ROLE FOR MASTER DATA CHANGE AND ROLE FOR PLAN

[Former Member]

Hi all,

I created a user with this roles :

SAP_GRC_FN_ADISSUE_PROCESS

SAP_GRC_FN_BASE

SAP_GRC_FN_BUSINESS_USER

SAP_GRC_FN_DISPLAY

SAP_GRC_NWBC

SAP_GRC_SPC_CRS_CM_BR_SPEC

SAP_GRC_SPC_CRS_CM_DS_SPEC

SAP_GRC_SPC_CRS_CM_JOB_SPEC

SAP_GRC_SPC_CRS_CTL_OWNER

SAP_GRC_SPC_CRS_ICMAN

SAP_GRC_SPC_CRS_ISSUE_ADMIN

SAP_GRC_SPC_CRS_ORG_TESTER

SAP_GRC_SPC_CRS_PLC_ADMIN

SAP_GRC_SPC_CRS_PLC_APPR

SAP_GRC_SPC_CRS_PLC_DISPLAY

SAP_GRC_SPC_CRS_PLC_MANAGER

SAP_GRC_SPC_CRS_PLC_REVIEW

SAP_GRC_SPC_CRS_POLICY_OWNER

SAP_GRC_SPC_CRS_PRC_OWNER

SAP_GRC_SPC_CRS_PRC_TESTER

SAP_GRC_SPC_CRS_SPR_OWNER

SAP_GRC_SPC_FDA_AUT_SPECIALIST

SAP_GRC_SPC_FDA_CAPA_EXEC_APPR

SAP_GRC_SPC_FDA_CAPA_PLAN_APPR

SAP_GRC_SPC_FDA_CTL_OWNER

SAP_GRC_SPC_FDA_ICMAN

SAP_GRC_SPC_FDA_ORG_TESTER

SAP_GRC_SPC_FDA_PRC_TESTER

SAP_GRC_SPC_FDA_SPR_OWNER

SAP_GRC_SPC_GLOBAL_AUT_ADMIN

SAP_GRC_SPC_GLOBAL_CEO_CFO

SAP_GRC_SPC_GLOBAL_INT_AUD

SAP_GRC_SPC_GLOBAL_ORG_ADMIN

SAP_GRC_SPC_GLOBAL_ORG_OWNER

SAP_GRC_SPC_GLOBAL_PRC_ADMIN

SAP_GRC_SPC_GLOBAL_REG_ADMIN

SAP_GRC_SPC_GLOBAL_SRV_ADMIN

SAP_GRC_SPC_GLOBAL_TPL_ADMIN

SAP_GRC_SPC_REG_ORG_OWNER_1

SAP_GRC_SPC_REG_ORG_OWNER_2

SAP_GRC_SPC_SOX_AUT_SPECIALIST

SAP_GRC_SPC_SOX_CTL_OWNER

SAP_GRC_SPC_SOX_ICMAN

SAP_GRC_SPC_SOX_ORG_TESTER

SAP_GRC_SPC_SOX_PRC_TESTER

SAP_GRC_SPC_SOX_SIG_ADMIN

SAP_GRC_SPC_SOX_SPR_OWNER

ZSAP_GRC_SPC_231_AUT_SPECIALIS

ZSAP_GRC_SPC_231_CTL_OWNER

ZSAP_GRC_SPC_231_ICMAN

ZSAP_GRC_SPC_231_ORG_TESTER

ZSAP_GRC_SPC_231_PRC_TESTER

ZSAP_GRC_SPC_231_SPR_OWNER

ZSAP_GRC_SPC_262_AUT_SPECIALIS

ZSAP_GRC_SPC_262_CTL_OWNER

ZSAP_GRC_SPC_262_ICMAN

ZSAP_GRC_SPC_262_ORG_TESTER

ZSAP_GRC_SPC_262_PRC_TESTER

ZSAP_GRC_SPC_262_SPR_OWNER

ZSAP_GRC_SPC_REG_ORG_OWNER_1

ZSAP_GRC_SPC_REG_ORG_OWNER_2

SAP_GRC_RM_API_ACTIVITY_OWNER

SAP_GRC_RM_API_CENTRAL_RM

SAP_GRC_RM_API_CEO_CFO

SAP_GRC_RM_API_INCIDENT_EDITOR

SAP_GRC_RM_API_INTERNAL_AUD

SAP_GRC_RM_API_LIAISON

SAP_GRC_RM_API_OPP_OWNER

SAP_GRC_RM_API_ORG_OWNER

SAP_GRC_RM_API_RISK_EXPERT

SAP_GRC_RM_API_RISK_MANAGER

SAP_GRC_RM_API_RISK_OWNER

SAP_GRAC_ACCESS_APPROVER

SAP_GRAC_ACCESS_REQUEST_ADMIN

SAP_GRAC_ACCESS_REQUESTER

SAP_GRAC_ALERTS

SAP_GRAC_BASE

SAP_GRAC_CONTROL_APPROVER

SAP_GRAC_CONTROL_MONITOR

SAP_GRAC_CONTROL_OWNER

SAP_GRAC_DISPLAY_ALL

SAP_GRAC_REPORTS

SAP_GRAC_RISK_ANALYSIS

SAP_GRAC_RISK_OWNER

SAP_GRAC_ROLE_MGMT_DESIGNER

SAP_GRAC_ROLE_MGMT_ROLE_OWNER

SAP_GRAC_ROLE_MGMT_USER

SAP_GRAC_RULE_SETUP

SAP_GRAC_SETUP

SAP_GRAC_SUPER_USER_MGMT_ADMIN

SAP_GRAC_SUPER_USER_MGMT_CNTLR

SAP_GRAC_SUPER_USER_MGMT_OWNER

SAP_GRAC_SUPER_USER_MGMT_USER

But with this user i'm not able to create a plan and i'm not able to get master data change to Organizational Unit for which i'm owner (for example i can't assign subprocess even if i'm both organizational owner and process owner of every organizational units and every processes).

Did i forget some role to allow this user these action?

Thanks in advance.

Regards.

Daniele.

[Former Member · Accepted solution]

I see that you have created some ZROLES.  It is possible that you may not have done all the required configuration for those.  See page 39 of the security guide.  The standard roles are shown there, but you also have to configure this section of the IMG to include your ZROLES.

[Former Member · Accepted solution]

Hi Paul, thanks for your suggest. i configured the custom agent determiantion rule also with my zsap roles but i still have the same problem.

Is there a particular business event that i have to configure to allow at the user the creation of a plan and the master data change?

[Former Member · Accepted solution]

Have you configured per the attached, with your roles?

[Former Member · Accepted solution]

Yes i configured my roles as shown in your attachment.

The strange thing is that when i make a request change, the person who receives the approve request is only the fallback receiver.

Regarding the assigning of a subprocess to organizational unit i noticed that i can't assign subprocess with my user (even if i'm the fda process owner, cross regulation process owner and the organization owner) but i can assign or remove a control from this subprocess( i'm also the control owner).

Regarding the plan, when i try to create a plan, the plan menù works correctly but when i open the dropdown list with the different kind of plan it is blank.

[Former Member · Accepted solution]

I would have to look at all your configuration, including your role setups.  Therre are too many things going on here.  There are quite a few areas in the IMG that could be causing these issues. 

[Former Member · Accepted solution]

Hi Paul.

In the xlm attached there are my configurations and the role of my user (including some new role i added yeserday).

Let me know if you need other data.

Thank you very much.

Daniele.