CUP: Notification Mail after Role Approval

[Former Member]

Dear SAP Experts

We are running GRC AC 5.3 SP11.2 and facing a problem with the CUP workflow behavior.

Each time we change a existing user in the system and assign him at least two new roles with diffrent role owners, we get some problems at the role owner approval stage.

As soon as the first role owner provides his role approval a message is sent out to the requestor, manager and user that all changes to the user profile are done. This behavior repeats for each role owner which has to provide a approval to that request. The roles it self are assigned to the user account when the last role owner approved the request.

Under AC 5.2 we had only one mail beeing sent out to the requestor, manager and user when all roles were approved.

The role owner stage has following settings:

Approval Type --> All Approvers

Do we have to customize some more settings as well?

Many thanks for your help Jeffrey

[Former Member]

Hi Frank

Following settings are implemented at the role owner stage (last stage before auto provisioning):

Notification Configuration:

Approved --> User / Requestor / Manager

Rejected --> Requestor / Manager

Different text for mails are maintained

Additional Configuration

Risk Analysis Mandatory -> No

Change Request Content --> Yes

Add Role --> No

Path Revaluation for New Roles --> All Roles in Evaluation Path

Approval Level --> Role

Rejection Level --> Role

Approval Type --> All Approvers

E-mail Group --> BLank

Comments Mandatory --> Yes / Rejected

Request Rejection --> No

Reroute --> No

Confirm Approval --> No

Confirm Rejection --> No

Reject by E-mail --> No

Approve by E-mail --> No

Forward Allowed --> No

Approve Request Despite Risks -> Yes

Display Review Screen--> Yes

Additional Security Configuration (Approval Reaffirm)

Approve --> No

Reject --> No

Create User --> No

Under AC 5.2 we used the Notification Configuration / Approved Mail to inform the defined persons that the request is approved and provisioning is done. This mail has been sent out only once to the persons after all role owners worked on the request. Obviously AC 5.3 behaves different after we have done the migration:-))

Jeffrey

[Former Member]

Hello Jeffrey,

If you don't want the user to get mails after approval of each role , uncheck the Approved field in notification configuration.

The user will still get a mail at the end of successfull provisioning ( auto provisioning) with the subject "Request <number> provisioned" and with user id & password details.

Regards

-Ranjiv

[Former Member]

Hi Ranjiv

That means in case a request has 5 roles owners the defined persons (defined in the role owner stage to get a message after the approval) get 5 time a mail telling them that a approval on role level has been done in this particular stage? Under AC 5.2 we had only one mail beeing sent out to the defined persons after the hole stage was approved.

Thanks for clarification

Jeffrey

[koehntopp]

It really depends on the stage level settings.

How are notofications configured at the role owner stage - are the boxes for "requester" or "user" ticked?

If so, as the request splits up for each role owner, each approval will trigger an email. If you don't want that, don't configure it that way.

And I'm pretty sure it worked the same way in 5.2...

Frank.

[Former Member]

Hi Jeffrey,

A mail will be send (to the recipients configured in the "stage") after each approver approves the request ,

End of the mail will have a link similar to this http://server:port/AE/index.jsp?loadRequestStatusSearch.do which takes the user directly to search the status of his request where he can check if the request is completely or partially approved.

And once the request is completely approved the "Request provisioned " mail is send to the user .

Regards

-Ranjiv

[Former Member]

Hi Frank

The approval level is role.

Regards Jeffrey

[koehntopp]

Please check your stage settings: is the "Approval Level" at "Role" or "Request" ...?

Frank.

[Former Member]

what about EMAIL notification settings? in that stage?