Role search in request

GRC 5.3 sp9, in CUP when creating a new request, if a company is selected on the main screen, when you search for roles, it comes back "no roles found". If you remove the company selection, then the roles show up. What could cause this?

Alpesh,
I have a little question for you. I am having a little trouble; I cannot get a role by company attribute in CUP. If you can, please save me.
Here is what I did:
1. Under Configuration>Role Attributes>Custom Filed in ERM, I set up a custom filed u201CCOMPANYu201D and put some values (COMP1, COMP2, etc).
2. Under Configuration>Roles>Attributes in CUP, I also set up companies that are exactly the same as those in ERM.
2. Then, I created a role (ROLE1) in ERM and gave a company attribute (COMP1) to that role. Now, ROLE1 should be associated to COMP1, theoretically, right?
3. However, when I crate a new user in a CUP request and then search for a role (ROLE1) by selecting company attribute (COMP1), the role (ROLE1) does not show up. This is my problem.
PS: I have no problem getting a role by functional area, business process, or other predefined attributes in CUP.
Can you possibly tell what went wrong?
HM

Similar Messages

CUP 5.3 (SP9) Role search in a CUP request

Dear Experts,
I have a problem. I cannot select roles by company selection in a CUP request. I believe I am not associating companies to roles correctly...I don't know what went wrong and what additional procedures that I have to follow to fix this problem.
I need this selection feature since we are going to give a set of roles to users (or let them select) according to the company that they belong to.
Here is what I did basically:
1. Under Configuration>Role Attributes>Custom Filed in ERM, I set up a custom filed "COMPANY" and put some values (COMP1, COMP2, etc).
2. Under Configuration>Roles>Attributes in CUP, I also set up companies that are exactly the same as those in ERM.
2. Then, I created a role (ROLE1) in ERM and gave a company attribute (COMP1) to that role. Now, ROLE1 should be associated to COMP1, theoretically, right?
3. However, when I crate a new user in a CUP request and then search for a role (ROLE1) by selecting company attribute (COMP1), the role (ROLE1) does not show up. This is my problem.
PS: I have no problem getting a role by functional area, business process, or other predefined attributes in CUP.
Please save me if you can.
HM

Hi Frank,
1. The company ID is identical in ERM and CUP, and properly assigned to roles?
=Yes (double checked).
2. You have imported the roles from ERM to CUP?
=Yes (CUP>Roles>Import Roles/Groups, and the role source is ERM).
3. Do the roles show up with the correct company assigned in CUP Role Search?
=No (please see below commnets).
When I search roles in ERM (Role Management>Role>Search), I can see the company ID under the tab "Custom Attributes".
When I search roles in CUP (Config>Roles>Search Roles), I don't see the company ID anywhere including the tab "Company" and "Custom Attributes".
Does this give you any clue?
Thanks,
HM

GRC 10 Not able to search roles in Access Request Creation

Hello Experts,
I am unable to search for roles while creating access request by giving system name.
I am able to search with any other search criteria except system.
When I look for valid entries for System I get the following connector group values:
ECC - (Custom Connector Group)
SAP_BAS_LG
SAP_ECC_LG
SAP_HR_LG
SAP_R3_LG
All the above connector groups are pointing to the same system XXXCLNT100. I want to get only ECC as the result when I search for the system (Probably then it might work right).
Others that start with SAP are linked to the XXXCLNT100 for generating rules after activating BC Sets.
Any ideas how to get this work !!
Thanks and Regards,
Ajesh Raju.

Found Note:
Note 1654033 - Role search by System is giving same result
Regards,
Ajesh.

