Reg:Auto Approve Roles without Approvers for GRC 10.0

Hello,
Is anyone using this option on GRC 10.0 as according to my understanding , if someone selects a role and it has no approver then the role has to be assigned to the user automatically but it is not happening in my system..The request is going to decision pending and it is still looking for role approver.
Can someone provide their expertise on this issue .
Thanks
Uday

Hi Uday,
I have not used that functionality myself, as I find it too risky if a SOD or Critical risk would be introduced by assigning that role.
I would have thought that by setting the correct values in SPRO would have enabled this functionality. It might be worth checking the settings again and resaving it.
However, if you are purposly leaving the approver value blank for non-risky roles, as an alternativethe document below is worth a consideration for implementing via BRF+ in GRC 10. (I know the document is more GRC 5.3 related, but the concept is valid).
Link: [http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/203d2716-ef84-2d10-3f81-a6f6643e308d?QuickLink=index&overridelayout=true]

Similar Messages

Problems with Auto approval workflow (WS 10000060) for shopping carts

Hi SAP Network community,
I have got a problem with the auto approval workflow for shopping carts.
Basically the workflow approves the shopping cart once it was created.
But then the related Purchase Order remains in Status held. If the PO gets ordered manually then it is not transferred to the R/3 backend system.
For testing purposes also the one step approval workflow was activated. If the shopping cart gets approved by clicking into the detail approval screen (not by approving through the green tick box in the shopping cart overview) then the PO gets ordered and transferred to the backend system as normal.
But if the shopping cart gets approved by using the green tick box in the shopping cart overview then the same problem occurs as described for the auto approval workflow.
The system version is SRM 4.00
Did anybody have the same or similar problems with the auto approval workflow and what could be the reason for this problems.
Thanks in advance,
Robert

Hi
Which SRM Workflow Scenario are you using (IS it Item level workflow or Shopping cart level Workflow) ?
Are you using customized SRM Business workflow or Standard SRM Workflow ?
<u>Please go through these links as well.</u>
http://help.sap.com/saphelp_srm50/helpdata/en/2c/e68d406b305537e10000000a1550b0/frameset.htm
http://help.sap.com/saphelp_srm50/helpdata/en/eb/289f4099852e54e10000000a1550b0/frameset.htm
Incase you are using Standard SRM Workflow, please raise an Customer OSS message with SAP at the earliest.
Regards
- Atul

GRC 10.0 - Auto Approve default roles

Hello All,
Could you please help out me in the below scenarios.
     1) We have maintained default roles in NBWC- Access Management - Default roles.
     Also set the parameter 2038 to Yes- Auto approve roles without approver.
In MSMP we have maintained Escape path if approver is not found at the role level.
As default roles have no approver maintained request is taking the Escape Path which should not happen.
We just want to auto approve the defualt roles and other than defualt roles request should take escape path if no approver found.
     2) In other action its quite same as the above one.
     When we are using provisioning type REMOVE for role removal. Request also takes the Escape path as Defualt roles has no approver.
Once the ,Manager at first stage is approved, request should close for the removal type access.
Please advise. Thanks in advance.

In your custom initiator, you need to have mapped out all the scenarios of which path each line item in your request goes to.
The condition columns can be an array of attributes, i.e. Request Type, Role name, Role Connector (System the Role is in), Functional area etc.
In your case, if you want "default roles" auto approved, easiest thing to so is create an empty path (i.e. No stages) and have the initiator set so that if the "Role Name" is "X" (i.e. your default role), go to the path with no stages.
BRF plus Flate Rule - GRC Integration - Governance, Risk and Compliance - SCN Wiki

How to stop auto approval of requests by xelsysadm ?

Hello OIM-SOA experts, when I submit role request using xelsysadm user, the operational level request is auto approved eventhough I have custom approval in place. But requests submitted by others will go for approval process. How to avoid auto approval of xelsysadm requests for opearational level ? Is it possible to configure this ?
appreciate your suggestion
Thanks

How did you create Approval Policy ?
Did you create Request Level and Operation Level Policies ?
Did you select proper Request Type ?
Did you create proper rule which satisfy your expected results ?

