Workflow for authorization requests

Hi
First of all
I don't normally work with SAP security and authorizations, so please tell me if my question is in wrong forum.
My question
Does any Workflow for authorization requests exist.
If I search SDN and google, I get lots of hits about authorization for workflow, but what I search is workflow for authorization requests.
Background
I often observe time wasting discussions about "who should have authorization for what", and I think this is caused by lack of well defined procedures describing the business rules and process for granting authorizations to a specific user.
Of course I understand the need for a more overall design and implementation of authorizations, but at the same time I observe, that a very common scenario is, that a new or existing employee is asked to take care of some business task or maybe a system maintenance task like customizing, but the user don't have the correct authorizations to perform this specific task.
So
Does any standard workflow exist for handling the process of requesting, approving and implementing authorizations?
Or is there a better approach to this problem?
Kind regards

Hi,
if you mean a request for new role assignment then there is no standard SAP workflow for this. You could implement. SAP offers other tools that can help you to achieve this. GRC suite has a tool for role approvals and it's super easy to implement approval workflow in SAP IdM. 3rd party IdM solutions have workflow capabilities as well. External tools such as SAP IdM allow you to perform role assignment over multiple SAP and non-SAP systems (there are other benefits as well).
If you mean request to add missing authorization object to already existing role then I don't  think there is a need for workflow. In stable environment this should not happen very often and you still have to create/modify security role in DEV and then posh it through QA environment to production.
Cheers

Similar Messages

  • Standard workflow for downpayment request approval

    Hi,
    Is there any standard workflow for downpayment request approval?
    Please suggest.

    Hi,
    There is no standard flow for the down payment request generally in many projects down payment requests are rarely created process starts with Down payment request F-47 then Down payments F-48
    then clearing of Down Payment f-54
    Down PAyment request is just a template.If you want to use then use then u can skip this step.
    regards
    Deepa

  • Workflow for Payment Request

    Hello ,
    Is there any standard workflow(s) for Payment Request Release procedure (T-Code : F871)?

    Hi Anurag,
    To search a workflow, go to t-code PFTC, select workflow template and give the workflow ID.
    It would open the workflow template for you.
    Also you can go to SWDD and enter the workflow ID. This would open the entire workflow and would display all the steps the workflow has in a graphical manner.
    To find the workflow associated with Payment Request Release procedure (T-Code : F871), go to SWELS and activate the event trace. Now execute your transaction F871. Go to SWEL and see all the workflows triggered for Payment Request Release procedure (T-Code : F871) events. You can also find the workflow linkages in SWETYPV t-code.
    Hope this helps!
    Regards,
    Saumya

  • Workflow for appropriation requests

    Hi friends,
    This is regarding the approval process for appropriation requests.
    The necessary Event linkage activation, partner determination procedure, appropriation request types, defining of approval levels for AR and other necessary configurations. When I am clicking the "for approval" button, the workflow gets started. But the corresponding person is not getting the mail in his inbox for approval.
    Please give a solution asap.
    regards
    Pratap.V

    Hi Sreenivas,
    I already did this. Still the problem exists.
    Frankly speaking, I know I am making a silly mistake somewhere because I have done all the major settings required. And I am finding it difficult to trace this small mistake. It will ne good if you can send some screen shots of all the configuration required for this.
    regards
    Pratap

  • AE 5.1 and 5.2 - Configuring parallel workflows for "Delete" Request type

    Has anyone configured parallel workflows for the "Delete" Request type?  I want to configure 1 for SAP and 1 for non-SAP applications, but have been unable to do it successfully. 
    The initiators I have created that do not work are:
    1 - SAP initiator:
    SAP application with "OR" condition
    Request Type = Delete with  "AND" condition
    2 - Non-SAP initiator:
    Non SAP application 1 with "OR" condition
    Non SAP application 2 with "OR" condition
    Non SAP application 3 with "OR" condition
    Request Type = Delete with  "AND" condition
    When I create a request to Delete a user with SAP app and Non SAP app I get the error:  "Error in creating request. Multiple Initiators, [NON SAP DELETE, SAP DELETE] Found."
    Based on what I am reading on p. 58 of the AE52ConfigGuide.pdf, this should be possible to do.  Does anyone have any suggestions?