Error in CUP " Role Search" type of access as transaction

Hello
This has been talked about for a Role in this thread.
Error in CUP " Role Search"
When the approver want to select an Role by clicking the select role tab and then select the type of access as transaction I get No Records Found.
I do get when I select the type of access as Roles. The above thread has helped me in resolving that.
Please help me with this. I am stuck.
Thanks

Just to add that
In CUP-> Configuration->Roles--->Search Roles
When I click on the Roles I can see the associated transaction.
But When I create a Request-----> Select roles and then Select the access type as transaction.
I dont see any of that
Any help regarding this. Now sure why those transactions are not pulled.
Thanks

How to add dynamically a role in a Request Template

Hi all,
We have created a job that reads roles from a custom table and creates them in IDM. We have also a request template of type Assign Roles that has all the allowed roles that can be assigned to a user. We have a requirement to add a role from the custom table in the IDM and also add it in allowed roles of the Request Template so that it will be available. Our problem is that we cannot find an API that we can call in order to add the roles in the request template. Does anyone know how we can do this?
Thanks in advance,
Kostas

Did you look at RequestTemplateService? I believe you can use this to modify your template pragmatically. Thus the step would be to read the custom table, create role in IDM and the modify the template pragmatically to add the newly created role in the available role which can be requested.
http://download.oracle.com/docs/cd/E14571_01/apirefs.1111/e17334/oracle/iam/request/api/RequestTemplateService.html
HTH,
BB

Portal Roles Search & TREX Search

Hello,
We need to search some pages and documents. The search results should be based on the permissions set for that user on the pages and documents. We created Portal Roles Search. It works fine for pcd objects. But it doesn't work for documents.
When we create an index with TREX Search service, it works for documents. But it doesn't consider the permissions.
When there are 2 search indexes, one with TREX Search and the other with Portal Roles Search, the TREX Search throws WcmException.
Any ideas?
Regards,
Rukmani

Hi Sudha,
Portal Roles Search
The objects found using the portalRolesSearch index service in the PCD cache are converted to KM objects and can be displayed in the search results list.
http://help.sap.com/saphelp_nw2004s/helpdata/en/b2/d59a4271c80a31e10000000a1550b0/content.htm
TREX Search
Enables the retrieval of information
http://help.sap.com/saphelp_nw70/helpdata/EN/42/60adaa032c1422e10000000a114cbd/content.htm
TREX Classification
Helps in the classification of documents.Classification causes documents to be assigned to one or more categories of an existing taxonomy
http://help.sap.com/saphelp_nw04s/helpdata/en/bf/a17a05d15211d6b2c700508b6b8a93/content.htm
It depends on the kind of search you want to enable for your project.
Hope this helps.
Cheers,
Sandeep Tudumu

Directory Services User/Role Validation concurrent request impact

we have the Java WF Mailer active and have users that receive WF notifications via email and the worklist. If we are are constantly running the Workflow Directory Services User/Role Validation concurrent request, what will this do to them?
Thanks & Regards,
sree

There should not be any impact on the notifications.
Please see (Questions On The "Workflow Directory Services User/Role Validation" Program [ID 369279.1]) for how frequent you should run this concurrent program.
Thanks,
Hussein

No Roles In Access Request - GRC 10 SP06

Hello Experts ,
With GRC 10 SP 06 ,I am facing strange issue .In Access request when I search for roles to be assigned I am not getting any result .
I have performed all post installation system and same working with SP 05 in other landscape .
Important steps like running back ground jobs for user.role.profile synch role import all is done .
Thanks & Regards
Ashish

Hi,
You have hit a similar problem I faced after moving to SP06.
What is the value assigned to the "Role Status"? If it is not "Production/PRD", then Access request doesn't allow it to be displayed as a selectable option for assignment. Prior to SP06, this was not checked, but SP06 got updated to ensure roles that are not in Productive use status can not be assigned for usage.
Once you change this status over in the roles you wish to make available for assignment via Access Request, you should be able to search and select them.
Hope that helps.

Jlaunch processes rapidly increase when a search is requested.

