase etc., the message is automatically in 'To Be Approved'. I want to notify the Change Man ager as soon as a new Change Request has been submitted, but when I check the Actions tab in the message, no email action is listed or executed. I have edited SLFN0001_STANDARD... in SPPFCADM with conditions set. How can I create a email notification for the Change Manager as soon as a Change Request is in To Be Approved status?
    Message was edited by:
            Bernardt Nel

    Hi,
    Create a action definition with the following information:
    Processing when saving.
    No restriction.
    Check Schedule Automatically.
    Check Partner-Dependent.
    Select Partner Function for Change Manager.
    Determination Using Conditions that Can be Transported.
    Then you have to create an Start Condition such as; userstatus = to be approved.
    No scheduled condition is needed.

  • Spiceworks new user form

    I'm building my portal, and I want to have an online form that allows users to fill out a new user request.  I just have a couple things I'm having trouble with.
    1) when an end user clicks submit, it shows them a list of all tickets opened, closed, etc.  How do I remove that.  I just want them to see the submission successful, nothing else.
    2) I have one field for first name, another for last name.  for some reason the last name field doesn't' show up on the ticket.
    3) When the email comes to me showing a new ticket is created, the subject is ticket # 123 - User.  How do I get that to say New User Request for John Doe?  I selected to boxes to have the fields apply to subject, but it doesn't seem to do it.
    This topic first appeared in the Spiceworks Community

    If this process needs to happen after the first time that the users logs in, then I would suggest using a PEI (Portal Event Interface). If you can provide more information around your business requirements,w e might be able to suggest another approach.
    Phil Orionhttp://www.orionsmith.com

  • AE 5.1 - User provisioning issue - new user provisioned at end of request

    Hi All,
    re: AE 5.1 - User provisioning issue - new user provisioned at end of request when AE Config is set to NO
    We have an interesting issue. An Access Enforcer Change Request was initiated with the incorrect userID (the userID did not yet exist in the system) and that Change Request flowed through and made it to the end of the path. At the end of the path, it created a new userID (since the incorrect one was entered). However, we have the following AE Config:
    Auto Provisioning - Status: Auto Provsioning Type: "Auto Provision At End of Each Path"
    Auto Provisioning - Change Request: Create if user does not exist: "NO"
    Any ideas as to why the new userID was provisioned even though we have it set to "NO"?
    We are on AE v5.1, SP4.
    Thanks in advance!

    Gary,
    Similar kind of issue.,
    The Change User BAPI works differently than we normally think.
    It wipes off everything and reassign the modification.
    This I figured it in one of my implementation. You try add some roles to the user it wipes off all the roles and reassign the roles along with the new requested one's.
    The client is also in SP4 still they have issue.
    Will that not be good, AE checks for the ID before it actually submits the request.
    Thanks.
    Note : The issue mentioned by you doesnt exist in AE5.2
    Regards,
    Muthu Kumaran KG
    Edited by: Muthukumaran Krishnan Govindan on Mar 13, 2008 2:38 PM

  • New User cannot access OWA after migrate from Exchange 2007 to Exchange 2013

    Dear all,
    I recently migrate the Exchange server from Exchange 2007 on Windows Server 2003 to Exchange 2013 on Windows 2012 R2. I can open the mailbox moved from Exchange 2007 without any problem. However when I created a new user in Exchange 2013, the user cannot
    login the OWA, the browser will throw out following screen. Can anyone help me in this case. Thanks a lot!

