GRC AC 10: SOD Violation Detour is not followed even though there are violations in the request???

[former_member184114]

Hi All,

I have configured SOD Violation path in MSMP configuration. I have created a request which has violations in it. This is confirmed in the "Risk Violations" tab of the request.

When I submitted the request, I was expecting it to follow the SOD Violations Detour, which I configured. However, it followed the normal path!

It never entered the "SOD Violations" path. Please see the attached screen shot, which gives the details about the "Route Enabled" configurations.

Also, please see the below screen shot showing the details of "Route Mapping"

Can anybody tell me if I have missed any configurations or configured it correctly?

Regards,

Faisal

[Former Member · Accepted solution]

Hi Faisal,

Kindly check that the configuration parameter  1073 is set as  "YES".

If this parameter is set to 'YES' and SOD violation detour is configured in MSMP then

complete request will be sent to detour path if any risk exist from the

existing roles of user .

Hope this helps.

Best Regards,

Nandita

[Former Member · Accepted solution]

Hi Faisal,

Please maintain the Rule id"GRAC_MSMP_DETOUR_SOD VIOL" by Routing enabled under MSMP 5th stage "Maintain paths"..select the path and click on "Modify" (not modify task settings) and click on show more ..there you need to maintain above rule id by routing enabled selection..

What i mean to say is..You already maintained same setting at stage level by clicking the "Modify task settings"...but you also need to maintain globally as i mentioned above..

I hope now it should work..

Regards,

Ravi Alluri.

[former_member184114 · Accepted solution]

Nandita,

I have set parameter 1073 to "YES". Still the same problem.

Please suggest.

Faisal,

[former_member184114 · Accepted solution]

Ravi,

Can you explain me further?

Regards,

Faisal

[Former Member · Accepted solution]

Hi Faisal,

Please check that the sap note-1670504 is implemented in your system.

Hope this helps.

Best Regards,

Nandita

[former_member184114 · Accepted solution]

Nandita,

Thanks for this note.

I have created a class as directed in the note. After that maintained rule for agent in MSMP step#2. Then maintained rule agent in step#3.

Modified the stage and maintained ZCL_GRAC_WFA_RISK_OWNER as the agent id.

when I tried to generate the version of MSMP, I got this error:

Please also see the stage settings:

My question is, if any violations are found then it will use ZCL_GRAC_WFA_RISK_OWNER as the agent. But whom does it go to? I mean, who is the user?

Is it "RISK Owner", which I define in ARA tool? Please correct.

I am also pasting here my  "ZMSPD_ROLE_HELPER" stage settings:

Can you please suggest?

Regards,

Faisal

[former_member184114 · Accepted solution]

Any suggestion please?

Regards,

Faisal

[Former Member · Accepted solution]

Hi Faisal

Did you get a reply from SAP ?

I am having a similiar issue when I implemented the note. It seems that I have to maintain each risk with a risk owner.

How did you maintain your R Owner ?

Rgrds

Sameel

[former_member184114 · Accepted solution]

Still not solved.

Message got closed automatically since I was away

[Former Member · Accepted solution]

Hi Faisal,

can you please try the following:

Remove in the Maint. Rout mapping section the entry "ZMSPD_SOD_VIO_DTR" in the column "From Path ID" and replace it with the path-ID and stage where you set the detour.

(see also http://scn.sap.com/message/13382607)

regards

Johannes

[Former Member]

Hi Faisal,

On which SP Level you are ?

As you mention in Step 6: Maintain Route Mapping in the Fig 2, From Path & To Path are same Please check your path.

[former_member184114]

Sachin,

Thanks for your reply.

I will check and update you.

Regards,

Faisal

[Former Member]

Hi Faisal,

Make sure of the following:

1) Parameter 1073 should be set to YES.

2) Routing enabled checkbox should be checked while creating stage and also doing "Modify Task Settings".

You can also try creating your own Routing rule using BRF+.

Thanks and Regards

Ankit sharma

[former_member184114]

Ankit,

Thanks for your kind reply. I will check and see if this works as I am involved with some other acitivity now.

Regards,

Faisal

[Former Member]

Hi Faisal,

Kindly refer SAP Note: 1683655, all the instructions are given.

Regards,

Akhil Chopra

[former_member184114]

Akhil,

Thanks for your reply.

I have implemented note suggested by you and set parameter 1073 to "YES"

Still, it is following the normal path though there are violations in the roles assigned in the request.

Please suggest.

Regards,

Faisal