SOD owner asked to mitigate risks of other owners due to Approve Despite Risk setting unchecked

[former_member538909]

Hi All,

We have enforced SOD mitigation via Task Settings (i.e. Approve Despite risk is unchecked at SOD stage). The SOD owners are determined on role attribute so indirectly functions as a role owner. Anyways, when an SOD owner tries to approve a GRC request by mitigating risks arising out of his roles and rerunning risk analysis(role status becomes green again) he is asked to mitigate other risks as well that are not associated with his access.

SAP had released a note 2321034 that deals with the issue but this for SP level 14 and we are on SP level 17. SAP on OSS message has mentioned that this note is discontinued and changes reversed as this adversely impacts other functionality. (I am yet to get specific details from them).

Considering this should be a fairly common scenario, would appreciate if you can share your experience on thoughts on how to tackle this situation

Thanks for reading.

[Former Member]

Hi Manish,

I am not sure why you are leveraging the check box : despite approve risks(task setting for SOD),I think you should perform the same with maintain routine mapping.Create a path for SOD and use route mapping from Role approver to SOD.

Thanks

Ramesh