Role Approver Actions-Add, Keep, Remove

[former_member788628]

Currently, our role approvers were not able to modify the action of (ADD, KEEP, REMOVE). This fields was greyed out and it was passed in by IDM as ADD or REMOVE depending on what the user selected. We just implemented SP12 for CUP. We noticed that under Workflow>Stage>Change Request Content if this is set yo YES then the approver has the ability to do perform these functions below. 1 & 2 are ok. We reject roles at the role level on the request. However, we want to disable the ability for the role approver to modify ADD, REMOVE, KEEP on #3.

1. Approver can reject

2. Approver can modify the Valid State Date and Valid To Dates

3. Approver can modify the action and change it to KEEP or REMOVE. We wnat to disable this drop-down selection.

We noticed that if we Workflow>Stage>Change Request Content and change the value to No then the role approver can no longer reject the role.

Does anyone know how to disable this functionality so that role approvers cannot change the action on the request?

[former_member788628]

SAP confirmed that there is no way turn this feature off if the approver needs to reject at the role level so this will be a process change we need to implement most likley. However, it would appear that with the Add Role feature turned on there is a new button called Existing Roles/Groups that is displayed. Approver can now view the roles assigned in the SAP ABAP back-end without adding new roles which is very nice that it is display only. Thank you for your quick response to my question.

New question: Do you know if there is a web service that is used to call this new feature Existing Roles/Groups. We would like to utilize that for our IDM system to call a web service and display this on the request form.

[Former Member]

Rene,

I highly doubt that there is a web service for Existing roles/groups. Also, this feature has been in CUP for past 3 years or so.

Regards,

Alpesh

[Former Member]

Hi Rene,

This is a catch 22. There is not configuration which will not allow role owner to change the action and also ability to reject roles.

Regards,

Alpesh