    Hi Winnie,
    Thank for your reply. Below is the result, please note there has four exchange servers, HKAD and HKEX are the existing Exchange 2007 server. HKCAS1 and HKCAS2 are the new Exchange Server 2013 - both of xchange server 2013 are using owa.ksi.com.hk
    as the external URL.  
    Identity                      : HKAD\owa (Default Web Site)
    InternalAuthenticationMethods : {Basic, Fba}
    BasicAuthentication           : True
    WindowsAuthentication         : False
    DigestAuthentication          : False
    FormsAuthentication           : True
    LiveIdAuthentication          : False
    AdfsAuthentication            : False
    OAuthAuthentication           : False
    ExternalAuthenticationMethods : {Fba}
    Url                           : {}
    SetPhotoURL                   :
    Exchange2003Url               :
    FailbackUrl                   :
    InternalUrl                   :
    https://hkad.ksi.com.hk/owa
    ExternalUrl                   :
    Identity                      : HKAD\Exchange (Default Web Site)
    InternalAuthenticationMethods : {Basic, Ntlm, WindowsIntegrated}
    BasicAuthentication           : True
    WindowsAuthentication         : False
    DigestAuthentication          : False
    FormsAuthentication           : False
    LiveIdAuthentication          : False
    AdfsAuthentication            : False
    OAuthAuthentication           : False
    ExternalAuthenticationMethods : {Fba}
    Url                           :
    SetPhotoURL                   :
    Exchange2003Url               :
    FailbackUrl                   :
    InternalUrl                   :
    ExternalUrl                   :
    Identity                      : HKAD\Public (Default Web Site)
    InternalAuthenticationMethods : {Basic, Ntlm, WindowsIntegrated}
    BasicAuthentication           : True
    WindowsAuthentication         : False
    DigestAuthentication          : False
    FormsAuthentication           : False
    LiveIdAuthentication          : False
    AdfsAuthentication            : False
    OAuthAuthentication           : False
    ExternalAuthenticationMethods : {Fba}
    Url                           :
    SetPhotoURL                   :
    Exchange2003Url               :
    FailbackUrl                   :
    InternalUrl                   :
    ExternalUrl                   :
    Identity                      : HKAD\Exchweb (Default Web Site)
    InternalAuthenticationMethods : {Basic, Ntlm, WindowsIntegrated}
    BasicAuthentication           : True
    WindowsAuthentication         : False
    DigestAuthentication          : False
    FormsAuthentication           : False
    LiveIdAuthentication          : False
    AdfsAuthentication            : False
    OAuthAuthentication           : False
    ExternalAuthenticationMethods : {Fba}
    Url                           :
    SetPhotoURL                   :
    Exchange2003Url               :
    FailbackUrl                   :
    InternalUrl                   :
    ExternalUrl                   :
    Identity                      : HKAD\Exadmin (Default Web Site)
    InternalAuthenticationMethods : {Basic, Ntlm, WindowsIntegrated}
    BasicAuthentication           : True
    WindowsAuthentication         : False
    DigestAuthentication          : False
    FormsAuthentication           : False
    LiveIdAuthentication          : False
    AdfsAuthentication            : False
    OAuthAuthentication           : False
    ExternalAuthenticationMethods : {Fba}
    Url                           :
    SetPhotoURL                   :
    Exchange2003Url               :
    FailbackUrl                   :
    InternalUrl                   :
    ExternalUrl                   :
    Identity                      : HKEX\owa (Default Web Site)
    InternalAuthenticationMethods : {Basic, Fba}
    BasicAuthentication           : True
    WindowsAuthentication         : False
    DigestAuthentication          : False
    FormsAuthentication           : True
    LiveIdAuthentication          : False
    AdfsAuthentication            : False
    OAuthAuthentication           : False
    ExternalAuthenticationMethods : {Fba}
    Url                           : {}
    SetPhotoURL                   :
    Exchange2003Url               :
    FailbackUrl                   :
