How to raise access removal request pro-grammatically in GRC ?

[vimal]

Hi Team,

We have requirement to raise the request for access removal in GRC through program and we found BAPI GRAC_IDM_USR_ACCS_REQ_SERVICES can be used to raise request but what we couldn't find is that can we also trigger the standard workflow which gets started when we raise request from standard webdynpro form.

So in short scenerio is like this:

we have to raise access deletion request and it should trigger a workflow which will go to line manager and if line manager rejects it than it goes back to user for correction and if he approves then request will get created. So the BAPI GRAC_IDM_USR_ACCS_REQ_SERVICES will be able to trigger standard workflow as well which is there in GRC as a part of standard practice ?

We tried to search online but couldn't find much details related to GRC request creation programatically. So please send us some references if you have developed such kind of programs.

Thanks,

Vimal

[Colleen · Accepted solution]

HI Vimal

SAP Note: 2033054 - GRAC_IDM_USR_ACCS_REQ_SERVICES web service for creating Access Request

It's part of SAP IDM integration but according to the note, can be used locally.

It will create the ARQ request via the system user and submit. After that, the MSMP workflow is still evaluated and treated like a manual request. If you want to route different approval pathways then define a request type that your scenario uses so you can split it out in the initiator rule.

What is going to trigger the request? Is it a HR system action? If so, you could consider HR Triggers instead

Regards

Colleen