Financial Management Blogs by Members
Dive into a treasure trove of SAP financial management wisdom shared by a vibrant community of bloggers. Submit a blog post of your own to share knowledge.
cancel
Showing results for 
Search instead for 
Did you mean: 
former_member193066
Active Contributor


Some time we get requirement to define initiator for

 

  1. Manager & Role Owner are same

  2. Requester and Role owner same


 

In these scenario we normally keep single level of approval,again this is not mandatory depends upon business.

 

To achieve this you need to create a initiator using DBLOOKUP.

 

Goto >>SPRO>>>Governance Risk and Compliance>>Access Control>>Workflow flow for Access Control>Define Workflow Related MSMP Rules

 



 

Process ID: as SAP_GRAC_ACCESS _REQUSET, since the entire request submitted for user provisioning is associated to this process id.

Rule Kind: Initiator Rule, as this rule will be used to initiate a workflow to determine which path it should take upon submission of request

RuleID: The Name of the Rule you are going to build and can be identified in BRF+ my application.

Rule type: Its Always BRF+ Flat Line item rules since we check Line item of Request, not just Header to determine path

 

Now select Header and select REQTYPE as input parameter as we may have may REQUEST TYPE and we need this for specific request type.

 





 

Go to BRF+ tcode



now to get the

 

Manager is equal to Roleowner and Role owner is equal to Requester you need to create DBLOOKUP

 

1)First identify the request id

2)Get the Manager of that request

3)identify the Role ID

4)Get the Role Owner fro that role.

5)Get the Requester from the same table of from when Manager is picked

 

Right click on Initiator application and create a DBLOOKUP





Select single entry table GRACREQ, this table has information about SAP Access Request, so lookup input query in to table is Request NO created during submission in the table and output value is REQUESTID.

Select Request number from context data and put it into a new table in result data, save and activate

 

comeback to select element REQID element

 



NOW Create 1 more DBLOOKUP to get the role id from table GRACROLE



 

NOW Create 1 More DB Lookup to get Manager ID for the particular request.

Run a look up on table GRACREQOWER, and look for USER TYPE MAN in the DBLOOKUPQUERY

to get Manager ID for that request need have a query for REQ_ID to fetch the request number and Manger for that request.

 

 

 



 

Now create 1 more DB lookup to get Role owner.

Run a query for Role on Table GRACROLEAPPRVR and lookup for approver in Z_GETROLEID DBLOOKUP table.



 

 

Now we need to Create 1 more DBLOOKUP for getting requestor information from the table GRACREQOWNER using request id from ZGETREQ_ID lookup to get requestor for that request only.



Save and activate all the Lookups .

 

Now go to decision table.

 



 

Click Table setting Select the condition column and Result column, based on which as decision to be made.

 



(We had added the elements after creating result table ,reason is if you have element you can select condition column,if you dont then it will be in result column)

 

Put your conditions in decision table



 

 

This was my condition you can use your

 

 

 



 

activate decision table but  add you lookup tables in signature in Function id then activate



 

Added missing screenshot.

 



 

ensure its added and activate ..

now you can add it in MSMP.

 

 

.

 

Regards,

Prasant

4 Comments