PO in Held Status after SC got auto approval

Hi All,
We have a strange requirement where customer want for couple of vendors SC to be created for Zero value and auto approval. We are able to do it but after the SC get auto approved PO is going for Held status.We tried it to do it by ZReport to make its status "Orderd" ,even we are successful here also,but the PO is not triggering to any vendors.
Can any one have idea how to resolve it ?
thanks in advance.
CB

you mean to say after PO orderd did not find any Vendor in PO diplay from SRM ?
please check in RZ20 for this PO if there are any logs recorded

Additional Approvers for a changed shopping cart.

Good afternoon all, hope you are all well.
I hope one of you guy and guls can help me. We currently have one approver set to be able to approve changed carts and PO's can you tell me where we can add an additional approver, so basically they would both get informed there is a cart or po to approve?
I hope i have explained what i require, please feel free to ask me more questions if need be.
Regards
Steve

Hi,
There are 2 options.
1. Using SAP Business Workflow functions.
Define new Agent object in SWO1 and change the workflow container type of Agent_001.
[Change standard approvers for Invoice WF WS10400017 - 1 step approval|Change standard approvers for Invoice WF WS10400017 - 1 step approval]
2. Using BADI and N-step approval template.
Inplement the BBP_WFL_APPROV_BADI.
Regards,
Masa

Creation of auto approval process for assigning role for a user in oim11g

currently i'm doing a scenario like a user must be automatically assigned to a role by using approval policy where the user is already there in oim and then we use csv file in that we take 2 columns like userlogin and role name so by running this scheduled task user must be automatically approved to that role.But i have to use the default auto approve policy in oim without creating any bpel process for that so can any one suggest me how to proceed with this scenario.
Thanks in Advance for quick response.

If I understand correctly, You have users and their respective roles in csv file. Users are present in OIM. You want to assign those roles in csv file to respective users?
If this is the scenario, you need to write a custom code for schedule task which will read data from your csv file, create roles and assign them to respective users.
to create custom schedule task in OIM 11g, you may refer to:
http://docs.oracle.com/cd/E21764_01/doc.1111/e14308/scheduler.htm
regards,
GP

Leave for employee without approver is auto-approved.

Hi,
I'm trying to customize the HR_APPROVAL_CUSTOM pkg whereby I would want the leave for an employee without an approver not to auto-approve and instead raise an error message to sysadmin. Currently, when an employee who applies for leave has no approver, the leave will be auto-approved.
We are using position hierarchy in our system and also AME rules.
Appreciate if anyone can guide as to what would need to be done so that the leave does not get auto-approved.
Thanks in advanced.
Rgds.

Closing the message

Different approvers for 2 roles of the same name in 2 different systems

Hi experts,
in our SAP landscape we have roles of the same name in different systems. I couldn't find any possibility to select different approvers for these two roles in GRC 5.3 SP08.
For example role XYZ exists in system P1 and P2. In P1 I want to select only person A as role approver, in system P2 only person B.
Is there any chance to select an approver for a combination role and system?
Thanks,
Manuel

Hi Manuel,
Yes. You can create a custom approver determinator. Go to CUP>>Configuration>>Workflow>>Custom approver determinators. Chose create new.
CAD type: Attribute
Workflow type: Access Enforcer
Select your attributes and save.
Go back. Select your new approver determinator in change mode.
Click on the Approve button.
Create logic between the attributes and approvers.
Modify your role approval stage. Select your new custom approver determinator.
Regards,
Vit

Multiple Approvers for Role

Hi,
Is it possible to have 2 approvers (primary and secondary/back-up) for a role but only one them need to approve? Both should get the email notification but only one of them should approve. Escalation to alternate approver is not what I am looking for.
When the roles are imported into GRC, do I need to a two entries for each role since I need have 2 approvers for the role? or is Delegation a better option?
If Delegation is used, then do I have to setup both as role owners? or can delegated user approve with the need to setup as role owner?
Thanks,
Jay

