Workflow in GRC 10 VVV URGENT

Hello,
I have a requirement and we have only 1 GRC SYSTEM now to test and prototype our requirement , where we have 1st leverl suport team to raise a request.
1) 1st level support Team will raise a request in CUP.
2)It should go to Key users to select role to be assigned
( we have key User for all plant ,except Finance roles)
3)If no critical roles are selected then it will check SoD conflicts
4)If critical Role selected willl go for approval of Role owner
Please help me how to determine key user in CUP and map them with our requirement, since managers send mail to create request it does not required any approval from manager
can we have diffrent work flow for diffrent system
we want to connect ECC Dev system as weel where we dont need any SoD check.
Regards,
Prasant

Hi Prasant,
As per my understanding , different key users are there for different plants etc..
So when a request is created , how can you determine the key users for the request ? Can you determine them based on the system/users added in the request ?
based in your logic , you can create an agent BRF rule or function module to send the WF to your key users ..
Once the key users approve the request , you want to send the request to SOD stage ( if critical roles not added ) or to role owner stage ( if critical roles are found) . To cahieve this requirement you would need to create a custom Detour function module based rule .
You can have multi path workflow for your different systems , so the dev system/roles are sent to seperate path which will not have sod check .
Best Regards,
Aman

Similar Messages

Can approval workflow in GRC be avoided

Hi All
i have following query
Following are the steps
1) I am using Oracles Identity Management .
2) User data iam fetching from OIM
3) Iam using SAP GRC 5.3 ( CUP )
4) I am using SAPGRC_AC_IDM_SUBMITREQUEST web service for request Type ( eg ) say New ACCOUNT
5) A request id is generated
6) Now can i provision the user into the SAP backend system without the approval process
7) if yes then let us know how it is done
In short can we bypass the approval workflow in GRC ( as approval has to be done at Oracles Identity Management ) and directly provision the user into the SAP backend system
Thanks
Jagan

That's an easy one:
- go to the stage configuration of your provisioning workflow
- chose "No Stage" as the approver determinator
Done.
Frank.

SAP Workflow and GRC 10.1 Workflow

Hi all,
We are in the midst of upgrading our GRC system up to 10.1 and some questions are coming up about the workflows. In short are GRC workflows and SAP workflows the "same thing", i.e. if someone outside of the upgrade project were to learn how to create/maintain workflows within GRC 10.1 would they be able to turn around and run the same transactions within an ECC 6.0 environment and create SAP Business workflows? From what I have seen so far in my searching is that, they have the same basic principle but very different implementation/maintenance.
Any documentation that you are aware of from SAP showing this would be helpful as well.
Thanks

The basic mechanism is the same, but the GRC workflows are more fixed (they leave less room for the workflow to be changed) have build in screens, and relay on the BRF engine to determine approvers etc.
Workflows in the ECC give you a lot more room for implanting the workflow however you wish (use a decision task, asynchronous tasks, develop your own custom approval screen etc.) and some time required you to implement changes to the workflow object (set a user status, release a document etc.) and don't usually use the BRF.
So I would have to say that the answer is no, someone who learned how to implement the GRC workflows will not be able to turn around and immediately create workflows in the ECC.

Workflow inititator GRC u2013 CUP

I need to cancel initiator from workflow of GRC CUP. When i try to delete initiator it says" Error deleting initiator. There are workflow paths associated with this initiator".When i try to deactiviate the path and try to cancel that path of workflow it says "Error deleting workflow path. There are approximately 10 requests associated with this path".Also i cannot cancel the closed request.Is there anyway to delete it.

Mouhed -
If you are just trying to delete the initiator, then you can do this by changing the related path to be a 'Detour' and then removing the initiator. That should take away the dependency that is preventing you from deleting the initiator.
You cannot delete a workflow path that has requests associated with it. However, you should be able to deactivate the path as long as there are no actively open requests associated with it. If you are running into issues there with closed requests, you could use the 'Archive' functionality to take them out of the active queue. That should take away the dependency on the workflow path and allow you to deactivate it.
- Rob

