topic Re: GRC Access Request Valid Dates restriction in Application Development and Automation Discussions

GRC Access Request Valid Dates restriction

Former Member — Thu, 21 Apr 2016 16:16:34 GMT

Dear all,

I have defined some users which are requestors. So these users will create access requests.

Now, I would like to restrict the capability that the requestor modifies the Valid From / Valid To dates into the access request. The ones marked in red.

Is there any way to do it? I have checked this at EUP level, Authorization level and at MSMP level but I was not able able to find out.

Kind regards and thank you,

Sara.

Re: GRC Access Request Valid Dates restriction

Former Member — Thu, 21 Apr 2016 20:21:20 GMT

Sara,

I did not see a way to accomplish this through security or through EUP settings. I ran a trace just to see what authorization objects showed up. GRAC_REQ does not offer granular enough options to restrict change to just the role validity dates; if you took away change access from your requestors, it appears that they would lose a lot more. Did you try taking away change access on that object?

Of course they say that with enough time and money for customization, anything is doable, but heavy customization is probably not the path you want to take. What is the rationale for this requirement?

Regards,

Gretchen

Re: GRC Access Request Valid Dates restriction

Former Member — Fri, 22 Apr 2016 01:38:25 GMT

Hello Sara,

Check if this is happening only to business roles or all other roles?

Also, Go through these SAP Notes which might help you.

2119407 - UAM: Incorrect validity dates when business role is added in the simplified access request

2042631 - Validity Dates for Business Roles

1979538 - Simplified Access Request Role Validity Dates Validation Error messages

Check if this thread gives you some lead to solve your issue.

https://scn.sap.com/thread/3659245

Regards,

Deepak M