Request Administration in GRC10

Hi Experts,
I have two issues in GRC AC 10, for which I couldn't find an answer here. Help me if you have encountered the same and solved it.
1. When we search the request, we are not able to see the approver there with whom request is pending.
2. When we go to Access Request Administration, there we can't find where the request is pending, we are not able to approve any request with admin rights.
Regards,
Sabita

Hi Sabita,
Check a few things as we experienced this issue during our Development tests recently at a client.
1) Check that the Approver of the request has the correct GRC R/3 Role assigned. Also check that the roles have a owner assigned and that you have an escape route set up etc.
2) Has the MSMP workflow changed? We found that when for some reason it had not generated the version correctly, we had such errors.
3) Has there been a change to the initiators/BRF+ rules (if any used)? This sometimes does make a strange impact on the workflow from performing properly.
4) Once all this is checked, it might be worth re-creating the same request and trying to approve it again. We found that once we re-activated the workflows and ensured the custom BRF+ rules were re-checked and re-activated, we didnt seem to encounter that problem again.

Similar Messages

Issue with 'Archivation of Request Administration Data' in BW

I read couple of SAP notes and SDN about how to reduce database size in BW. There is one way told us 'Archivation of Request Administration Data'. The link is http://help.sap.com/saphelp_nw70/helpdata/en/42/ead8d7b55e1bd2e10000000a11466f/content.htm
The information from SAP help site is still not very clear to me about how to implement this activity step by step. Does anyone have experience on 'Archivation of Request Administration Data' in BW system? Please advise.
The last support package in my system is SAPKW70020.
Thanks a lot!
rajatina.

Hi Comandante Che Guevara
Please find the below links... this may be helpful to you...
http://help.sap.com/saphelp_nw70/helpdata/en/42/ea99e6b2161bc9e10000000a11466f/content.htm
https://cw.sdn.sap.com/docs/DOC-17088?treeid=DOC-7670
http://help.sap.com/saphelp_nw70/helpdata/en/42/ead8d7b55e1bd2e10000000a11466f/content.htm
Regards
Sudheer

Request Administration in GRC 10.

Dear GRC Experts,
Currently, my GRC system in I have two issues in GRC AC 10 (SP 10), for which I couldn't find an answer here. Help me if you have encountered the same and solved it.
1. When we search the request, we are not able to see the approver there with whom request is pending.
    - We have created a BRF+ initiator and agents. we rechecked again to make sure that we have not skipped any step.
    - Even the version generation was without any error).
    - Also made sure that the Approver of the request has the correct GRC R/3 Role assigned.
2. When we go to Access Request Administration, there we can't find where the request is pending, we are not able to approve any request with admin rights. In the other action there no drop down is available or no approve or submit. It has only "other Actions" as the option and it has only 'return' which prompts to return at any stage.
    - I have assigned all the admin / super user roles to the administrator, but still he is not able to see perform any activity, apart from cancel instance.
3. We have selected the functional area during the request, however we are not able to see post submission of the request. The administrator is not able to see the functional area selected. I have also checked in the user detail tab but could not find it.
Please advise.
Look forward to hear from you.
Regards,
Sahil.
Message was edited by: Sahil Bhanushali

Hi Sahil,
I have migrated to GRC V10 2 months ago and also have been struggling against issues with Request with no approver found and that could not be redirected in Administration.
I have reviewed all my Decision Tables - Table Settings - and marked "Return initial value if no match is found".   With this flag, I could define a Escape Route for Approver Not Found and set up a PATH with one stage for which a BRF+ rule find the proper GRC Support Team to be the approver.
In my case I have some people designed by Company pattern [NA_*] for North America, [SA_*] for South America an so on...
With that, I am now receiving the requests with no approver and use Administration to fix information in the request and then Return to the proper path. I can also you manual Forwards with return to involve proper managers.
Hope this can help you.
Vaner

Request Administrator isuse in OIM 11g

I assignd one OIM user (12345) to role as "Request Administrator" and trying to search all the requests raised in OIM.
I am not able to see all requests .It shows the requests only raised for 12345 user or raised by 12345 user but not other users request.
Please let me know the reason.
Thanks for help.

user123456 wrote:
What do you mean by Claim/acquire the task?There's a small button on top of the page in OIM UI which you can click to acquire the task to your self from some else.
There must be some Role in OIM 11g who can manage all the tasks/requests irrespective of whether it's created by them or assign by them.I doubt if that's simple, why want one single role to manage everything while you are assigning it to some other? Assign it to this role always then!
Do you have any idea about such kind of Role?No
Thanks !!

