cancel
Showing results for 
Search instead for 
Did you mean: 

Restriction of Approver/Admin Delegation in GRC

former_member794456
Discoverer
0 Kudos

Hi Experts,

In GRC 12, I have few questions on Approver/Admin Delegation -
  1. Is it possible to restrict Delegation period till a particular day - right now I see that GRC is allowing approvers to delegation their access permanently like till 31/12/9999.
  2. Is there a way to set the default status of delegation from "Inactive"/ Blank to "Active"

Thanks,

Chirag.

Accepted Solutions (1)

Accepted Solutions (1)

FilipGRC
Contributor
0 Kudos

Hi Chirag,

I am not sure if this can be done via some configuration setting or this comes under an enhancement part.

This has to be done via ABAP enhancement.

Thanks,

Filip

Answers (2)

Answers (2)

FilipGRC
Contributor
0 Kudos

Check also this SAP note

2671964 - Validity date title is not aligned correctly in Delegate approver and Delegate admin views.

FilipGRC
Contributor
0 Kudos

Hi Chirag,

yes, this is possible (V12_750 / SP15) to restric the date to particular date - see screen 1

approver-delegation.png

This can be found under My Delegation \ Aprover delegation.

The same story is for admin delegation where you need to setup value to.

If you missing this values maybe you have lower SP level. Please check it out

When it comes to second part of your question this can not be done via custmizing - you need to ask developers to change default values. They should look into the GRAC_OIF_APPROVER_DELEGATION_CC component and in particular in web dynpro component GRAC_UIBB_APRV_DELEGATION

One option is to create a view enhancement.

Thanks,

Filip

former_member794456
Discoverer

Hi Filip,

Thank you for your comments.

But my question for the first point here is that I need to set a restriction for the approvers while they delegated their access to others.

For ex.- GRC should through an error when approver try to delegated their access more then 30 days. GRC should not allow approver to do so.

I am not sure if this can be done via some configuration setting or this comes under an enhancement part.

Thanks,

Chirag