GRC10-“GRAC_POINT_CONTACT” Agent id not working

[Former Member]

Hi Experts,

We have configured an MSMP workflow with Detour path..when SOD violations appear at security stage the request will detour to Internal control team to check and create mitigation control Id.

In the first stage of Detour path we need to have internal control team,for which i have selected stage config id as “GRAC_DEFAULT_STAGE”AND Agent id as”GRAC_POINT_CONTACT” (( I can configure agent as Manager,but the problem is while creating request we need to input Internal control team member user id in Manager field ...End user usually won’t know who that particular user is..to avoid this confusion i have opted for “GRAC_POINT_CONTACT))..i have assigned “GRCCONTROL”user id as the Point of contact  at Access control owners ..same like how we usually do for “security lead”...

Even then, my workflow is cancelling the path and throwing an error as “No Agent Found” in Audit log..

But when i opt for “Manager” as Agent ID and give manager name in the Access request then the work flow is Working properly and moving further to other stages..

My Question is why it is not working when i configured with “GRAC_POINT_CONTACT”.. i don’t find any other Approver type of owners to create in central owners list to use in my scenario..remaining owner types Role owner,security lead,Mitigation controllers,mitigation approvers,FFID owner,FFID,controller are engaged for other purpose..

Can i create a customized Approver Owner type like “Internal control”and assign an user id or User group to it ?is it possible..

Otherwise how shall i overcome this issue...please help me out.

Regards,

Ravi.

[Former Member]

Missed Request Audit log screen shot in earlier message..

Please find below..

Regards,

Ravi.

[former_member671670]

Hello Ravi ,

What is the support pack level you are having .

None of the standard stage ID validating Point of Contact agent ID's as valid.Don know why .I am seeking developers help to debug the BADI which validating the agent ID's from Point of contact.

see the log which I have got ,

20120705112339.0380000 :B499BABFFEC01ED1B1D27B0E18B3374B:GRAC_DEFAULT_PATH:20120705112337.4550000 :001:00001:TS76308026::WF-BATCH:MSMP/GRAC_DEFAULT_PATH/20120705112337.4550000:MSMP_RULE:096:GRFNMW:Rule A/F/GRAC_MSMP_POINT_CONTACT_AGENT executed

20120705112339.0490000 :B499BABFFEC01ED1B1D27B0E18B3374B:GRAC_DEFAULT_PATH:20120705112337.4550000 :001:00001:TS76308026::WF-BATCH:MSMP/GRAC_DEFAULT_PATH/20120705112337.4550000:MSMP_RULE:098:GRFNMW:Rule A/F/GRAC_MSMP_POINT_CONTACT_AGENT returned results

20120705112339.0610000 :B499BABFFEC01ED1B1D27B0E18B3374B:GRAC_DEFAULT_PATH:20120705112337.4550000 :001:00001:TS76308026::WF-BATCH:MSMP/GRAC_DEFAULT_PATH/20120705112337.4550000:MSMP_RULE:131:GRFNMW:Retrieved rule result: 0001/OWNER/INIT_1

20120705112339.0720000 :B499BABFFEC01ED1B1D27B0E18B3374B:GRAC_DEFAULT_PATH:20120705112337.4550000 :001:00001:TS76308026::WF-BATCH:MSMP/GRAC_DEFAULT_PATH/20120705112337.4550000:APPL_DEBUG:184:GRFNMW:MSMP agent rule GRAC_MSMP_POINT_CONTACT_AGENT returned 1 approvers

20120705112339.0830000 :B499BABFFEC01ED1B1D27B0E18B3374B:GRAC_DEFAULT_PATH:20120705112337.4550000 :001:00001:TS76308026::WF-BATCH:MSMP/GRAC_DEFAULT_PATH/20120705112337.4550000:APPL_DEBUG:270:GRFNMW:BADI_GRFN_MSMP_APPROVER_VALID: validating 00001 line item/user id records

20120705112339.0960000 :B499BABFFEC01ED1B1D27B0E18B3374B:GRAC_DEFAULT_PATH:20120705112337.4550000 :001:00001:TS76308026::WF-BATCH:MSMP/GRAC_DEFAULT_PATH/20120705112337.4550000:APPL_TEMPL:004:GRFNMW_PUBLIC:Approver 'OWNER/INIT_1' for line item '0001' is not valid

20120705112339.1090000 :B499BABFFEC01ED1B1D27B0E18B3374B:GRAC_DEFAULT_PATH:20120705112337.4550000 :001:00001:TS76308026::WF-BATCH:MSMP/GRAC_DEFAULT_PATH/20120705112337.4550000:APPL_DEBUG:187:GRFNMW:MSMP agent BADI_GRFN_MSMP_APPROVER_VALID did not return any approvers

[Former Member]

Hi Rajendra,

We are on GRC10-SP06..

Please let me know once you resolve your issue..

Regards,

Ravi.

[Former Member]

Hi Ravi,

I faced same issue and this is Access issue with WF-BATCH id.

You can check this is SLG1 as well.

Please assign GRAC_ALL to this id and recreate the request.

Hope this help.