on 03-31-2014 9:49 AM
Dears,
I am trying to map AC fields in Access Request from HR system. However, manager id is not fetched from HR system. When I see in GRACUSER table for HR system connector, column "MANAGER_ID" is empty for all users!
Below is the mapping configuration in GRC system:
Below is the Data Source Configuration:
Can anyone please advise?
Regards,
Faisal
Hi,
I followed note#1609554 - How manager info is pulled from HR system into ARQ (suggested by colleen in one of the threads) and maintained the path "A002" for the ERP production system which is having HR. Then in field mapping, I selected "MANAGERID" under AC field Name column. However, I did not find any relevant name under "System Field Name" column after pressing "F4"!
Anyhow, I maintained "MANAGERID" there also and table name as "PA0105" and Subtype as "0001"
I synchronized the users from HR system. Still, I am not able to get the manager id in access request! I even did not find the manager id in table GRACUSER.
Please advise.
Regards,
Faisal
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
By the way, I would like to ask if I have to do any mapping in "Maintain Mapping for Actions and Connector Groups" for HR system connector?
So far I have not come across with any note/post in SCN which says this. I maintained the User Search Data source as HR (also LDAP) and then chose "A002" in "Maintain Connection Settings" for HR system connector.
Can anyone please confirm if this is ok?
Regards,
Faisal
Do I see the manager ID in GRACUSER table, under MANAGER_ID column?
I see the manager ID in MANAGER_ID column from LDAP which seems to be working fine. As soon as I mention any user id in access request, his manager id (from GRACUSER table) is pulled and mapped.
But for the HR system connector in GRACUSER table, I dont see any manager ID under column MANAGER_ID?
Can anybody advise?
Regards,
Faisal
Keep in mind that the GRACUSER table should not has one user per connector. Has one user with the first connector where exist (the system search the user in the connectors under User search data source). So can happend that you have a user from LDAP connector in GRACUSER table (user search data source) with manager data from HR system (user detail data source).
Regards,
Hi,
The sequence is:
1. LDAP
2. HR system
I am expecting that it should pull the user details from either of these 2 systems. And that is why I believe, we can define more that user details data sources to that it can keep searching one after the another and pull the details if available.
Regards,
Faisal
Does this happen like this?
I was thinking that, in GRACUSER table there would be users from different connectors with details (if these connectors are defined in user search data sources).
Since I have LDAP as number 1 in sequence as user search data source, I am able to see the manager ids in GRACUSER table, but not for the connector of HR system.
Can you clarify and confirm?
Regards,
Faisal
Hi Faisal,
The table wichs contains multiple users (one per connector) is the GRACUSERCONN.
Test it:
User search data source:
1. LDAP
2. HR system
User detail data source:
1. HR system
2. LDAP.
If you open a request and select one user, the manager information will be pulled from hr system (if the information of the manager is entered in HR).
Regards,
Dear Prasant,
Thanks for the reply.
Can you please help me with below:
1. I maintained the connector settings accordingly. Also maintained the business process and sub processes. Does it have any significance here of business process?
2. I maintained LDAP and HR systems as User Details Data Sources as shown in the blog. However, I use LDAP as user authentication data source. Do I also need to maintain user authentication data source as HR?
Please clarify.
Regards,
Faisal
Hi,
Business process and sub processes are information used in risks and functions clasification (ARA) and roles clasification (BRM).
When in a request you search a user from the pop up, the system search against the connector defined in "user search data source". When you select the user, the info stored in the request like email, name, lastname, manager, etc are the shown from "user detail data source".
The "user authentication" connector is to use the end user login page, you can make a request without having a user in GRC.
Regards,
Caludio,
Thanks for your reply.
I have the same understanding. Still I am facing the HR data mapping issue. Not sure how this is to be troubleshooted.
I did the standard configuration. However, still feel that I am missing something due to which it is not getting mapped. But not sure what I am missing.
Any advice would be a great help!
Regards.
Faisal
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.