Importing workflows from GRC 5.3 to GRC 10 and then changing them

Hello Experts,
We are migrating our SPM,RAR and CUP data from GRC 5.3 to GRC 10.1.At present in our CUP we have user access request workflow as 2 stage workflow.Now in GRC 10.1 we require a 1 stage workflow.
I wanted an advise if it would be feasable to import the GRC 5.3 workflows and then make changes into it and remove 1 stage.
Or create new workflows using BRF+.
we are not sure as to what changes can be performed in the GRC 5.3 imported workflows in GRC 10.
Please advise
Regards,
Apeksha

Hello Steve,
Migration you deploy Java component and extract data form 5.3 and import in 10.
still lots of work to be done like and implementation as there are pre-requisite.
second approach does not need to extract all data from 5.3 system(apart from Ruleset,if at all its required)
I never migrate workflows better to create new one identical and faster i believe .
Second approach is little time consuming but good from my point of view.
In java stack people normally go with 2 system landscape .
there has been client where in ABAP people go with 3 system landscape.
now where tricky consulting part play and which data to be imported where.
and few other points needed to be looked like when you use tools and import data.
you actually import all transaction data which contain all active and inactive
expired.
in you go with 2nd option you will have only valid data to start with.
Regards,
Prasant

HR Trigger request with a approval workflow in GRC AC 10.0

Hi Friends,
Is it possible that a HR triggered user creation request in GRC follow a stage approval based workflow ? Something like MSMP workflow ? Or can we route the HR triggered requests to MSMP worflows someway ? if yes, please help me with the details of the same.
Thanks in advance for your guidance

Hi Prashant,
Refer : Understanding HR Triggers in Access Control 10.0 - Governance, Risk and Compliance - SCN Wiki
Also search on GRC community there is lot of material available.
BR,
Mangesh

Issue with Master data change workflow in GRC PC 10.1

Hi,
I have configured the work flow for master data changes in GRC PC 10.1, however approver is not able to view the request in inbox where are the organization owner is able to see the review for change request in inbox.
Please let me know if there is any config where we need to set the approvers for workflow, so that the system creates a request for approver.
Regards,
Giridhar

Dear Giridhar,
Please, check the following configuration:
1. Activate the workflow (Path: SPRO -> GRC -> Shared Master Data Settings -> Activate Master Data Changes)
2. See whether Checkbox "Approval" is ticked for the selected entity
3. If you activate master data changes, please check whether the correct roles are indicated in the Maintain Custom Agent Determination Rules in the Workflow settings.
Business Event: 0FN_MDCHG_APPR
Role: Select the role you gave to the approver
After performing this configuration, a task must appear in the work inbox.
Best Regards,
Fernando

Responsibilities to support Grc application(urgent)

Hi all,
Please guide me the responsibilities involved in the support side of GRC.
Thanks,

Hi Karunakar,
As such there are no standard support actions, however I will try to list the following actions as support based upon my experience. Also you can categorise these actions for each application.
Compliance Calibrator
1. Background Job Scheduling based upon the requirement
2. Mapping of Business process
3. Mitigating Risks
4. Defining Org. rules
5. Constantly monitoring the SODs violations and doing the
needful
FireFighter
1. Assignment of FF Ids to users
2. Assignment of necessary authorizaitons to FF ids
3. Checking the logs regularly.
4. Reporting the same to higher level management
Role Expert
1. Role maintenance
2. Checking the Role Change History
Access Enforcer
1.Adding / Removing the applications from the list.
2.Checking the workflow
3.Checking the system logs
Above are the responsibilites I have experienced. I appreciate if any one else can add or change some more responsibilites!
Reward points if useful.
Thanks and Regards,
Faisal

Workflow Notification mailer Error - Urgent !!!

Hi Guys
i am trying to configure Wrkflow Mailer Account on R12.1 . But the validation fails for Imap account check.
The client got : Imap : 192.168.1.2: 993 (SSL) SMTP is 192.168.1.2. Mails are getting sent to the user box ,bit inbound processing is failing as its not accepting the Imap account.
ALready Oracle TAR is on going ,but so far no luck from Oracle side too.
The Imap account is getting connect when i use Linux mail client.
I got the SSL certificate for the mail exchange server , what i can go for?

