Notification Messages sent to all role approvers

[former_member86670]

Hi SDN members,

I have a question related to notification messages in GRC10.0

We have configured Access Request Management in the following way.

Requestor ==> Role Approver ==> SoD Approver ==> Provisioning

The role approval is based on role ownership (company attribute of the role).

The role owner is determined with an BRFplus line item Initiatior rule and a BRFplus line Item Routing Rule.

Our issue is as follows:

Requestor creates requests (eg. change user) and includes a 2  or more roles with different company attribute value).

As soon as the requestor submits the request, the approval path is calculated by the initiator rule based on the company of the role.

The approval path outcome determines the approver (with help of the routing rule, that contains approver id and mail address).

Despite the fact that we have different role approvers, all approvers receive the email notifications for all roles.

e.g If we have a request for Company ABCD and Company EFGH with different approvers, both approvers receive 2 notification messages for both roles.

What we want to accomplish is that each approver receives only 1 notification for only their company. How can we manage this? Do we need to change something in the notification settings or stage config?

All help is much appreciated.

Regards, Dave Suurs.

[former_member86670]

All,

Thank you for your comments/replies

I answered you all independly.

[former_member227717]

In Notification Settings of required stage, what Recipient ID is mentioned for  Notification Event NEW_WORK_ITEM?

If Notifications are to be send to only specific role owner create new agent of Notification Type similar to GRAC_ROLEOWNER using Agent Rule ID as GRAC_MSMP_ROLEOWNER_AGENT

[former_member86670]

Hi Deepak,

We use an Agent Rule id in the notification settings of NEW_WORK_ITEM.

Which uses the a BRFplus table

Business Process, Functional Area, Request Type, Company, System, Line Item, User id (=approver id), Type, Recepient (=mail address)

[former_member222957]

Hi Dave,

Is only the mail send to both approver groups or do both approvers also have an item in their work inbox allowing them to approve requests for a different company?

Please check the audit log and the work inbox of different approvers.

Another reason could be that you have cross-company roles for instance roles having company ABCD and EFGH assigned. This might also result in notifications for both approver groups.

Best Regards

Sebastian

[former_member86670]

Hi Sebastian,

The mail is going to both approvers and also the work items appear in the inbox of both approvers.

We don't use cross company role(s). Every role has its unique company assigned.

Regards, Dave

[former_member222957]

Hi Dave

If the work item should appear only in the inbox of one approver group then you should check your BRF+ and the decision table first. Probably not only the mail is send to different approver groups but the whole request. This could be a reason why also several mails are send out.

For quick tests you can use the function simulation option in BRF+.

Best Regards

Sebastian

[Former Member]

Hi Dave,

Elaborate a little more on BRF+ decision table and configuration you have done based on Company attributes.

In Meanwhile check the agent rule you are using at step 3 during the MSMP workflow.

Rajesh

[former_member86670]

Rajesh,

Routing BRFplus decision table looks as follows:

Business Process, Functional Area, Request Type, Company, System, Line Item, User id (=approver id), Type, Recepient (=mail address)

Initiator BRFplus decision table looks as follows:

Business Process, Company, System, Line Item, Trigr Value (=Approval Path and Agent rule)