Workflow inititator GRC u2013 CUP

I need to cancel initiator from workflow of GRC CUP. When i try to delete initiator it says" Error deleting initiator. There are workflow paths associated with this initiator".When i try to deactiviate the path and try to cancel that path of workflow it says "Error deleting workflow path. There are approximately 10 requests associated with this path".Also i cannot cancel the closed request.Is there anyway to delete it.

Mouhed -
If you are just trying to delete the initiator, then you can do this by changing the related path to be a 'Detour' and then removing the initiator. That should take away the dependency that is preventing you from deleting the initiator.
You cannot delete a workflow path that has requests associated with it. However, you should be able to deactivate the path as long as there are no actively open requests associated with it. If you are running into issues there with closed requests, you could use the 'Archive' functionality to take them out of the active queue. That should take away the dependency on the workflow path and allow you to deactivate it.
- Rob

Similar Messages

Can approval workflow in GRC be avoided

Hi All
i have following query
Following are the steps
1) I am using Oracles Identity Management .
2) User data iam fetching from OIM
3) Iam using SAP GRC 5.3 ( CUP )
4) I am using SAPGRC_AC_IDM_SUBMITREQUEST web service for request Type ( eg ) say New ACCOUNT
5) A request id is generated
6) Now can i provision the user into the SAP backend system without the approval process
7) if yes then let us know how it is done
In short can we bypass the approval workflow in GRC ( as approval has to be done at Oracles Identity Management ) and directly provision the user into the SAP backend system
Thanks
Jagan

That's an easy one:
- go to the stage configuration of your provisioning workflow
- chose "No Stage" as the approver determinator
Done.
Frank.

Importing workflows from GRC 5.3 to GRC 10 and then changing them

Hello Experts,
We are migrating our SPM,RAR and CUP data from GRC 5.3 to GRC 10.1.At present in our CUP we have user access request workflow as 2 stage workflow.Now in GRC 10.1 we require a 1 stage workflow.
I wanted an advise if it would be feasable to import the GRC 5.3 workflows and then make changes into it and remove 1 stage.
Or create new workflows using BRF+.
we are not sure as to what changes can be performed in the GRC 5.3 imported workflows in GRC 10.
Please advise
Regards,
Apeksha

Hello Steve,
Migration you deploy Java component and extract data form 5.3 and import in 10.
still lots of work to be done like and implementation as there are pre-requisite.
second approach does not need to extract all data from 5.3 system(apart from Ruleset,if at all its required)
I never migrate workflows better to create new one identical and faster i believe .
Second approach is little time consuming but good from my point of view.
In java stack people normally go with 2 system landscape .
there has been client where in ABAP people go with 3 system landscape.
now where tricky consulting part play and which data to be imported where.
and few other points needed to be looked like when you use tools and import data.
you actually import all transaction data which contain all active and inactive
expired.
in you go with 2nd option you will have only valid data to start with.
Regards,
Prasant

SAP Workflow and GRC 10.1 Workflow

Hi all,
We are in the midst of upgrading our GRC system up to 10.1 and some questions are coming up about the workflows. In short are GRC workflows and SAP workflows the "same thing", i.e. if someone outside of the upgrade project were to learn how to create/maintain workflows within GRC 10.1 would they be able to turn around and run the same transactions within an ECC 6.0 environment and create SAP Business workflows? From what I have seen so far in my searching is that, they have the same basic principle but very different implementation/maintenance.
Any documentation that you are aware of from SAP showing this would be helpful as well.
Thanks

The basic mechanism is the same, but the GRC workflows are more fixed (they leave less room for the workflow to be changed) have build in screens, and relay on the BRF engine to determine approvers etc.
Workflows in the ECC give you a lot more room for implanting the workflow however you wish (use a decision task, asynchronous tasks, develop your own custom approval screen etc.) and some time required you to implement changes to the workflow object (set a user status, release a document etc.) and don't usually use the BRF.
So I would have to say that the answer is no, someone who learned how to implement the GRC workflows will not be able to turn around and immediately create workflows in the ECC.

GRC AC CUP LDAP configuration

Dear team,
I am facing issues with one of my LDAP connections. Users beloning to one particular LDAP are not able to login to the self-provisioning link on CUP. The system log returns 'nulpointer' exception, which generally comes on incorrect logon credentials.
I have checked the user in the connector. It exists and is working well.
The only point is this LDAP is my 6th. How do I make this working?

Assuming User Data Source is pointing to LDAP;
Please check the Connector User[Configuration Tab-> Available Connectors->select the LDAP Connector] between the LDAP and GRC AC CUP is locked .Unlock It and save .
Then check is TEST CONNECTION is successful.
Regards
Ajit.

