Question Re: Access Request: User Type restriction in Additional Q&A

Access Request: User Type restriction

Former Member — Thu, 10 Sep 2015 09:10:56 GMT

Dear all.

I am trying to restrict the user types that are available into an Access Request.

However i am not able to find an authorization object which restricts this information.

Knid regards and thanks,

Sara.

Re: Access Request: User Type restriction

Former Member — Thu, 10 Sep 2015 09:29:21 GMT

Hello Sara,

Can you check EUP settings

SPRO>GRC>ACCESS CONTROL>USER PROVISIONING>Maintain end user personalization

Field:User type

Regards

Baithi

Re: Access Request: User Type restriction

Former Member — Thu, 10 Sep 2015 09:51:46 GMT

Thanks for your response Baithi,

However as far as i know with the EUP i cannot restrict the values into the field as far as i know. I am only able to include Default value.

Kind regards and thank you.

Sara.

Re: Access Request: User Type restriction

Former Member — Thu, 10 Sep 2015 10:03:35 GMT

Hello,

kindly specify your requirement in details.

you want restrict on what?

they should be able to choose some value and should not be able to choose other value?

what you need exactly.

Regards,

Prasant

Re: Access Request: User Type restriction

Former Member — Thu, 10 Sep 2015 10:05:43 GMT

Hi,

I want to create a Requestor User in GRC who is only able to select two types of users into the Access Request form:

- Dialog

- System

The rest of tyhe types of the users cannot be created/selected by this requestor.

Kind regards and thank you.

Sara.

Re: Access Request: User Type restriction

alessandr0 — Thu, 10 Sep 2015 10:43:07 GMT

Sara,

did you check auth object GRAC_USER with field UTYPE?

Regards,

Alessandro

Re: Access Request: User Type restriction

Former Member — Thu, 10 Sep 2015 14:27:34 GMT

Hi Alessandro, thank you for your reply.

In theory the roles assigned to the Requestor user are restricted to that two types of users

But i am still able to select more than these two types of users

Is this a possible OSS message to open?

Kind regards and thank you.

Sara.

Re: Access Request: User Type restriction

Former Member — Mon, 14 Sep 2015 10:17:03 GMT

hi all,

Any additional idea on this topic?

Kind regards and thank you.

Sara.

Re: Access Request: User Type restriction

alessandr0 — Mon, 14 Sep 2015 11:44:36 GMT

Hi Sara,

it will work with GRAC_UTYPE. The selection will show all the available user types but the end user is not allowed to request others than he is authorized.

The end user will face the following error message:

Keep me updated.

Regards,

Alessandro

Re: Access Request: User Type restriction

Former Member — Mon, 14 Sep 2015 12:16:14 GMT

Hi Alessando,

I see. Two additional comments from my side:

- I was supposing when the field is restricted to two types of users then into the access request only these two types of users are visible (not all of them)

- I am using an Access Request template and for templates seems this kind of authorization restriction is not working properly as i am able to create the access request. Sorry i have performed another testing and i am not able to create the user. So it works properly.

Kind regards and thank you.

Sara.

Re: Access Request: User Type restriction

alessandr0 — Mon, 14 Sep 2015 12:48:31 GMT

Hi Sara,

fully agree with you - it's not nice since they are selectable. I suggest to open an OSS so SAP can correct this behaviour.

Regards,

Alessandro