Question Re: User Parameter Removal via GRC Access request in Financial Management Q&A

User Parameter Removal via GRC Access request

Sri_S1 — Mon, 15 Apr 2019 21:49:32 GMT

Hi,

we have a requirement to remove user parameter(s) along with the role removal/user change in GRC access request. I think there is no standard SAP GRC functionality to handle the parameter removal automatically along with role removal in GRC access request. so i added permission for security approval stage to edit(Add/Remove) the values in parameter tab before submitting(approving) the request. Still the parameter removal is not working, please advise on this.

Thank you,

Sri.

Re: User Parameter Removal via GRC Access request

vijayakumarsuth — Fri, 26 Apr 2019 16:53:38 GMT

Hi Sri,

Removal of parameter is allowed in GRC request just like other roles and system. One difference in request between role and parameter options is that,with Roles you have provisioning action whereas for Parameter you don have any provisioning action. So, when you raise a change request for an existing user, the parameters will be fetched for user based on datasource configurations, for example, your datasource system is configured with ABC system then parameters will be fetched for particular user and shows the same in request under parameter tab. Now end user can decided which one to remove and submit the request, during the workflow process and autoprovisioning process, only parameter which are exists in request will be updated and rest will be removed for user.

Re: User Parameter Removal via GRC Access request

Sri_S1 — Mon, 29 Apr 2019 17:08:55 GMT

Thanks Vijayakumar,

My understanding is the same. I allowed security team to remove the parameters from the access request at the security approval stage instead of end user removing the parameters. but once the request is approved the parameter removal is not working.

Thank you,

Sri.

Re: User Parameter Removal via GRC Access request

vijayakumarsuth — Fri, 10 May 2019 16:05:21 GMT

May be time to create incident to GRC now.

Re: User Parameter Removal via GRC Access request

Sri_S1 — Mon, 13 May 2019 20:19:59 GMT

Hi Vijayakumar,

I did opened Incident with SAP and waiting for reply from their Development team. Will keep updated.

Thanks,

Sri

Re: User Parameter Removal via GRC Access request

former_member820581 — Thu, 17 Nov 2022 01:01:14 GMT

Hi Vijay,

Any idea on how to restrict the approvers from editing the parameters tab in an access request. We have a requirement to disable add/remove option under the parameters tab by the approvers during the approval workflow.

Thank you in advance.

Regards,

Amrutha