on 02-20-2014 5:22 AM
Hi experts!
We synchronized GRC with ERP HR data.
Recently our Organization has changed. And resync between GRC and ERP finished(mainly Repository Sync)
When access request created, Approval step 1 is GRAC_MANAGER and step 2 is GRAC_ROLEOWNER.
Most of requests are normal(about 25000 requests), but sometimes it takes Detour path.
Audit Message said cannot find Approver.
So I looked table GRACUSER with requester's ID and check MANAGER_ID.
But there is right Manager's ID.
Then I looked Function module 'GRAC_MSMP_MANAGER_AGENT'.
It imports some params. So I now trying to find out what is GRAC_MANAGER step by input some parameters to that function.
Can anybody kindly tell me about GRAC_MANAGER?
Or is there any documents about GRAC_MANAGER and other steps(eg, GRAC_ROLEOWNER, GRAC_SECURITY...)
I can add GRAC_ROLEOWNER but I don't know that base logic.
And what is logic to find Manager in GRC.
Thank you.
KT GRC.
Hi
GRAC_MANAGER is the user specified in the Manager field of the User Access Request
You need to ensure they have an GRC account to access the workflow
Regards
Colleen
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Thank you Colleen.
Manager ID has account on both GRC and ERP.
But GRC cannot find approver.
So when I check HR data on ERP, there is no manager.
I think MANAGER_ID field of GRACUSER table should be 'blank'.
But there is a value. So workflow goes to Detour Path.
Of course We can approve as GRAC_SECURITY step as Administrator on few requests.
But we need logic to explain to our customer and we don't know how manager of certain user determines.
It would be ok if there is information about synchronize logic between HR tables of ERP and tables of GRC. Then I can explain according to that.
I was pretty sure that USER master of GRC Access request is 'GRACUSER' table.
But now I assume there is another table or validation logic(Function module or Class method) to determine GRAC_MANAGER.
thanks.
regards.
KT GRC.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.