Skip to Content
Author's profile photo Prasant Kumar Paichha

Initiator rule Using DB Lookup(Like :Manager and Role Owner are same)

Some time we get requirement to define initiator for


  1. Manager & Role Owner are same
  2. Requester and Role owner same


In these scenario we normally keep single level of approval,again this is not mandatory depends upon business.


To achieve this you need to create a initiator using DBLOOKUP.


Goto >>SPRO>>>Governance Risk and Compliance>>Access Control>>Workflow flow for Access Control>Define Workflow Related MSMP Rules




Process ID: as SAP_GRAC_ACCESS _REQUSET, since the entire request submitted for user provisioning is associated to this process id.

Rule Kind: Initiator Rule, as this rule will be used to initiate a workflow to determine which path it should take upon submission of request

RuleID: The Name of the Rule you are going to build and can be identified in BRF+ my application.

Rule type: Its Always BRF+ Flat Line item rules since we check Line item of Request, not just Header to determine path


Now select Header and select REQTYPE as input parameter as we may have may REQUEST TYPE and we need this for specific request type.





Go to BRF+ tcode


now to get the


Manager is equal to Roleowner and Role owner is equal to Requester you need to create DBLOOKUP


1)First identify the request id

2)Get the Manager of that request

3)identify the Role ID

4)Get the Role Owner fro that role.

5)Get the Requester from the same table of from when Manager is picked


Right click on Initiator application and create a DBLOOKUP



Select single entry table GRACREQ, this table has information about SAP Access Request, so lookup input query in to table is Request NO created during submission in the table and output value is REQUESTID./wp-content/uploads/2014/11/2_581222.jpg

Select Request number from context data and put it into a new table in result data, save and activate


comeback to select element REQID element



NOW Create 1 more DBLOOKUP to get the role id from table GRACROLE



NOW Create 1 More DB Lookup to get Manager ID for the particular request.

Run a look up on table GRACREQOWER, and look for USER TYPE MAN in the DBLOOKUPQUERY

to get Manager ID for that request need have a query for REQ_ID to fetch the request number and Manger for that request.






Now create 1 more DB lookup to get Role owner.

Run a query for Role on Table GRACROLEAPPRVR and lookup for approver in Z_GETROLEID DBLOOKUP table.




Now we need to Create 1 more DBLOOKUP for getting requestor information from the table GRACREQOWNER using request id from ZGETREQ_ID lookup to get requestor for that request only.


Save and activate all the Lookups .


Now go to decision table.




Click Table setting Select the condition column and Result column, based on which as decision to be made.



(We had added the elements after creating result table ,reason is if you have element you can select condition column,if you dont then it will be in result column)


Put your conditions in decision table




This was my condition you can use your






activate decision table but  add you lookup tables in signature in Function id then activate



Added missing screenshot.




ensure its added and activate ..

now you can add it in MSMP.







Assigned Tags

      You must be Logged on to comment or reply to a post.
      Author's profile photo Baithi Srinivas
      Baithi Srinivas

      Hello Prasant,

      Nice document,very use full for new enhancements



      Author's profile photo Prasant Kumar Paichha
      Prasant Kumar Paichha
      Blog Post Author

      Thanks, will update other documents.

      Like how to find out Manager Manager using DBLOOKUP ,



      Author's profile photo Kesava Mullati
      Kesava Mullati

      Thanks for sharing the knowledge, great effort.

      Best Regards,


      Author's profile photo Former Member
      Former Member

      Hi Prashant,

      i followed the steps but my Get Role_ID DBLookup is not fetching results: Can you please advise?

      DBlookup.pngSimulation result.png

      Also is there a way to simulate just the dblookup in GRC 10.0?