GRC10: Authorization Object for Controlling change in Access Request.

[Former Member]

Dear All,

Is anyone aware of an object which I can use to restrict what an approver can see and change in the access request? I have a scenario where I do not want the approver to change anything like user details, parameters etc in the change request tha comes to him/her for approval.

He/she should just be approving or rejecting the request, not making any changes in it, specifically to the user details. I agree there is a config for he/she nt able to change the roles but what I am looking for is specifiaclly the user details.

Any help will be appreciated.

Thank you.

[jatin_grover]

Instead of using auth object you can use EUP's..create a new EUP based on your requirement and specify this EUP at the stage level setting.

[Former Member]

HI,

You can find all the objects in role SAP_GRAC_ACCESS_APPROVER which allow approver to approve a request. You can check with following authorization objects:

GRAC_EMPLY

GRAC_USER

GRAC_REQ

GRAC_ROLEP

Regards

Rajan Arora