What actions to assign to make someone a 'security' approver in CUP?

[Former Member]

How do you get someone to be part of the "security' approver determinator in a stage for CUP?

I know it has to do with what actions they are assigned in UME, but can't find any documentation on which ones. I found some other postings that said they have to be given the AESecurity role, which is not strictly correct. For one thing, the AESecurity role is the SAP delivered role. We were told that you don't use the SAP delivered roles. You make a copy of them and give these roles to your users. This way you can customize the roles.

We have a situation were we want to give someone access to approve requests in our "security" stage, but don't want to give them all of the oher capabilities of the AESecurity role.

We are on GRC/CUP 5.3 13.2.

Thanks.

[Former Member]

Hi Bob,

Are you using CAD's at all? Becuase it really depends on who you are stiing up as an approver in the security stage.

Regards,

Chinmaya

Edited by: chinmaya prakash on Mar 29, 2011 10:31 PM

[Former Member]

No custom approvers. I am talking about when you pick the "Security" option as the Approver Determinator for a stage.

Thanks.

[Former Member]

In that case it will only look for the AESecurity role since there are not many actions delievered in this role, I am guessing this one is based on role name.

regards,

Chinmaya

[koehntopp]

That is correct - you need to assign the UME role "AESecurity"

[Former Member]

If it has to specifically be the "AESecurity" role, and not specific actions/permissions, then how come I can access the requests that are in this stage, but I don't have this role? I have role "AE_Admin", which is a copy of the "AEAdmin" role. (As mentioned earlier, we don't use the SAP delivered roles, we use a copy of the roles.)

Thanks.

[Former Member]

Bob,

AESecurity only has 3 actions(I think).. You could try it 3 different time to see if you still get it!

It would be good to know for all of us!

Regards,

Chinmaya

[Former Member]

AESecurity in our version (GRC 5.3 SP13) has 19 actions. What are the three actions in your version? Three would be fairly easy to test.

Thanks.

[Former Member]

Action needed is "CreateSAPUser".