on 02-19-2015 3:11 PM
Hi all.
I have a doubt regarding transaction GRFNMW_CONFIGURE. If i access to see the stages of my path:
Then in the stage itself i see a button called Auto-Approve. Please see image below:
Kind regards and thank you.
Sara.
Dear Sara,
This functionality does not work as the Tcode GRFNMW_CONFIGURE is now obsolete. This is documented in the note 1739043 but unfortunately this note is not released for customer.
Thanks & Regards
Japneet Singh
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hi Japneet, Collen.
I understand that is obsolete but is this field Auto-approve working? If not, don't you consider could be a good idea to have this button in order to autoapprove stages?
I don't know how to get this "autoapprove" behaviour into the MSMP process so i consider a good point if i have something like this field.
Kind regards and thank you.
Sara.
Hi Sara,
I have tried enabling the check-box Auto-Approve for one of the stage in our workflow path using GRFNMW_CONFIGURE and tested my workflow. I can see that stage is not getting auto approved even though I have checkbox checked.
I assume that this button currently has no functionality available and best thing you can do is raising it to SAP and check with them the purpose of having this button and since not working get this functionality enabled depending on the details they provide.
Regards,
Madhu.
Hi Collen.
Understood, however i have the following requirement:
As we don't have an auto-approval/auto-rejection, to get this requirement i am considering to escalate the Access Request after the period of time mentioned above, however the escalation functionality does not allow me to escalate the access request to another path with no stages for auto-approval. And/Or if i need to auto-reject the access request i don't know how to perform it.
Kind regards and thank you.
Sara.
Hi Sara
For auto reject - you could schedule the MSMP Instance Cancel program (Stale Batch - can't remember it off the top of my head). It's an SE38 program.
For your auto-approve scenario that doesn't make sense. You are basically saying, approval is important but if someone doesn't get round to it then have the access without approval. I can see why MSMP would prevent you from using escalation to a path with no agent. Either, the Approver needs to be pulled aside and reminded of his/her responsibility in actioning approvals; escalate to another agent/Admin team; or you don't actually need approval in the first place.
Waiting 5 days and then approving something just does not make sense from a risk point of view (has the access risk changed in a 5 day period) or from a customer service point of view (as a user I would be confused as to why I have to wait 5 days for access to automatically receive access but prior to that someone must review).
A large part of escalation is embedding process so that Managers actually do their job and don't rely on the system 100% for the. You'll end up risking managers pressing approve without making any effort to understand what they just approved.
Regards
Colleen
Hi Collen.
Agree with your comments regarding the approval process, i was just trying to ask how could i auto-approve a request with an approver in the middle.
Regarding the auto-rejextion, few questions:
Kind regards and really appreciate your advises.
Sara.
Hi Sara
The program is GRFNMW_BATCH_STALE_REQUEST. You can schedule a background job to run daily and specify the days in the variant. The program will cancel requests that are pending for more than the specified days in the variant.
No, you will not be able to reject partially. The entire request will be cancelled by this program
Thanks
Sammukh
Hi Sammuukh, Collen.
So based on your comments i am considering the following approach. For each role i will include an alternate approver. This alternate approver will be the Administrators and then for the next requirement and scenario:
Requirement: After 5 days of no role owner response the Access Request is rejected partially (only for this especific role).
Scenario simulation: One Access request - two roles assigned and two different role owners (A and B):
- IF role owner A approves their access request
- and role owner B approver DOES not approve their access request
- THEN the Access Request for the second Role Owner will be escalated after 5 days to an Admin which will reject partially this role assignment.
What do you think? I include a manual action (the admin action) however i cover the requirement 100% for a partially role Rejection after 5 days no response.
Kind regards and thank you.
Sara.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.