Pl post the contents of the workflow mailer log. Pl also run the Diagnostics test outlines in MOS Doc 748421.1 (Oracle Workflow ATG Support: R12 Java Mailer Setup Diagnostic Test)
HTH
Srini

Workflow related tables. Urgent. Please help.

Hi all,
 Could anybody please give me the list of workflow related tables ? I need to retrieve the following details.
 Type,
 Workflow Item ID,
 Workflow Item Unique ID, Text
 Creator, Created Date and Time,
 User created WI,
 Technical Status,
 Agent,
 Task ID, Task ID text,
 Element, Element Value.
Please let me know at the earliest. Thanks in advance.

I don't think this is the right place for this, but I will give one reply.
>What you think when a person is facing some issue will first read guidelines and then post.
Here is the <a href="https://wiki.sdn.sap.com/wiki/display/HOME/RulesofEngagement">link</a> to the guidelines. It is expected somebody first reads the guidelines and then starts posting, it is the first line in the guidelines. So I expect it also. I don't see why I should expect it from someone who has at least 30 points, and not from someone who has never posted.
About your analogy, it doesn't work because most of the time the functional consultant needs me to create the workflow, or he is part of the same project so we need each other. In this forum I spend my own precious time answering questions, and not for the points but because I want to contribute and help others. But I expect them to have tried to 'help' themselves first.
And as long as there is no moderator for the forum I will try to point people at the guidelines so this forum will not end up generating a lot of 'noise' and running of those who can help maybe the most (to name two: Kjetil Kilhavn and Mike Pokraka). I know they are thinking about skipping this forum because of the noise.
> Try to be a bit pragmatic. Will you do this to your peers or your junior.
Depending on the situation I will do this to my peers and juniors, mostly because they will learn more from finding things out by themselves than from pre cooked answers. And learning is one of the main objectives here.
And my remark about the points is because you keep asking for them.
I hope this clarifies a little why I post answers like the one I gave to this somewhat lazy question (not the first one today).
Martin

Workflow Agenet Determination Problem : Urgent Please

Hi All,
We configured standard workflow WS12300111 for ESS Leave Request. For standard task TS12300097 agent assignment is Expression : &AGENT_0001.AGENTS&. Now workflow is not getting triggred. If change agent assignment to Rule : 00000168 or any user name then it is getting triggred. All tasks and workflow temeplate are configured as general tasks.
Someone can help on this problem.
Regards,
Srinivas.

Hi,
Problem got solved, probelm is for approver infotype 0007 was not maintained.
Regards,
Srinivas.

35mm feature / FCP workflow... Urgent

Hey guys,
Sorry if there are threads about this topic already, I don't have too much time to research the entire topic list. Here is my question:
What are the Tried and True Film workflows. I have included the current workflow and what the project is.
Shot:35mm
Telecined: 29.97 DVcam as well as Dbeta protection copies.
Reverese Telecined: Cinema tools 29.97 to 23.98
Cutting: DVntsc 23.98
(that is 23.98 not 24, incase you were going to ask)
System: Quad G5, FCP 5.1, Kona 3
Everything is going fine except for the fact we can not get a frame accurate output back to DVcam or Betasp. Our sound house and Negative cutting house both need a frame accurate locked picture as chase tapes in 29.97.
I thought KONA removed the pulldown, I also thought that I could do this no problem. Finding out now that this is a headache. WHAT ARE MY OPTIONS?? I need to deliver sound dubs tomorrow.
Can I output my 23.98 project out as a self contained QT and render it in a 29.97 timeline for output?? Will that work??
Thanks
Todd

Todd
might be a stretch but if you could get your hands on a HDcam or XDcam deck in vancouver you could print your 23.98 timeline upconverting through Kona. (I would think any convert to 29.97 is going to do pulldown on the final edit as a single piece). Could they not use a 23.98Psf as a chase?
I haven't done a filmout yet from any of our projects. there is on in the pipeline but it's originating in HD. the HD conforms I've done that originate on Sony get a dual window burn in with ORG (original)TC and PDT (pulldown)TC burned in the letterbox portion of the DV TC dub. if there are any problems conforming the edl from 29.97 to 23.98 there is a visual cue as to what TC was on the original tape. Also I've noticed when the audio is posted at 29.97 I need to clip a frame on the 23.98 conform depending on the frequency of cuts, due to transitions rendered with pulldown at 29.97 on the DV edit.
Were I to do a film originated piece with a neg cut I'd get the keycode and TC burned in on the 29.97 dub, load the flex files into cinema tools and conform the EDL to 24fps at the end. If I had to I could then do a handwritten cut list of the keycode if all else went goofy.