GRC AC CUP 5.3

Hello Team,
SAP GRC AC CUP 5.3 , SP15
While clicking on the Change log history under configuration tab and NewAccount Request type from end user form getting below mention error
Application error occurred during the request procession.
Details: com.sap.engine.services.servlets_jsp.server.exceptions.WebIOException:
Error compiling [/scrLeftNav.linkChangeLogConfig.do] of alias [AE] of J2EE application [sap.com/grc~aeear].
Please help me to know the issue.
Thanks,
Jagat

Hi JagatBir,
As suggested by Frank, initial data files are required to be uploaded each time we apply a new patch.There was some issue in SP15 initial files, so a new set of files are available on SMP, check if it can help. I found that only ERM file was updated, so might not be of any use for CUP issue.
Additinally check if below application is running -
sap.com/grc~aeear
Go to visual administrator> Server> Services > Deploy>web services container--> sap.com/grc~aeear
If it is stoped, start it. If it is running, you may try giving a restart.
Let us know how it goes.
Regards,
Sabita

Workflow Option unavilavble in CUP (5.3)

Hi Everyone,
The Workflow Type option isnt available as I am configuring work flows
RAR is integrated with CUP ( I mean the Webservice is in palce in the risk anlayis tab in configuration )
and also in the miscellaneous tab I have activated the CUP provisoning bit. still no luck
does it need any restarting ?
any suggestions? Thanks in advance
Regards
KH

Kevin,
This means that you have not activated other workflow types. I have a question for you:
Do you see any other workflow types other than CUP in miscellaneous link? If yes, then activate them. If no then you need to upload the initial data files for RAR and ERM. Once you upload these files into CUP, you will see other workflow types which ERM, risk, mitigation etc. Even after uploading these files, if you don't see any workflow type other than CUP then reboot your J2EE engine and retest.
Regards,
Alpesh

GRC and CUP and Mobiliity question

Hello GRC friends:
In an environment where GRC and CUP are configured and working, the question came to me,
can the requests for the Firefighter ID be sent to a mobile device?
The person responsible for the request approval must now sign on thier PC.
Are there any known impediments to sending these to say an iPAD to be approved?
Thank you in advance for your assistance.
Regards,
Joe Gonzales
856 912 1136

HI Josep!
There are some applications for mobile devices that you'll be able to find here: http://ecohub.sap.com/store/mobility
This particular application is for GRC approval:http://ecohub.sap.com/store/mobility/catalog/#!solution:SAPGRCAccessApprover
I don't know the cost and if it's available in your country neither....
Cheers,
Diego.

Workflow in GRC 10 VVV URGENT

Hello,
I have a requirement and we have only 1 GRC SYSTEM now to test and prototype our requirement , where we have 1st leverl suport team to raise a request.
1) 1st level support Team will raise a request in CUP.
2)It should go to Key users to select role to be assigned
( we have key User for all plant ,except Finance roles)
3)If no critical roles are selected then it will check SoD conflicts
4)If critical Role selected willl go for approval of Role owner
Please help me how to determine key user in CUP and map them with our requirement, since managers send mail to create request it does not required any approval from manager
can we have diffrent work flow for diffrent system
we want to connect ECC Dev system as weel where we dont need any SoD check.
Regards,
Prasant

Hi Prasant,
As per my understanding , different key users are there for different plants etc..
So when a request is created , how can you determine the key users for the request ? Can you determine them based on the system/users added in the request ?
based in your logic , you can create an agent BRF rule or function module to send the WF to your key users ..
Once the key users approve the request , you want to send the request to SOD stage ( if critical roles not added ) or to role owner stage ( if critical roles are found) . To cahieve this requirement you would need to create a custom Detour function module based rule .
You can have multi path workflow for your different systems , so the dev system/roles are sent to seperate path which will not have sod check .
Best Regards,
Aman

Deleting roles from GRC AC CUP

Hi
We had GRC 5.3 installed with SP05. We have archived all our existing requests and are trying to delete some of the roles from CUP. However when trying to delete the role it is giving a message "Cannot delete because this is referenced by request". Is there something else which i need to take care of? Will application of latest support packs help in this situation?
Appreciate your help regarding the same.
Thank you.
Anjan Pandey

Hi Anajan,
I feel some requests are still exist in GRC CUP for that particler role. Please follow the below steps and try to delete the Role again.
Go to CUP configuration tab > click on Request option under the workflow> choose deleting requests > next> then its asks to delete all requests and then choose Submit option.
once you click on submit button, you will get the message all existing requests are deleted with Job id.
finally go to the Roles and delete the required roles form the GRC CUP.
Regards,
Arjuna.

