SlideShare ist ein Scribd-Unternehmen logo
1 von 18
Downloaden Sie, um offline zu lesen
ARM Workflows
Oct 19th , 2015
2Copyright © Capgemini 2012 – Internal Use Only. All Rights Reserved
Presentation Title | Date
CONTENTS
3. Introduction : MSMP - BRF+
4. Request Header & Line Item
5. If , Else If Rule
6. Workflow Key Terms in SAP BusinessObjects AC 5.3 vs 10.0/10.1
7. Workflow Key Terms Contd.
8. Workflow Key Terms Contd.
9. BRF+ Initiator Rule
10. BRF+ Agent Rule
11. Custom Path : New User
12. Custom Path : Change Account
13. Route Mapping
14. MSMP Workflow Prerequisites
15. General steps to create ARM Workflow
16. General steps to create ARM Workflow Contd
3
© Capgemini 2012. All Rights Reserved
Governance, Risk and Compliance Services| Integrated and platform-based Enterprise Risk Management
MSMP
•is the new workflow engine used within GRC Access Controls 10.0 which is capable of
directing requests down multiple approval routes simultaneously.
•is used for the management of automated approval workflows for the purposes of access
request
•works off a multitude of different rules to govern what should happen to the requests.
•All of these rules need to be defined up front before they can be assigned in to
the configuration and used in the workflow processes.
BRF+
•is the Business Rules Framework Plus application which supports the definition
of business rules.
•it can be the authoring environment for the rules which can then be plugged
into MSMP workflow configuration
Introduction : MSMP - BRF+
4
© Capgemini 2012. All Rights Reserved
Governance, Risk and Compliance Services| Integrated and platform-based Enterprise Risk Management
Request Header & Line Item
5
© Capgemini 2012. All Rights Reserved
Governance, Risk and Compliance Services| Integrated and platform-based Enterprise Risk Management
If , Else If Rule
6
© Capgemini 2012. All Rights Reserved
Governance, Risk and Compliance Services| Integrated and platform-based Enterprise Risk Management
Workflow Key Terms in SAP BusinessObjects AC 5.3 vs
10.0/10.1
GRC 5.3
Request Type
Initiator
CAD
Detour
Path
GRC 10
Process ID +
Request Type
Initiator Rule
Agent Rule
Routing Rule
Path
7
© Capgemini 2012. All Rights Reserved
Governance, Risk and Compliance Services| Integrated and platform-based Enterprise Risk Management
Process ID
• SAP_GRAC_ACCESS_REQUEST
• SAP_GRAC_ACCESS_REQUEST_
HR
• SAP_GRAC_CONTROL_ASGN
• SAP_GRAC_CONTROL_MAINT
• SAP_GRAC_FIREFIGHT_LOG_REP
ORT
• SAP_GRAC_FUNC_APPR
• SAP_GRAC_RISK_APPR
• SAP_GRAC_SOD_RISK_REVIEW
• SAP_GRAC_USER_ACCESS_REVI
EW
Rule Kind
• Initiator Rule
• Agent Rule
• Routing Rule
• Notification Variables
Rule
Rule Types
• ABAP Program
• ABAP Class Based
Rule
• BRFplus rule
• BRFplus Flat
rule/BRF+ Easy
Agent Types
• Directly Mapped
Users
• PFCG Roles
• PFCG User Groups
• GRC API (Application
Programming
Interface) Rules
Workflow Key Terms Contd.
8
© Capgemini 2012. All Rights Reserved
Governance, Risk and Compliance Services| Integrated and platform-based Enterprise Risk Management
Process ID
• New Account Change Account
• Change Account
• Delete Account
• Lock Account
• unlock user
• Superuser Access
• Information
• Role Reaffirm
• Create Risk
• Update Risk
• Delete Risk
Request Types
• SAP_GRAC_ACCESS_REQUEST
• SAP_GRAC_ACCESS_REQUEST_HR
• SAP_GRAC_CONTROL_ASGN
• SAP_GRAC_CONTROL_MAINT
• SAP_GRAC_FIREFIGHT_LOG_REPORT
• SAP_GRAC_FUNC_APPR
• SAP_GRAC_RISK_APPR
• SAP_GRAC_SOD_RISK_REVIEW
• SAP_GRAC_USER_ACCESS_REVIEW
Workflow Key Terms Contd.
 One process ID can have multiple request types
9
© Capgemini 2012. All Rights Reserved
Governance, Risk and Compliance Services| Integrated and platform-based Enterprise Risk Management
BRF+ Initiator Rule
10
© Capgemini 2012. All Rights Reserved
Governance, Risk and Compliance Services| Integrated and platform-based Enterprise Risk Management
