User Parameter Removal via GRC Access request

[Sri_S1]

Hi,

we have a requirement to remove user parameter(s) along with the role removal/user change in GRC access request. I think there is no standard SAP GRC functionality to handle the parameter removal automatically along with role removal in GRC access request. so i added permission for security approval stage to edit(Add/Remove) the values in parameter tab before submitting(approving) the request. Still the parameter removal is not working, please advise on this.

Thank you,

Sri.

[vijayakumarsuth]

May be time to create incident to GRC now.

[Sri_S1]

Hi Vijayakumar,

I did opened Incident with SAP and waiting for reply from their Development team. Will keep updated.

Thanks,

Sri

[vijayakumarsuth]

Hi Sri,

Removal of parameter is allowed in GRC request just like other roles and system. One difference in request between role and parameter options is that,with Roles you have provisioning action whereas for Parameter you don have any provisioning action. So, when you raise a change request for an existing user, the parameters will be fetched for user based on datasource configurations, for example, your datasource system is configured with ABC system then parameters will be fetched for particular user and shows the same in request under parameter tab. Now end user can decided which one to remove and submit the request, during the workflow process and autoprovisioning process, only parameter which are exists in request will be updated and rest will be removed for user.

[Sri_S1]

Thanks Vijayakumar,

My understanding is the same. I allowed security team to remove the parameters from the access request at the security approval stage instead of end user removing the parameters. but once the request is approved the parameter removal is not working.

Thank you,

Sri.

[former_member820581]

Hi Vijay,

Any idea on how to restrict the approvers from editing the parameters tab in an access request. We have a requirement to disable add/remove option under the parameters tab by the approvers during the approval workflow.

Thank you in advance.

Regards,

Amrutha