How to delete stale request from GRC AC CUP

Hi,
I have defined certain workflow which are no more required and should be removed from the wrokflow to avoid any confusion. I am not able to delete the workflow defined since they are tagged to some of the requests which are not approved and are currently available to be approved. How can I delete these old workflow which in not required in future without impacting the configuration setting from GRC CUP.
Thanks,
Abhimanu

Hi Abhimanu,
You may close open requests by configuring stale requests. Take the following steps from configuration.
Navigate to Request --> Stale reqeuests
from action dropdown select enable and no of days field enter no of days any request should wait before it should go to closed status.
Schedule a background job to review all open req. against the Stale Requests setting. Any req. meets the criteria will be automatically closed.
Hope this should help to close those.
Regards,
Asok

GRC AC CUP 5.3 -don't have all pre configured configuration settings

Hi All,
we installed all the GRC AC 5.3 components. In the CUP component we see all the WF types (in the miscellaneous screen) but we do not have all their WF definitions (meaning initiator, stages, paths...) - we have those definitions only for the ERM WF.
Any ideas why is that and can we solve this ?
Thanks
Yudit

Hi Yudit,
You need to create all of them in CUP according to your company scenarios.
These are default workflow types through which your workflow will work, but you need to create workflows.
Even for ERM, you need to create workflows.
Please refer to Config Guide for AC 5.3, goto -
https://websmp102.sap-ag.de/~form/sapnet?_SHORTKEY=01100035870000718172&
In left hand side, click - SAP GRC Access Control - SAP GRC Access Control 5.3 - Configuration Guide - SAP GRC Access Control 5.3
Hope it helps.
Thanks & Regards,
Sabita

HR Trigger request with a approval workflow in GRC AC 10.0

Hi Friends,
Is it possible that a HR triggered user creation request in GRC follow a stage approval based workflow ? Something like MSMP workflow ? Or can we route the HR triggered requests to MSMP worflows someway ? if yes, please help me with the details of the same.
Thanks in advance for your guidance

Hi Prashant,
Refer : Understanding HR Triggers in Access Control 10.0 - Governance, Risk and Compliance - SCN Wiki
Also search on GRC community there is lot of material available.
BR,
Mangesh

Issue with Master data change workflow in GRC PC 10.1

Hi,
I have configured the work flow for master data changes in GRC PC 10.1, however approver is not able to view the request in inbox where are the organization owner is able to see the review for change request in inbox.
Please let me know if there is any config where we need to set the approvers for workflow, so that the system creates a request for approver.
Regards,
Giridhar

Dear Giridhar,
Please, check the following configuration:
1. Activate the workflow (Path: SPRO -> GRC -> Shared Master Data Settings -> Activate Master Data Changes)
2. See whether Checkbox "Approval" is ticked for the selected entity
3. If you activate master data changes, please check whether the correct roles are indicated in the Maintain Custom Agent Determination Rules in the Workflow settings.
Business Event: 0FN_MDCHG_APPR
Role: Select the role you gave to the approver
After performing this configuration, a task must appear in the work inbox.
Best Regards,
Fernando

Unable to connect Enterprise portal with GRC AC CUP

Hi Guru's ,
We are configuring Portal with CUP so that we can provision portal roles. We have installed RTA in EP ( both producer and consumer) and have set up the connector portals We have setup the parameters of the connectors as below. Not sure why when I am trying to import role this is not working. Can you please help.
ASSIGN_ROLES:OC
saprole
ASSIGN_GROUPS:OC
sapgroup
CHANGE_USER:OC
sapuser
CREATE_USER:OC
sapuser
CREATE_USER:password
password
DELETE_USER:OC
sapuser
LOCK_USER:OC
sapuser
LOCK_USER:islocked
true
LOCK_USER:type
CHANGE_USER
ROLESEARCH_URI
http://server:port/UserroleSearchForAEService_5_3/Config1?wsdl&style=document
ROLESEARCH_URI_PASSWORD
password defined for Portal user (for retrieving roles)
ROLESEARCH_URI_USERNAME
Portal user id (for retrieving roles)
ROLE_DATA_SOURCE
ROLE.UME_ROLE_PERSISTENCE.un :
SCHEMA_ID
SAPprincipals
UNLOCK_USER:OC
sapuser
UNLOCK_USER:islocked
false
USER_DATA_SOURCE
Choose data source as configured in Portal UME:
USER.PRIVATE_DATASOURCE.un:
USER.R3_DATASOURCE.
USER. CORP_LDAP.

Hi GS GRC team,
Check the below link from RIG that explains you the detailed steps to configure CUP with EP:
[RIG Document on configuring GRC CUP with EP|http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/502a14db-6261-2c10-22b5-95117ab0e5ed?quicklink=index&overridelayout=true]
Regards,
Raghu

Workflow inititator GRC u2013 CUP

Similar Messages

Maybe you are looking for