SAP_GRAC_ACCESS_REQUEST vs SAP_GRAC_ACCESS_REQUEST_HR

[Mario_Morales]

If we are currently using SAP_GRAC_ACCESS_REQUEST workflow process for ECC role provisioning, can we implement SAP_GRAC_ACCESS_REQUEST_HR later on and have them run at the same time? We may have a requirement later to update relationships in OM. Is there a way to do this we the regular workflow of SAP_GRAC_ACCESS_REQUEST?

[Colleen]

your question is already answered but thought I'd elaborate...

SAP_GRAC_ACCESS_REQUEST_HR version updates the HR object. This allows you to do access requests on the HR objects.

SAP_GRAC_ACCESS_REQUEST updates the user... and based on provisioning settings will also update the HR object at the same time

The idea here is you keep all user and position*-based administration via GRC. No more going into PP01 to update HR to role relationships. (* position on assumption this is the HR object chosen in provisioning). You can also administer empty positions and set them or mass update positions with a role. In user request it's not possible to fix position assignments.

Regards

Colleen

[Mario_Morales]

Hi Colleen,

Thanks for your feedback. I'm assuming that with SAP_GRAC_ACCESS_REQUEST_HR assignments can be made to an object in OM. For example, you can create a request/approval process to be able to update the administrator of an org unit (A290). Is my thinking correct?

[shivam_agarwal1 · Accepted solution]

Hi Mario

Yes, you can run both at the same time as that is the separate workflow. You can use this later to update the relationship.

No, using SAP_GRAC_ACCESS_REQUEST you cannot update the relationship in OM. Please use respective workflow accordingly for the same.

Thanks

Shivam

[Mario_Morales · Accepted solution]

Thanks Shivam. That answers my question and will help me in future decisions.