BRF+ Agent Rule
11
© Capgemini 2012. All Rights Reserved
Governance, Risk and Compliance Services| Integrated and platform-based Enterprise Risk Management
INITIATOR
RULE
SECURITY MANAGER PROVISIONING
Custom Path : New User
12
© Capgemini 2012. All Rights Reserved
Governance, Risk and Compliance Services| Integrated and platform-based Enterprise Risk Management
INITIATOR
RULE
ROLE OWNER PROVISIONING
Custom Path :Change Account
 One initiator rule is able to trigger multiple paths based on the rule result value
 For every Rule Result Value , there will be a path
13
© Capgemini 2012. All Rights Reserved
Governance, Risk and Compliance Services| Integrated and platform-based Enterprise Risk Management
Route Mapping
 Work areas are not considered to be sequential when maintaining workflows.
 One initiator rule is able to trigger multiple paths based on the rule result value
 For every Rule Result Value , there will be a path
14
© Capgemini 2012. All Rights Reserved
Governance, Risk and Compliance Services| Integrated and platform-based Enterprise Risk Management
The following prerequisites must be completed before MSMP workflow configuration can begin.
Using the SAP GUI interface, Execute Transaction SPRO -> Customizing Edit Project -> SAP Reference IMG -> Governance Risk and Complia
•Choose General Settings -> Workflow
1. Perform Automatic Workflow Customizing
2. Perform Tasks Specific Customizing
•Choose Access Control -> Workflow for Access Control
1. Activate Event Linkage for AC Workflows
2. Activate MSMP Content for AC (Activate the BC set)
•Access Control -> User Provisioning
1. Maintain Number Range Intervals for Provisioning Requests
2. Define Number Range Intervals for Provisioning Request
3. Maintain Provisioning Settings
• Assign Key Roles for Workflow
MSMP Workflow Prerequisites
15
© Capgemini 2012. All Rights Reserved
Governance, Risk and Compliance Services| Integrated and platform-based Enterprise Risk Management
Create Initiator
Rule using BRF+
•SPRO - Access
Control - Workflow
for Access Control -
Define Workflow-
Related MSMP
Rules.
Create Initiator rule .
•BRF plus- Function -
Top Expression -
Create Decision
Table --Table
Settings - Insert
Condition Column -
Insert Row and enter
Condition Values.
Add the Initiator
Rule in MSMP
•MSMP Workflow
Configuration -
Maintain Initiator
Rule - Add Initiator
Rule details - Add
Rule Result.
•MSMP - Generate
Versions – Save.
Create Agent
Rule using BRF+
•SPRO - Access
Control - Workflow
for Access Control -
Define Workflow-
Related MSMP
Rules
Create Initiator rule.
•BRFplus - Function -
Top Expression -
Create Decision
Table -
Table Settings -
Insert Condition
Column - Insert Row
enter Condition
Values.
Add Agent Rule
in MSMP
•MSMP Workflow
Configuration -
Maintain Agent Rule
- Add Agent Rule
details - Add Rule
Result.
•MSMP - Generate
Versions – Save.
General steps to create ARM Workflow
16
© Capgemini 2012. All Rights Reserved
Governance, Risk and Compliance Services| Integrated and platform-based Enterprise Risk Management
Maintain New
Agent
• Maintain Agents-
as GRC API Rules
under MSMP -
Maintain Agents.
• MSMP - Generate
Versions – Save.
Create New Path
• Add Stages &
Maintain
Approvers for
each stage.
• MSMP - Generate
Versions – Save.
Maintain Global
Process Initiator
• MSMP - Global
Rules - assign
Process Initiator
as the new
Initiator rule
created.
Activate
• MSMP - Generate
Versions - Save &
Simulate.
• Activate.
General steps to create ARM Workflow Contd.
17
© Capgemini 2012. All Rights Reserved
Governance, Risk and Compliance Services| Integrated and platform-based Enterprise Risk Management
18
© Capgemini 2012. All Rights Reserved
Governance, Risk and Compliance Services| Integrated and platform-based Enterprise Risk Management