Hi Jay
You can have 2 approvers for the same roles where either of the approvers can approve the request. You need to specify 2 entries for the same role in the import file. Both approvers will receive the email notification
A delegate dosent have to be specified as an access control role owner.
Thanks
Anthony

Auto approval for self registration request in OIM 11G R2

Hi all,
We have a requirement where we want end users to be able to self-register without needing any sort of approval. We are using OIM 11G R2 with the latest patchset.
The way to do it in 11G R1 is explained in the following document:
[http://docs.oracle.com/cd/E21764_01/doc.1111/e14316/unauth_selfservice.htm#BABFEIBF]
But now that R2 does not have any request templates, we are not sure how to do this. Any help will be greatly appreciated. Thanks for your time.
-sandeepc

refer this.
Configuring Auto-Approval for Self-Registration - Fails due to Organisation

User Licensing for Approvers in GRC AC 5.3

Hi all
I am looking for some clarification regarding the user licensing.
In CUP, we have managers who will need AEApprover role to approve the user requests.
In our case, we have SAP EP as the single point of entry to the application (both ECC & GRC AC). Also
some of the managers who are involved in the approval process (in CUP) do not need access to the ECC backend system.
So managers only need an entry in the AD(LDAP) which is the datasource for SAP EP, GRC AC. This means that GRC UME (authentication system for CUP) is the only place where the managers user profile are maintained.
Will these managers be accounted for SAP licenses?
My answer is No. The managers will not be accounted for SAP (prof/ limited prof) license cost as they do not have any access to the ECC system. All users in GRC system will be accounted for GRC AC licensing ( which is based on the operating budget of the organazation)
Appreciate if you can confirm whether my understanding is correct.
Thanks
Keerthika

Closing the request as this has been answered in the forum and I got a confirmative answer from SAP too..
Rationale:
GRC users dont count for SAP ECC license unless they have a dialog user account in the ECC system.
Thanks
Kee

Auto Approval Workflow for leave request Management.

Hi Guru's,
I am working on leave request Workflow i.e WS12300111.
Now i have to implement the auto approval of workitem if the approver doesnt take any action in 3days.
1. i have implemented deadline monitoring i.e in Latest end tab
refer date/time :- Expression Date : %DATUM% Time : %UZEIT% 3 days Action : Modeled Display test
Outcome : Reminder Mail
In outcome tab i have activated Processing obsolete.
i have created an activity if the deadline is reached so that it should auto approve the workitem.
in that activity i have created a copy of class CL_PT_REQ_WF_ATTRIBS created 1 method auto_approve. and used function module PT_ARQ_REQUEST_EXECUTE so that it will change the status from SENT to APPROVE.
But when i apply leave in portal , workflow starts but it doesnt reach to branch auto approve after the deadline is reached.
Please suggest is the deadline monitoring implemented correctly or not .
whether the auto approve method used is correct or not
or there is another solution to this
I have checked the SWU3 setting and it is green.
Please Advise
Thanks in Advance
chitis

Hi Rick ,
Thanks for the Reply.
But is there something wrong in deadline monitoring i have maintained for the task.
could you please share the procedure for implementing deadline monitoring specific to auto approval of the workitem.
thanks in advance
chitis

Block auto-approval for initiator of project

We have a need to requirement to block auto-approval for initiator of project invoices if he or she is also an approver.
Please can someone clarify if this can be done using functional setups or WF customization is required.

refer this.
Configuring Auto-Approval for Self-Registration - Fails due to Organisation

Nesting of Rules for Auto Group (Role) Membership Rules in OIM 11gR2

Does anyone know how to nest rules for auto group (role) membership in OIM 11gR2. The General rules in Design Console are no longer used for auto group membership and the rules that can be configured in the Role properties cannot be nested as far as I can see.
Any info is appreciated.
Thanks!

My mistake... this is possible in the web ui.

Reg:Auto Approve Roles without Approvers for GRC 10.0

Similar Messages

Maybe you are looking for