Some time we get requirement to define initiator for

 

  1. Manager & Role Owner are same
  2. Requester and Role owner same

 

In these scenario we normally keep single level of approval,again this is not mandatory depends upon business.

 

To achieve this you need to create a initiator using DBLOOKUP.

 

Goto >>SPRO>>>Governance Risk and Compliance>>Access Control>>Workflow flow for Access Control>Define Workflow Related MSMP Rules

 

/wp-content/uploads/2014/11/1_581221.jpg

 

Process ID: as SAP_GRAC_ACCESS _REQUSET, since the entire request submitted for user provisioning is associated to this process id.

Rule Kind: Initiator Rule, as this rule will be used to initiate a workflow to determine which path it should take upon submission of request

RuleID: The Name of the Rule you are going to build and can be identified in BRF+ my application.

Rule type: Its Always BRF+ Flat Line item rules since we check Line item of Request, not just Header to determine path

 

Now select Header and select REQTYPE as input parameter as we may have may REQUEST TYPE and we need this for specific request type.

 

/wp-content/uploads/2014/11/2_581222.jpg

/wp-content/uploads/2014/11/2_581222.jpg

 

Go to BRF+ tcode

/wp-content/uploads/2014/11/2_581222.jpg

now to get the

 

Manager is equal to Roleowner and Role owner is equal to Requester you need to create DBLOOKUP

 

1)First identify the request id

2)Get the Manager of that request

3)identify the Role ID

4)Get the Role Owner fro that role.

5)Get the Requester from the same table of from when Manager is picked

 

Right click on Initiator application and create a DBLOOKUP

/wp-content/uploads/2014/11/2_581222.jpg

/wp-content/uploads/2014/11/2_581222.jpg

Select single entry table GRACREQ, this table has information about SAP Access Request, so lookup input query in to table is Request NO created during submission in the table and output value is REQUESTID./wp-content/uploads/2014/11/2_581222.jpg

Select Request number from context data and put it into a new table in result data, save and activate

 

comeback to select element REQID element

 

/wp-content/uploads/2014/11/2_581222.jpg

NOW Create 1 more DBLOOKUP to get the role id from table GRACROLE

/wp-content/uploads/2014/11/2_581222.jpg

 

NOW Create 1 More DB Lookup to get Manager ID for the particular request.

Run a look up on table GRACREQOWER, and look for USER TYPE MAN in the DBLOOKUPQUERY

to get Manager ID for that request need have a query for REQ_ID to fetch the request number and Manger for that request.

 

 

 

/wp-content/uploads/2014/11/2_581222.jpg

 

Now create 1 more DB lookup to get Role owner.

Run a query for Role on Table GRACROLEAPPRVR and lookup for approver in Z_GETROLEID DBLOOKUP table.

/wp-content/uploads/2014/11/2_581222.jpg

 

 

Now we need to Create 1 more DBLOOKUP for getting requestor information from the table GRACREQOWNER using request id from ZGETREQ_ID lookup to get requestor for that request only.

/wp-content/uploads/2014/11/2_581222.jpg

Save and activate all the Lookups .

 

Now go to decision table.

 

/wp-content/uploads/2014/11/2_581222.jpg

 

Click Table setting Select the condition column and Result column, based on which as decision to be made.

 

/wp-content/uploads/2014/11/2_581222.jpg

(We had added the elements after creating result table ,reason is if you have element you can select condition column,if you dont then it will be in result column)

 

Put your conditions in decision table

/wp-content/uploads/2014/11/2_581222.jpg

 

 

This was my condition you can use your

 

 

 

/wp-content/uploads/2014/11/2_581222.jpg

 

activate decision table but  add you lookup tables in signature in Function id then activate

/wp-content/uploads/2014/11/2_581222.jpg

 

Added missing screenshot.

 

Untitled.jpg

 

ensure its added and activate ..

now you can add it in MSMP.

 

 

.

 

Regards,

Prasant

To report this post you need to login first.

4 Comments

You must be Logged on to comment or reply to a post.

  1. V J

    Hi Prashant,

    i followed the steps but my Get Role_ID DBLookup is not fetching results: Can you please advise?

    DBlookup.pngSimulation result.png

    Also is there a way to simulate just the dblookup in GRC 10.0?

    (0) 

Leave a Reply