    InternalUrl                   :
    https://hkex.ksi.com.hk/owa
    ExternalUrl                   :
    Identity                      : HKEX\Exchange (Default Web Site)
    InternalAuthenticationMethods : {Basic, Ntlm, WindowsIntegrated}
    BasicAuthentication           : True
    WindowsAuthentication         : False
    DigestAuthentication          : False
    FormsAuthentication           : False
    LiveIdAuthentication          : False
    AdfsAuthentication            : False
    OAuthAuthentication           : False
    ExternalAuthenticationMethods : {Fba}
    Url                           :
    SetPhotoURL                   :
    Exchange2003Url               :
    FailbackUrl                   :
    InternalUrl                   :
    ExternalUrl                   :
    Identity                      : HKEX\Exadmin (Default Web Site)
    InternalAuthenticationMethods : {Basic, Ntlm, WindowsIntegrated}
    BasicAuthentication           : True
    WindowsAuthentication         : False
    DigestAuthentication          : False
    FormsAuthentication           : False
    LiveIdAuthentication          : False
    AdfsAuthentication            : False
    OAuthAuthentication           : False
    ExternalAuthenticationMethods : {Fba}
    Url                           :
    SetPhotoURL                   :
    Exchange2003Url               :
    FailbackUrl                   :
    InternalUrl                   :
    ExternalUrl                   :
    Identity                      : HKEX\Public (Default Web Site)
    InternalAuthenticationMethods : {Basic, Ntlm, WindowsIntegrated}
    BasicAuthentication           : True
    WindowsAuthentication         : False
    DigestAuthentication          : False
    FormsAuthentication           : False
    LiveIdAuthentication          : False
    AdfsAuthentication            : False
    OAuthAuthentication           : False
    ExternalAuthenticationMethods : {Fba}
    Url                           :
    SetPhotoURL                   :
    Exchange2003Url               :
    FailbackUrl                   :
    InternalUrl                   :
    ExternalUrl                   :
    Identity                      : HKEX\Exchweb (Default Web Site)
    InternalAuthenticationMethods : {Basic, Ntlm, WindowsIntegrated}
    BasicAuthentication           : True
    WindowsAuthentication         : False
    DigestAuthentication          : False
    FormsAuthentication           : False
    LiveIdAuthentication          : False
    AdfsAuthentication            : False
    OAuthAuthentication           : False
    ExternalAuthenticationMethods : {Fba}
    Url                           :
    SetPhotoURL                   :
    Exchange2003Url               :
    FailbackUrl                   :
    InternalUrl                   :
    ExternalUrl                   :
    Identity                      : HKCAS2\owa (Default Web Site)
    InternalAuthenticationMethods : {Basic, Fba}
    BasicAuthentication           : True
    WindowsAuthentication         : False
    DigestAuthentication          : False
    FormsAuthentication           : True
    LiveIdAuthentication          : False
    AdfsAuthentication            : False
    OAuthAuthentication           : False
    ExternalAuthenticationMethods : {Fba}
    Url                           : {}
    SetPhotoURL                   :
    Exchange2003Url               :
    FailbackUrl                   :
    InternalUrl                   :
    https://hkcas2.ksi.com.hk/owa
    ExternalUrl                   :
    https://owa.ksi.com.hk/owa
    Identity                      : HKCAS1\owa (Default Web Site)
    InternalAuthenticationMethods : {Basic, Fba}
    BasicAuthentication           : True
    WindowsAuthentication         : False
    DigestAuthentication          : False
    FormsAuthentication           : True
    LiveIdAuthentication          : False
    AdfsAuthentication            : False
    OAuthAuthentication           : False
    ExternalAuthenticationMethods : {Fba}
    Url                           : {}
    SetPhotoURL                   :
    Exchange2003Url               :
    FailbackUrl                   :
    InternalUrl                   :
    https://hkcas1.ksi.com.hk/owa
    ExternalUrl                   :
    https://owa.ksi.com.hk/owa