Archivation of Request Administration Data

Hello,
I need to archive SAP BW administrative data (Archivation of Request Administration Data ). Does anyone have practical experience with this? If yes ,please share with me.
I have read SAP help and just need your guidance.
Thanks a lot

Hi Comandante Che Guevara
Please find the below links... this may be helpful to you...
http://help.sap.com/saphelp_nw70/helpdata/en/42/ea99e6b2161bc9e10000000a11466f/content.htm
https://cw.sdn.sap.com/docs/DOC-17088?treeid=DOC-7670
http://help.sap.com/saphelp_nw70/helpdata/en/42/ead8d7b55e1bd2e10000000a11466f/content.htm
Regards
Sudheer

How to request Administrator or root to execute java programs?

How to request Administrator or root to execute java programs when the user is not enough permission?
as same as following image:
Windows : http://img151.imageshack.us/img151/6113/winrw5.gif
Linux: http://img374.imageshack.us/img374/8990/linuxsj4.png
Edited by: lauangus on 2008?10?13? ??9:15

Dear Sys Admin,
Would you please grant me and my group enough rights to do the tasks that have been assigned to us, we are using the following programs. They will need to asccess....
Sincerely,
lauangus
Note: this will usually have to be accompanied by appropriate supervisor signatures and endorsements.

Solution Manager Change Management: Transport Request Administration

Hi.
We want to use the CHARM functionality of Solution Manager to improve our transport operations. We have several customers and expend´s a lot of time making tranports to different systems.
I don want to activate CHARM completely. Which activities do i must perform, and which activities do i must leave ?
Regards
Alvaro

Hi Avinash
This is the Business Scenario: Our company is using SAP Solution Manager to perform monitoring and administration activities for over than 30 customers.
Dayly we espend over 85% of the basis team time making transport for all of the customers. We decide to set some internal politics to bundle transports, stablishing several releases of them, at specific hours of the day. So we want to use SOLMAN`S change logistics instead of CHARM Scenario to control and improve this activitiy, releasing time to perform other activities.
Regards
Alvaro

CUP 5.3. Request administration

Hi together,
How is it possible to have a look at all requests which are edited by the admin?
Our revisors want to see all requests, where the admin has to react.
Is it only possible to get this information about reports etc?
Thanks.
Alexa

Hi,
I know I know, but this is really not user-friendly! A clearcut solution would be fantastic
It can even be that the admin is also role-approver or even manager-approver, so that you have to go through a lot of requests for searching.....but you know...
But thanks a lot!!!
Kind regards,
Alexa

Error while approving the request ..

Hi ,
I have created a SOA composite where in the 1st level approver is manager and second level approval is a role . When i raise the request the task is assigned to the manager and manager approves it . Then the task is assigned to the Role . However the issue is , when any member of the Role tries to approve the task , the below error is thrown . Please note he is able to reject the request though , only in case of approving i see the below error .
Though it shows in the logs as warning but on the approval UI , it throws an error . ie ."An Error Occured "
Any clues Pls !
####<Aug 7, 2012 3:42:56 PM EEST> <Notice> <Stdout> <bubo.stadi.sonera.fi> <soa_server1> <[ACTIVE] ExecuteThread: '3' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <a94ee5b878875ef9:-47c429e2:138eb2557d6:-8000-000000000007d520> <1344343376602> <BEA-000000> <<Aug 7, 2012 3:42:56 PM EEST>
<Warning> <oracle.soa.services.workflow.persistency> <BEA-000000> <<PredicateImpl.getPredicateCondtion> Query values for columns that can contain multiple identity types (users, groups, approles) should be IdentityType or list of IdentityType objects. Incorrect use of 'WF_NONEXISTENT_ASSIGNEE' for column 'wfa.assignee'>>
####<Aug 7, 2012 3:42:56 PM EEST> <Notice> <Stdout> <bubo.stadi.sonera.fi> <soa_server1> <[ACTIVE] ExecuteThread: '3' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <a94ee5b878875ef9:-47c429e2:138eb2557d6:-8000-000000000007d51f> <1344343376602> <BEA-000000> <<Aug 7, 2012 3:42:56 PM EEST>
<Warning> <oracle.soa.services.workflow.persistency> <BEA-000000> <<QueryUtil.warnForUseOfNonIdentityTypeValues> Query values for columns that can contain multiple identity types (users, groups, approles) should be IdentityType or list of IdentityType objects. Incorrect use of 'WF_NONEXISTENT_ASSIGNEE' for column 'wfa.assignee'>>

You need to give approver the right on the request . Add the approver to the request administrator role .
Thanks
Suren

CUP open request can not be cancelled

GRC AC 5.3 SP 10 CUP
There are some old open CUP requests for super user access. I need to cancel them.
When I try to cancel a request from config - request - administration - it gives me a message that "failed to cancel follwing request".
Also if I click on the request number to see detail then it gives message - "Request Approval Screen is not displayed because Request Status has changed" and it does not show the request detail and remains in the same list of requests screen.
If I click on a closed request number - in next screen, it shows the same message but I can see detail request.
Recently We upgarded GRC to SP10 from SP4. Previously I cancelled CUP requests this way.

Hi Pal
The request can be cancelled by the approver of the request. You can however cancel the request as an administrator in the configuration section in CUP.

