Change/Edit Request Attributes in CUP at Approval Stage

[former_member325725]

Hi All,

We have SAP GRC AE/CUP 5.3 SP07 installed in our environment. In our work flow of the request, there is a requirement that some of the request attributes need to be changed by the role owner/ approver at the approval stage of the request. The request contains both SAP standard as well as some custom attributes. I only see an option to edit the validity date or the roles/profiles of the request at the approval stage. Is this option configurable? If not, do we have any work around to achieve the requirement?

Thanks, Anil

[hkaur]

Hi Anil,

You cannot edit the information of a request once it enters the approval stages. This is an enhancement so please raise an enhancement request for this.

Harleen

SAP GRC RIG

[Former Member]

Hi Anil,

I think this is an important feature and valid requirement. It is not possible now but hopefully, SAP fixes this in future releases.

Regards,

Alpesh

[former_member325725]

Hi ,

Now we have decided NOT to let approvers change the request content other than approve/reject profiles in the request. So this brings up the issue that they may be able to change the validity date in the request.

Does anybody know how to block this ? Is there any UME action that controls this? But an approver will still need to reject a profile if required.

Thanks,

Anil

[Former Member]

Hi Harleen and Alpesh,

We are in GRC 5.3 SP8 and we would like to allow approvers in each stages to change the validity date (e.g. Valide to date) in a role request. Here is the situation:

I have a workflow path which has two approval stages. Both stages were configured to allow "Change Request Content". What I noticed is the approver in the first approval stage can change the validity date and then approve the request. But when the request is on the 2nd approval stage, the approver can no longer modify the validity date.

Is this the same scenario which Harleen said that "You cannot edit the information of a request once it enters the approval stages"? If this is the same scenario, do you know whether a fix is considered by or available from SAP?

There may be situations where we don't want the 2nd approver to overwirte what 1st approver has approved. However, in some situations we may want to keep that flexibility to let the later approver to have the last say.

Thanks for your input.

[Former Member]

>

> Is this the same scenario which Harleen said that "You cannot edit the information of a request once it enters the approval stages"?   If this is the same scenario, do you know whether a fix is considered by  or available from SAP?  
> 
> There may be situations where we don't want the 2nd approver to overwirte what 1st approver has approved.   However, in some situations we may want to keep that flexibility to let the later approver to have the last say.

We are in the same situation as well. We are very interested to know- will this functionality will be available as part of a future SP?

Thanks

--

Jes

[Former Member]

>

> Is this the same scenario which Harleen said that "You cannot edit the information of a request once it enters the approval stages"?   If this is the same scenario, do you know whether a fix is considered by  or available from SAP?  
> 
> There may be situations where we don't want the 2nd approver to overwirte what 1st approver has approved.   However, in some situations we may want to keep that flexibility to let the later approver to have the last say.

We are in the same situation as well. We are very interested to know- will this functionality will be available as part of a future SP?

Thanks

--

Jes

[Former Member]

All,

It depends on what dates you are referring to. If you are reffering to the validity dates in the Request header, then these dates only relate to the validity of the request.

However, if you select the stage configuration to be able to change content, the approver can amend the roles etc assigned to the request. At that point, they can enter revised validity dates for the roles or FFID assignment which will then be provisioned into the SAP system.

Although they cannot change the headers of the request, approvers should be able to update the provisioned access held within the request?

It certainly works like that on the assignment of Superuser Access.

Simon