Vvv urgent got error in EP6.0 installation

i frndz...
Am installing EP6.0 on windoes2003 OS with jdk1.4.2_10 with oralce 9 n 9.2.0.7_patches....n got an error while installing @ the component
"DataBase Server nodes " n the log is it showing like
1) MDB-06068 Bad autoextent mode: Valid values are ON and OFF
2)MDB-06010 Key db operation (read & write)failed. Could not work on table tTablespaces,records WHERE dbSid="J2E'
it was vv urgent for me plz make it clear anyone..i hope
Rajesh
09985516859

Did you use a default Oralce configuration or did you customizing it?
Markus

Regarding performance on cluster tables.vvv.urgent!

friends,
i know that cluster tables cannot be joined with transparent tables....
   however i need performance improvement for the following code....
   if possible is there a way to join bkpf or bseg to improve performance....can we create view foe bkpf and bseg if yes then how.....
please modify the below code for improvement in performance.
START-OF-SELECTION.
SELECT bukrs belnr gjahr budat FROM bkpf INTO TABLE i_bkpf
WHERE bukrs = p_bukrs AND "COMPANY CODE
          gjahr = p_gjahr AND "FISCAL YEAR
          budat IN s_budat. "POSTING DATE IN DOC
IF sy-subrc = 0.
SELECT bukrs belnr gjahr hkont shkzg dmbtr FROM bseg INTO TABLE
        i_bseg FOR ALL ENTRIES IN i_bkpf
        WHERE bukrs = i_bkpf-bukrs AND "COMPANY CODE
              belnr = i_bkpf-belnr AND "A/CING DOC NO
              gjahr = i_bkpf-gjahr AND "FISCAL YEAR
              hkont = p_hkont. "General Ledger Account"
    IF sy-subrc = 0.
     SELECT bukrs belnr gjahr hkont shkzg dmbtr FROM bseg INTO TABLE
            i_bseg1 FOR ALL ENTRIES IN i_bseg
            WHERE bukrs = i_bseg-bukrs AND "COMPANY CODE
                  belnr = i_bseg-belnr AND "A/CING DOC NO
                  gjahr = i_bseg-gjahr.   "FISCAL YEAR
    ENDIF.
ENDIF.
IF NOT i_bseg1[] IS INITIAL.
    LOOP AT i_bseg1.
      IF i_bseg1-hkont = p_hkont AND i_bseg1-shkzg = 'S'.
        v_sumgl = v_sumgl + i_bseg1-dmbtr.
      ELSEIF i_bseg1-hkont = p_hkont AND i_bseg1-shkzg = 'H'.
        v_sumgl = v_sumgl - i_bseg1-dmbtr.
      ELSEIF i_bseg1-hkont NE p_hkont .
        IF i_bseg1-shkzg = 'H'.
          i_bseg1-dmbtr = - i_bseg1-dmbtr.
        ENDIF.
        i_alv-hkont = i_bseg1-hkont.
        i_alv-dmbtr = i_bseg1-dmbtr.
        APPEND i_alv.
        v_sumoffset = v_sumoffset + i_bseg1-dmbtr.
      ENDIF.
    ENDLOOP.
regards
Essam.([email protected])

Hi there ...
I have read the note - thats where I found the link to the trace note 286496.1 - on now to setup a trace
But I still need an explanation for the methods (1,2,4 etc)
regards
Mette

Cannot select role in AC10 Access Request: VVV urgent

Hello,
when i try to create request i cannot select role
it says no record found. Did sync job and imported role as well.
I f i selct existing assigment for any user it shows role assigned but disable since its not maintained in ERM
Please help,
Prasant

wow , our mistake, since it a sandbox we have teste lot of thing, unfortunately the connector entries and connector group was changed as per naiming convention and we have not made integrated with scenario..
Thanks,
prasant

Workflow in GRC 10 VVV URGENT

Similar Messages

Maybe you are looking for