  • Cannot log in to new user accounts

    I am a long time Apple user and am completely confounded by a problem I am having creating new user accounts on my G4/400 PowerMac running OX 10.4.11. I've been attempting to setup some user accounts for my kids to use. I have no problems setting up the accounts but when I log out of mine and try to log in as them the login window shakes from side to side indicating an incorrect password. This is something that I had a problem a year ago and never solved and today I am trying once again with out success. I feel like I am doing everything correctly since I've been able to do this on my G3 iBook and MacBook.
    Here are a few things I've also done.
    -repaired permissions on the drive ( I have 2 in the machine right now but the other is just my iTunes LIbrary drive)
    -deleted the old user accounts that I setup but couldn't access.
    -tried setting up more new accounts
    -repeated the process several times without ever being able to successfully login to any of the new accounts that I created.
    Any advice to solve this problem would be appreciated.
    Thanks
    Chris

    Hi cc_mac,
    I don't know if you have solved this one yet, but I had exactly the same issue when I recently had a hard drive failure and had to re-install everything. I had copies of all my files, but when I went to set up the user accounts, I could create each account, but I couldn't log in.
    There is a simple solution, you will need to be in an admin account and you will need to use the command line, so open up a terminal window.
    Use the following command for each account you need to fix:
    sudo passwd <username>
    where <username> is the account name that you cannot currently log in to.
    You will need to enter your admin password to allow you to use sudo, so do that. Then you will be asked to type in the new password for the new account. Just to be absolutely sure, you will be asked to re-enter the new password, so do that, and you are done.
    Log out of your admin account, this should bring you back to the log in screen. Now, if everything has gone according to plan, you should have an operational user account.
    I'm not sure what the cause of this issue is but it might be some sort of permissions issue happening in the background. Nevertheless, manually setting the password this way seems to have fixed it for me. I sincerely hope this helps you too.
    Kind Regards,
    Mark D.

  • I cannot access the internet, I tried to answer that said to go to settings, safari, tap clear history, cookies and cache, cut off, then on, but it did not work.  When I go to internet the screen is grey??? please help I am a new user!!

    I cannot access the internet the screen is grey, I have tried by using the answer from someone but it does not work...I went to settings, tap safari, then clear the history, cookies, and cache, then turn off ipad.  When I did that twice, it did not work.  How long does it take for the clear history to work?  I am a brand new
    user of the ipad2 and I am disappointed that this is happening already.

    Have you been able to access the internet previously and now it's suddenly not working, or are you still trying to access the internet for the first time on your iPad?  Are you at home trying to connect through your home router?  If you are at home, did you put your home routers encryption code as your password?  The encryption code is what your iPad is looking for and it is usually found on the router and is typically a 13 digit combination of letters and numbers.  Let us know......

  • Have just bought my youngest an Ipod - set up new user account on the computer, created a new email account.  However, cannot get this Ipod to connect to the Itunes store.  What am I doing wrong? Have spent hours on this!!!!

    have just bought my youngest an Ipod.  Have set up a new user accout as suggested by the man in the Apple store, got a separate email account and everything seemed ok.  HOwever, cannot get it to connec to the Itunes store so cannot redeem any vouchers.   I have now spent hours on this and am rapidly losing patience!  Can anyone help please.

    This may help.
    Can't connect to the iTunes Store
    What happens whenyou try to connect? Error messages?

  • IE10 Windows7 - iTunes opens maybe 3 times and then it thinks i am a new user.  I ge the license agreement again.  Apple SR Techs cannot figure it out.  Does this have to do with IE10?

    Windows 7 - installed IE10.  Now every few times iTunes is opened I get the 'user license' agreement as if i am a new user.  Apple SR techs have been working with me for weeks and have NOT solved this problem.  i have a iPhone 4S, but this happens before I even plug in.  Can you help?  Also, second question:
    Also, I have two apple accounts (mistake) and apple says that they cannot delete the invalid one!  When I finally can get on iTunes it asks if I want to merge or replace - I am told to do neither (i am syncing by plugging in the 4S to my computer - i have Outlook).  SO... right now i am unable to sync.  SR Tech says having the 2 accounts is not the problem - actually - 2 techs said it was and 1 says it is not.  SO frustrating!  Is there a way to resolve this?
    Thanks - CJ Texas

    McAfee AntiVirus by any chance? See the thread Why does iTunes delete my itunesprefs.xml?
    Not so sure about the suplemental question, but see Recover your iTunes library from your iPod or iOS device for tips to make sure you don't lose content from the device.
    tt2

Maybe you are looking for