No Approver Agent / Automatic approval

[Former Member]

Hi everyone,

in GRC 5.3 there was the possibility to create a "No approver" path/stage, which approves every request automatically, whithout waiting for any manual approval. A proper example would be the case of a change request with only role removals. In case of a role removal, we do not see any need of a manual approval (in our environment).

We have set up a path and a stage for it.

Question 1: in GRC 10.0, we would like to set up such a path, which approves automatically every role removal request. Our problem is, that the request stops and waits for some manual approval. Is there something we need to take into consideration when creating such a no-approver stage? any special requirements?

Question 2: suppose we have a request, which contains both role removals and new roles to be assigned. Is it possible to split the request and send it on two paths (one for manual role approval and the other one for the automatic role removal)?

Our idea was to create a custom agent, ZGRAC_NOAPPROVER and for him a custom Agent Rule with Approval purpose. Besides specifying the conditions ReqType=Change Request and Action=Remove, what should be the other columns of the top expression table? We have implemented this and linked it correctly to the stage and the role removal request still hangs and waits for some manual approval (in some work inbox, we don't know where).

Any help is kindly appreciated.

Kind regards,

EM

[former_member193066]

in GRC 5.3 there was the possibility to create a "No approver" path/stage, which approves every request automatically, whithout waiting for any manual approval. A proper example would be the case of a change request with only role removals. In case of a role removal, we do not see any need of a manual approval (in our environment).

We have set up a path and a stage for it.

Question 1: in GRC 10.0, we would like to set up such a path, which approves automatically every role removal request. Our problem is, that the request stops and waits for some manual approval. Is there something we need to take into consideration when creating such a no-approver stage? any special requirements?

Yes, user BRF+ for determining initiator.. make prov_action as 1 input parameter to determine rule result.

if action type is "remove" will take path which does not have any stages will be approved automatically 

Question 2: suppose we have a request, which contains both role removals and new roles to be assigned. Is it possible to split the request and send it on two paths (one for manual role approval and the other one for the automatic role removal)?

yes request splits.. based on line items.

Our idea was to create a custom agent, ZGRAC_NOAPPROVER and for him a custom Agent Rule with Approval purpose. Besides specifying the conditions ReqType=Change Request and Action=Remove, what should be the other columns of the top expression table? We have implemented this and linked it correctly to the stage and the role removal request still hangs and waits for some manual approval (in some work inbox, we don't know where).

You can create custom approver .. if any thing struck check workflow logs.

REgards,

Prasant

[former_member304001]

Hi,

May be useful

Question 1: in GRC 10.0, we would like to set up such a path, which approves automatically every role removal request. Our problem is, that the request stops and waits for some manual approval. Is there something we need to take into consideration when creating such a no-approver stage? any special requirements?

While creating Path, we should not maintain any stages to that path, so that request will auto approve

Regards,

kIshore

[Former Member]

We have also tried this, we removed all stages from the path and tested again, the request does not get approved automatically...

[former_member304001]

May be usefull

did you check in MSMP instance runtime monitor (GRFNMW_DBGMONITOR_WD) and SLG1

Regards,

Kishore

[former_member227717]

Hi Erik,

Set Auto  Provisioning settings in   Maintain Global/System Provisioning Settings  as Auto Provisioning at end of the path.

Regards,

Deepak Jaiswal