    This is my understanding.,
    A request cannot have more than one initiator. You cannot trigger multiple initiators for one single request. In your case both attributes SAP & Non SAP application are given with OR condition which makes both the initiators alike. As mentioned in the documentation the request for deletion can be made to happen in both SAP & Non SAP application by having forked path (for this the initiator should be OR Application SAP OR Non SAP Application AND Request Type Delete). Given the other option then it should have different initiator for SAP and Non SAP applications by giving them with AND condition.

  • How to find the workflow for Change Request for the PO's

    Hi All,
    We have a PO which is pending and we can't receipt it again nor make payment on this. After checking the Approval history for that PO we found that the change request has been made. The change request was to change the amount to be paid to R39196 instead of R58237.00. We don't know where to check the workflow for the change request to identify the cause.
    what i need to know is how to find the workflow for that change request? The other workflows can be checked using the po_header_id for the PO's but i am confused with the change request workflow
    Your input will be highly appreciated.
    Thanks in advance
    Rgds,
    Sonia

    For 11.5.10.2 run this query to determine the keys to search on:
    Select wf_item_type, wf_item_key from APPS.po_change_requests where document_type = 'PO' and Document_num = 'put-PO-number-here'
    Then use the keys returned by the query to look up the Workflow in
    Workflow Administrator Web Applications / Administrator Workflow / Status Monitor
    Search using the results returned in fields "Type Internal Name" and "Item Key" in Status Monitor
    The query for change requests on a specific Requisition would be:
    Select wf_item_type, wf_item_key from APPS.po_change_requests where document_type = 'REQ' and Document_num = 'put-Req-number-here'

  • Workflow for Purchase request

    Hi all,
    I would be glad, if someone can let me know weather SAP B1 9.0 supports purchase request object in Workflow.
    If yes let me know the process.
    Regards,
    Neslin

    Hi Aarya,
    Check whether approver 1 can release PR for approver 2 and approver 3 with normal ME54N transaction. If yes, then its an issue of authorization.
    Check out the authorization object M_EINK_FRG in user profile in this case. I think the authorization for release codes assigned to approver 2 and 3 is given to approver 1.
    Nikhill

  • Auto Approval Workflow for leave request Management.

    Hi Guru's,
    I am working on leave request Workflow i.e WS12300111.
    Now i have to implement the auto approval of workitem if the approver doesnt take any action in 3days.
    1. i have implemented deadline monitoring i.e in Latest end tab
    refer date/time :- Expression Date : %DATUM% Time : %UZEIT%    3 days Action : Modeled  Display test
    Outcome : Reminder Mail
    In outcome tab i have activated Processing obsolete.
    i have created an activity if the deadline is reached so that it should auto approve the workitem.
    in that activity i have created a copy of class CL_PT_REQ_WF_ATTRIBS created 1 method auto_approve. and used function module PT_ARQ_REQUEST_EXECUTE so that it will change the status from SENT to APPROVE.
    But when i apply leave in portal , workflow starts but it doesnt reach to branch auto approve after the deadline is reached.
    Please suggest is the deadline monitoring implemented correctly or not .
    whether the auto approve method used is correct or not
    or there is another solution to this
    I have checked the SWU3 setting and it is green.
    Please Advise
    Thanks in Advance
    chitis

    Hi Rick ,
    Thanks for the Reply.
    But is there something wrong in deadline monitoring i have maintained for the task.
    could you please share the procedure for implementing deadline monitoring specific to auto approval of the workitem.
    thanks in advance
    chitis

  • Workflow for transport request

    Hi experts,
    i want to create a workflow that if any user want to transport the request to the production server then mail shud go to basic administrator for relesed the request.
    Is any standard worklow exist for this
    regards
    Sid

    Hi Sid,
    Check if FM 'BAPI_CTREQUEST_RELEASE' is useful for you.
    You can create a workflow and add an activity step to call this FM.
    Regards,
    Saumya