Hi all,
We have questions concerning searches in Enterprise Portal 6.0. We originally installed EP6.0 and TREX on the same UNIX (Solaris) host. We recently ran some load tests which indicated our installation was inadequate to support the projected usage. What we experienced is that performance navigating from role to role, workset to workset and page to page, while not stellar, was acceptable. We then started including searches in the load mix, the jlaunch processes rapidly climbed, consuming 40 - 50% of the CPUs, throughput went down, and response time went up. It got so bad that users could not log on and searches would time out or never complete.
So, we installed TREX on a separate host. Once again during load testing, navigational performance was acceptable until we started loading searches into the mix. Again, on the portal host, the jlaunch processes went to 40 - 50%. This time however, searches did not seem to be impacted and completed as one might expect them to. The TREX host hardly showed any change in processing statistics before, during or after the load test.
It appears to us that the TREX processes are not much of a load on the TREX host, but the actual search requests are an extreme load on the portal host which significantly impact it's performance. Is this normal and/or expected behavior? These tests were done with about 25% of our expected load or about 200 - 250 users.

Hi Paul,
I noticed this problem too when running SP15/Oracle and doing searches.
We upgraded to SP17 and the searchs are now much faster.

User role for service requests from the SSP

Does the End User role have enough permissions for users to create service requests from the SSP? I know for incidents it is but I am not sure about service requests. If you go through the Service Catalog Checklist, step 5 to create the User
Role brings up a new role based on the Author role and not on the end user.

here step by step procedure with user access.
http://www.concurrency.com/blog/scsmportalpermisions/
Cheers
Antoine AL Ibry

How to delete role through Transport Request

Hi,
when I am deleting Role it is Not asking me for transport request ..this is what i needed.can anybody solve my problem
regards
Gaurav

Hi,
Please check if your role is already locked under some Transport request. If so it wont pop up any TR.
If it is locked under some TR, make sure you detach it from the TR and try again it will pop up a TR screen
Please revert in case of issues
Regards,
Pramod

How to raise role creation/modification request in AC 10

We are implementing AC10. I have issue more related to the process followed than technical. Please suggest from your experience.
We found that we can raise the request for new user account, role assignment to user, etc in Acess Request(formerly CUP), but we cannot raise the request for role creation, role modification. This is directly done in Role management. My question is, how the security admin will recieve the requests for creating or maintaining the roles. Is it necessary to use ticketing tool for users to raise the request for role creation and modification.
Thanks everyone for your valuable solutions.

Dear Ashish,
Whatever you have mentioned is correct to have the common platform for every request, either for user creation or role creation.
But what we decided earlier, that the end users can raise the request in CUP directly, rather than involving security admin. But after realizing that there is no request type for role creation, I think we have to use our ticketing tool as a common platform.
Request will come to security admin from the ticketing tool and than he will create the request in CUP, thereafter it will follow the approval workflow. Only problem I see in this, it goes to the manager twice, once in ticketing tool and than through CUP workflow. i think we need to take out the manager stage from the workflow.

AE-How can we restrict a role approver to request or approve is own access?

Currently, in our AE a role approver can submit a request to add a role for which he is the approver and therefore he will be able to approve it as well.
We would like to not authorize someone to approve his own access request.
Is that possible and how ?

Patrick-
That enhancement is available in Access Control (CUP, formerly AE) 5.3. It is not available in 5.2.
Ankur

Customizing user search in Requests

Hi,
Is there a way to customize the user search fields while making enable, disable or modify requests? Also is there a way to suppress the justification and effective date fields from the request?
Thanks

For customization of search fields you can refer: Re: How to restrict Request for Others user search based on Employee Type and some pointers about justification filed: Re: OIM 11g - Customizations to the Create Request screens
-Bikash

Relation between business process and functional area during the role search

Hi Experts,
We have 2 functional areas in which we have different business process involved.
During the Access request, if the user selects one functional area then business process related to that functional area should come.
Is there any functionality in GRC, where the mapping between functional are and business process to be done?
Thanks,
Sriram

Hi Sri,
there is relationship between 'Business process' and 'Sub-business' process as in configuration parameter you can setup that once business process is selected only relevant sub-process will be selected.
There is no such a relation between functional area and business process.
Filip

Role search in request

Similar Messages

Maybe you are looking for