on 2010 Jul 20 2:56 PM
Dear SAP Experts
We are running GRC AC 5.3 SP11.2 and facing a problem with the CUP workflow behavior.
Each time we change a existing user in the system and assign him at least two new roles with diffrent role owners, we get some problems at the role owner approval stage.
As soon as the first role owner provides his role approval a message is sent out to the requestor, manager and user that all changes to the user profile are done. This behavior repeats for each role owner which has to provide a approval to that request. The roles it self are assigned to the user account when the last role owner approved the request.
Under AC 5.2 we had only one mail beeing sent out to the requestor, manager and user when all roles were approved.
The role owner stage has following settings:
Approval Type --> All Approvers
Do we have to customize some more settings as well?
Many thanks for your help Jeffrey
Hi Frank
Following settings are implemented at the role owner stage (last stage before auto provisioning):
Notification Configuration:
Approved --> User / Requestor / Manager
Rejected --> Requestor / Manager
Different text for mails are maintained
Additional Configuration
Risk Analysis Mandatory -> No
Change Request Content --> Yes
Add Role --> No
Path Revaluation for New Roles --> All Roles in Evaluation Path
Approval Level --> Role
Rejection Level --> Role
Approval Type --> All Approvers
E-mail Group --> BLank
Comments Mandatory --> Yes / Rejected
Request Rejection --> No
Reroute --> No
Confirm Approval --> No
Confirm Rejection --> No
Reject by E-mail --> No
Approve by E-mail --> No
Forward Allowed --> No
Approve Request Despite Risks -> Yes
Display Review Screen--> Yes
Additional Security Configuration (Approval Reaffirm)
Approve --> No
Reject --> No
Create User --> No
Under AC 5.2 we used the Notification Configuration / Approved Mail to inform the defined persons that the request is approved and provisioning is done. This mail has been sent out only once to the persons after all role owners worked on the request. Obviously AC 5.3 behaves different after we have done the migration:-))
Jeffrey
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hello Jeffrey,
If you don't want the user to get mails after approval of each role , uncheck the Approved field in notification configuration.
The user will still get a mail at the end of successfull provisioning ( auto provisioning) with the subject "Request <number> provisioned" and with user id & password details.
Regards
-Ranjiv
Hi Ranjiv
That means in case a request has 5 roles owners the defined persons (defined in the role owner stage to get a message after the approval) get 5 time a mail telling them that a approval on role level has been done in this particular stage? Under AC 5.2 we had only one mail beeing sent out to the defined persons after the hole stage was approved.
Thanks for clarification
Jeffrey
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
It really depends on the stage level settings.
How are notofications configured at the role owner stage - are the boxes for "requester" or "user" ticked?
If so, as the request splits up for each role owner, each approval will trigger an email. If you don't want that, don't configure it that way.
And I'm pretty sure it worked the same way in 5.2...
Frank.
Hi Jeffrey,
A mail will be send (to the recipients configured in the "stage") after each approver approves the request ,
End of the mail will have a link similar to this http://server:port/AE/index.jsp?loadRequestStatusSearch.do which takes the user directly to search the status of his request where he can check if the request is completely or partially approved.
And once the request is completely approved the "Request provisioned " mail is send to the user .
Regards
-Ranjiv
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hi Frank
The approval level is role.
Regards Jeffrey
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Please check your stage settings: is the "Approval Level" at "Role" or "Request" ...?
Frank.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.