  • Workitem Lock  problem in workflow for leave request

    Hi Experts,
    I am facing the strange problem in the workflow of the leave request.
    We have implemented the two  level approval for workflow. For the first level approval we have created custom WebDynpro  application where approver approves the request and selects 2nd approver for the workflow. Here we are calling method initiate_state_transition of class/interface if_pt_req_request to change the status of workflow from sent to approved in custom WebDynpro  application .
    For the second level approval we are using standard approval application.
    When 1st approver approves the request, workflow moves to next task, but this task gives error "Work item 000000605682 locked by user SD21690 (enqueue error)".
    I am not getting why this is happening?
    Could you please help me.
    Thanks
    Sameer

    Hi
    As you have developed a custom application for first level approver where the status of record is being changed from sent to approved.
    please check what is the workitem number that is initiated. If its 605682 and the first approver is SD21690 then please make sure you release that workitem in your webdynpro application.
    You must have customized the workflow to add the first approver step. Where you would be mentioning the name of the custom application in SWFVISU against your custom task.
    The problem is with the workflow so please check the workflow. Your first approer is not releasing the workitem post approval and that is the reason for lock.
    Vivek - this lock is not enque lock its a workitem lock.
    Please revert with further questions if required.
    thank you
    barin

  • Workflow for service request

    Hi
    Would it be possible to have a workflow in which when the status of a service request is changed to closed, the open tasks related to the service request would also be changed to completed.
    -Nilesh
    Edited by: Nilesh Singh Chouhan on Mar 10, 2010 10:47 AM

    Hi Nilesh,
    This forum is for Analytics topics. Please post this to the Administrator forum.
    -Administrator

  • Work flow for Leave request without ESS

    Dear All,
    For one of our client, we have configure workflow for leave request, first is it possible to do tht?
    If so how to do it?, here we dont have ESS/MSS. Is there any standard workflow available?
    Thanx

    There is standard workflow task which give by SAP to approve leave request i.e. 12300111.
    But I am not sure this workflow task will work with out Portal or not.

  • Problems to trigger workflow in Trip Request Creation

    Hi masters,
    I am having problems to trigger a workflow for Travel Requests in FI-TV module. When I save a Trip Request and go to SWEL transaction, there is a message saying: "No recipient found" or something like this. I am not finding anything to solve this problem.
    Anyone can help me?
    Thank you very much!!!
    Diogo...

    Hello,
    "No recipient found" means an event had no matching workflow in SWE2.
    Look in SWEL to see which event you're actually generating and then look it up in SWE2 to see if there is a matching workflow for that object/event combination.
    regards
    Rick Bakker
    Hanabi Technology

  • Workflow for vendor down payment request

    hi All,
    i need to develop a workflow for vendor down payment request as there is no standard workflow available.
    But not able to find any business object for it. Is there any standard business object available for it?
    If no what are the steps that i should follow to create a business object for vendor down payment request?
    plz guide me.
    Thanks & Regards,
    K.Perumalraj
    SAP Workflow Consultant

    BKPF is the business object

  • Workflow and POWL integration for Travel Request / Approval

    HI,
    We are on EHP7 and using POWL  for different kind of Approvals.
    POWL is working good for Leave Approval and we have used Workflow Task ID as : TS12300097 / TS12300116, and all leave request appearing in POWL for manager and approving them.
    Now we have to use POWL for Travel Request / Travel Expense approval and need to know what Task IDs I should use to configure this under SPRO.
    Few tabs / links created like Travel Req Approval / Expense Approval / Claim Approval in POWL and need to show entries in respective tabs.
    Thanks

    HI
    Is it required to run FPB_MAINTAIN_PERS_S / FPB_MAINTAIN_PERS_M to display Travel entries in POWL screen.
    2) Is it required to keep entries under "Assign Task IDs to POWL Types" in SPRO ???
    ex : MANAGER_MSS_INBOX    MSS_POWL_LEA_APPROVAL    TS12300097
    I don;t see any difference in terms of functionality even If i delete above entry, may i know the necessity of having those entries ?
    Thanks

Maybe you are looking for