05-16-2016 8:43 PM
Hello All,
I have a requirement from my customer to make "Rejection at role level" active for the MANAGER stage on GRC AC.
I changed my MSMP config to activate it, but when at the manager stage trying to reject a role and approve the rest of the request, the system gives me the message "User xxxxxxxxxxxxxx does not exist on system xxxxxxxxxxxxxxx"
Users are requested to select the system upon request submission and system has NO APPROVAL path.
Only work around I found is for the manager to click on "Show All Assignments" and bring the requested system on. Doing this he is able to approve and reject any role without issues.
Anyone has a recommendation?
05-17-2016 11:32 AM
05-17-2016 2:31 AM
Hello Bruna,
1. Please Check if the Parameter 2051 is maintained as YES or Not?
If set to YES, the application validates the UserID exists on the specified source system. If the user does not exist, the application does not allow the request to continue. The validation is performed when you choose Submit or press Enter
2. Also, Check if the maintain data source configuration is maintained properly?
Regards,
Rakesh M.
05-17-2016 6:58 AM
Hi,
in User Provisioning Maintain provisioning settings>Global/System> tick mark Account validation check, and set it to Error. This will prevent submission of request(eg. change user), for a user id of 1 system, but assignment of role in other system(where user id does not exist)
Regards
Plaban
05-17-2016 11:28 AM
Hi Bruna,
In SPRO-->Maintain provisioning settings(Global/System Provisioning) for Create User if does not exist option you need to check the box for "For Assign Role Action" and "For Change User Action".
Also check if the request type(New) has the appropriate actions(Create User and Assign object) under Define request types.
Regards,
Manju
05-17-2016 1:37 PM
Hello,
Thank you for your reply!
This could be an option but it conflicts with the "account validation check" (that is a client requirement) to prevent a new account request bring submitted when user ID already exists.
05-17-2016 11:32 AM
05-17-2016 1:50 PM
Hello!
Thank you! We are on 10.1 SP11, this note sounds exactly what I'm looking for. We will apply it today and I will post how it went.
Thank you very much again!
05-18-2016 7:26 PM