Not All values for PROV_ACTION are available in BRF+

[sreekanth_sunkara]

Hi Experts,

I created a BRF+ based in the Req Type and Provisioning Action. Working fine for the roles part but when i add a system to the Request i am get the request submission error, I think this is due to the provisioning action (001 or 002) not maintained in BRF+. When i go to the Decision table and try to add 001, 002 under PROV_ACTION, i am getting error "entered value is not on the list of valid values" When i click on lookup, i see only 006,009,010 under PROV_ACTION. Please let me know why all Provision Actions are not getting pulled in to BRF+

Thanks,

Sri

[vijayakumarsuth · Accepted solution]

I guess you are looking at the line item level (Role _attributes) which is the reason you are seeing only 006, 009 and 010. Please review at Request_attributes or Request header level

[sreekanth_sunkara · Accepted solution]

Thanks Vijayakumar,

I don't think PROV_ACTION is available under Request Header level. It is only available for Line item level.

Thanks,

Sri.

[Former Member · Accepted solution]

Sri,

Just curious what you are trying to achieve, are you trying to add a system and role?

See this blog from Madhu,I hope this is what you are looking for....

https://blogs.sap.com/2014/03/24/grc-request-with-both-system-and-role-line-items/

Thanks

Ramesh

[vijayakumarsuth · Accepted solution]

Hi Sri,

I would suggest to go with request type rather action assigned under request type because the request type actions (Create, Change etc.) is not exposed (only line-item actions such as assign, remove etc exposed), so will your requirement can considered directly with request type (001, 002 etc) in BRF++ instead of action under request type

[vijayakumarsuth · Accepted solution]

just add more clarity, Prov-Action is not same like Actions under Request type and cannot combine Request-type Actions (Create User-001, Change User-002,Delete User-003, Lock User-004, Unlock User-005, Assign Object-006 etc. ) with Line Item level Prov-Action (006, 009, 010)

[sreekanth_sunkara · Accepted solution]

Thanks Vijayakumar for the details. what if i add additional line Req Type = 001, 002 and PROV_ACTION not equal to 006 or not equal to 009. do you think this will work to route the request correctly?

Thanks,

Sri.

[sreekanth_sunkara · Accepted solution]

Thanks Ramesh,

we want to route req type 001, 002 with PROV ACTION 006 to 3 diff stages(Training, RO, Sec) and req type 001, 002 with PROV ACTION 009 to only1 stage(Sec), both the scenarios working fine. but when we add system as line item the request fails to submit. I am thinking to add additional line Req Type = 001, 002 and PROV_ACTION not equal to 006 or not equal to 009. do you think this will work to route the request correctly?

Thanks,

Sri.

[Former Member · Accepted solution]

Sri,

Even not equal to 006 or 009 will not work and I think the culprit here is the System, did you try the Role Connector(Element)?

Thanks

Ramesh

[sreekanth_sunkara · Accepted solution]

Thanks Ramesh,

I will try with ROLE_CONNECTOR or CONNECTOR, will let you know.

Thanks,

Sri

[sreekanth_sunkara · Accepted solution]

Thanks Ramesh,

I am able to resolve the issue with additing CONNECTOR as well to the Decision table.

Thanks,

Sri.