Is there any way to work around administrator passwords to reset?

I have lost record of my administrator name and password for my iMac. Is there any way around it to reset it? There are multiple users and each time someone tries to log off, it requests administrator rights, forcing a hard shutdown.

I don't understand why that should be happening. I'm not seeing anything, at least on my 10.6 in SysPrefs>Security, that would account for that.
http://support.apple.com/kb/HT1274

Populating Fire Fighter ID Descriptions in User Request Search Screen (FF ID)

Thought I would share this as I just recieved the note that fixes it and I have seen a couple of questions on it as an issue for their End Users. I applied it in our PRD environment and it worked like a charm.
1947101 - How can the Firefighter ID/ Role description be
maintained or updated for those FF Objects that do not have a description
Symptom
While creating a Firefighter ID/ Role Request, the
Firefighter Object (ID/Role) search does not return a description or the
description field is blank. So where can this description field be maintained?
Environment
Access Control 10.0
Emergency Access Management
Access Request Administration
Reproducing the Issue
Create an Access Request for Request Type: 'Emergency User
Access'
Search for a Firefighter ID/role
The returned FF Objects do not have a description
maintained.
Resolution
Execute the Program GRAC_EAM_MAINTAIN_FFOBJ_DESCR in SE38.
Manually enter the FF Object (firefighter ID/Role) which
does not have the description mainatined.
Manually enter the Connector ID.
Click on Execute.
In th next screen, manually enter the description for each
of the affected FF Objects and click on the Save button for each of the
objects.
This should update the FF Object description in all the
relevant FF Tables.
P.S. If this program is not available in your system, please
implement the SAP Note 1793691 or upgrade to Support Pack 11 or higher. Please
also check the related notes here if you face any issue with this program.

Its really helpful..Enduser will be able to distinguish among FF id with their description.
Thanks,
Mamoon

CUP 5,3 - More Approvers at one stage (who has the request?)

Hello
If I have a request where I order more Roles, there will be more Approvers that have to approve the request.
But how can the Admin see how still need to Approve?
I can't find a way to see this?
thank you
Kristian Madsen

Within the Access Management section, go to the Access Request Administration sub section and search for the request.
Once you have found your request, select it and click the Audit Log button. This should list out where and who to the request has flowed to and what actions were taken by the respective people per stage and if it is still open, which stage it is still at. It will take a while to decipher what is written in the log, but with a good idea of how the workflow is set up, you should be ok in understanding the log.

I disabled disc c on my hp laptop it has administration password or power on password

I'm locked out my laptop i was trying. To fix disc c and messed up everything now it requesting administration password or power on password after so many tries system disabled and 781384447 pops up

Ms try.
67890489
REO
I must inform you that these services are not endorsed by HP, and that HP is not responsible for any damage that may arise to your system by using these services. Please be aware that you do this at your own risk.
HP Expert Tester "Now testing HP Pavilion 15t i3-4030U Win8.1, 6GB RAM and 750GB HDD"
Loaner Program”HP Split 13 x2 13r010dx i3-4012Y Win8.1, 4GB RAM and 500GB Hybrid HDD”
Microsoft Registered Refurbisher
Registered Microsoft Partner
Apple Certified Macintosh Technician Certification in progress.

CUP 5.3 UAR requests are not being generated

Hello,
I am having a problem setting up UAR workflow in CUP.
I have analyzed my config and tried everything given on SAP note 1290835, but I cannot still generate UAR requests (I have set role owners as UAR reviewers, but unfortunately they are not getting an approval request for UAR review.
If anyone of you has an idea of what went wrong, please help.
Thanks,
HM

HM,
Since your UAR process is based on "Role Owner" as reviewer, please ensure that each role being reviewed has Role Owner information associated.
Generally ADMIN review is advisable for both UAR/SOD reviews so that GRC Admin can cancel irrelevant requests or adjusts the reviewers.
If you have enabled the ADMIN review, then after admin review is done, schedule the UAR Review update workflow tasks so the requests are pushed to next stage(First stage - Role owner as Reviewers) of UAR review path.
If ADMIN review is not enabled requests will be directly dispatched to the role owners ASA they are generated.
Ensure that you have correct workflow path configured, SMTP server connection is working properly (for emails) and appropriate email message configured under Reviewer stage.
Once requests are moved out of ADMIN review they are no longer available in User Review--> Request Review.
To verify the current open requests use CUP Config >Request->Administration to search for open UAR requests.
As you mentioned that requests were generated but Reviewers did not receive the email, please check SMTP config and Stage level email setting.
Also note that Reviewer-Coordinator mapping is an optional part if you want to have Coordinators monitor/track incomplete reviews. If you decide to use this feature, you have to populate it before UAR requests are generated(before UAR Review Load Data job).
Let me know if you still have any issues with UAR review (ensure to mention current CUP/ERM support pack level).
Regards,
Amol

Request Administration in GRC10

Similar Messages

Maybe you are looking for