cancel
Showing results for 
Search instead for 
Did you mean: 

Problem in role assignement in CUP.

Former Member
0 Kudos

Hi,

we're having trouble in assign roles to an user from GRC. When we create an access request to create a new user (the user is created perfectly) or change user the role part doesn't change, i.e. when we put a role to assign it doesn't assign in the backend, same as for removal, the role selected doesn't remove from the user in the backend.

Anyone can help me?

Thank you very much!

Kind Regards,

Ignacio Barrionuevo.

Argentina.

Accepted Solutions (1)

Accepted Solutions (1)

Former Member
0 Kudos

Hi, we resolved the provisioning part, there were some misconfiguration in user provisioning, to solve this we went to SPRO->GRC->Access Control->User Provisioning->Maintain Provisioning Settings and in Role Prov we put Direct and check the boxes Role Assgn and CreateUser.

But we get the same problem with the role owner, when we create the request assigning one role with role owner and put the sistem (i.e. in create user), the role owner is not found, but when we create the same request without specifying the sistem the role owner is found but logically the user is not created because the sistem was not specified.

this is the print for that situation.

And this is the access request

Kind Regards,

Ignacio Barrionuevo.

Former Member
0 Kudos

Hi Ignacio,

There seems to be discrepancy of roles<-->System mapping.

Are you having or system showing multiple entries for the same system ?

Regards,

Ajesh.

Former Member
0 Kudos

Hi Ajesh,

We are working only with one backend system.

Could be the problem that it doesn't detect the approver for the system when we create the request?

Kind Regards,

Ignacio Barrionuevo.

amit_bajaj
Employee
Employee
0 Kudos

Hi is this a new user request without system selection? If so then you must choose the option in provisioning settings to automatically create a user.

What  is your msmp path and stage settings ?

Former Member
0 Kudos

Check your User Provisioning settings in SPRO

GRC>AC>USER PROVISIONING > MAINTAIN PROVISIONING SETTING

Check what you have in "Provisioning Option" and "Create user if does not exist" settings.

Former Member
0 Kudos

Hi Kaushal,

that solved the problem, Thank you! and thanks Amit and Ajesh for the help!.

Kind regards,

Ignacio Barrionuevo.

Answers (1)

Answers (1)

Former Member
0 Kudos

What SP are you on ?

Regards,

Ajesh.

Former Member
0 Kudos

It's SP7.

Kind Regards,

Ignacio Barrionuevo.

Former Member
0 Kudos

Hi,

Can you check and let us know what the request audit log says. May be it has some warnings or error messages.

Regards,

Ajesh.

Former Member
0 Kudos

Hi,

here is the print of the audit log. It says nothing about asigning the role, only that it was approved.

Kind Regards,

Ignacio Barrionuevo.

Former Member
0 Kudos

Hi Ignacio,

The request is going through escape path because of approver not found. Try updating the role approver and see if the provisioning is happening.

If its happening after updating role approver, it the problem with escape path.

Regards,

Ajesh.