Weitere ähnliche Inhalte

Was ist angesagt?

Sap Security Workshop
Sap Security WorkshopSap Security Workshop
Sap Security Workshoplarrymcc
 
SAP Security & GRC Framework
SAP Security & GRC FrameworkSAP Security & GRC Framework
SAP Security & GRC FrameworkHarish Sharma
 
Introduction to SAP Security
Introduction to SAP SecurityIntroduction to SAP Security
Introduction to SAP SecurityNasir Gondal
 
Sap grc process control 10.0
Sap grc process control 10.0Sap grc process control 10.0
Sap grc process control 10.0Latha Kamal
 
Anil kumar sap security & GRC
Anil kumar sap security & GRCAnil kumar sap security & GRC
Anil kumar sap security & GRCAnil Kumar
 
SAP An Introduction
SAP An IntroductionSAP An Introduction
SAP An Introductionsh_neha252
 
sap security interview_questions
sap security interview_questionssap security interview_questions
sap security interview_questionssumitmsn2
 
SAP Security important Questions
SAP Security important QuestionsSAP Security important Questions
SAP Security important QuestionsRagu M
 
Profiling for SAP - Compliance Management, Access Control and Segregation of ...
Profiling for SAP - Compliance Management, Access Control and Segregation of ...Profiling for SAP - Compliance Management, Access Control and Segregation of ...
Profiling for SAP - Compliance Management, Access Control and Segregation of ...TransWare AG
 
History and Evolution of ERP & SAP
History and Evolution of ERP & SAPHistory and Evolution of ERP & SAP
History and Evolution of ERP & SAPShivkumar Rai
 
Introduction Into SAP Fiori
Introduction Into SAP FioriIntroduction Into SAP Fiori
Introduction Into SAP FioriBlackvard
 
Authorisations in SAP: best practices
Authorisations in SAP: best practicesAuthorisations in SAP: best practices
Authorisations in SAP: best practicesJonathan Eemans
 

Was ist angesagt? (20)

Sap Security Workshop
Sap Security WorkshopSap Security Workshop
Sap Security Workshop
 
SAP grc
SAP grc SAP grc
SAP grc
 
Sap security tasks
Sap security tasksSap security tasks
Sap security tasks
 
SAP Security & GRC Framework
SAP Security & GRC FrameworkSAP Security & GRC Framework
SAP Security & GRC Framework
 
SAP BI 7 security concepts
SAP BI 7 security conceptsSAP BI 7 security concepts
SAP BI 7 security concepts
 
Day5 R3 Basis Security
Day5 R3 Basis   SecurityDay5 R3 Basis   Security
Day5 R3 Basis Security
 
Introduction to SAP Security
Introduction to SAP SecurityIntroduction to SAP Security
Introduction to SAP Security
 
SAP Security interview questions
SAP Security interview questionsSAP Security interview questions
SAP Security interview questions
 
SAP Fiori ppt
SAP Fiori pptSAP Fiori ppt
SAP Fiori ppt
 
Sap grc process control 10.0
Sap grc process control 10.0Sap grc process control 10.0
Sap grc process control 10.0
 
Anil kumar sap security & GRC
Anil kumar sap security & GRCAnil kumar sap security & GRC
Anil kumar sap security & GRC
 
SAP An Introduction
SAP An IntroductionSAP An Introduction
SAP An Introduction
 
sap security interview_questions
sap security interview_questionssap security interview_questions
sap security interview_questions
 
SAP Security important Questions
SAP Security important QuestionsSAP Security important Questions
SAP Security important Questions
 
Profiling for SAP - Compliance Management, Access Control and Segregation of ...
Profiling for SAP - Compliance Management, Access Control and Segregation of ...Profiling for SAP - Compliance Management, Access Control and Segregation of ...
Profiling for SAP - Compliance Management, Access Control and Segregation of ...
 
History and Evolution of ERP & SAP
History and Evolution of ERP & SAPHistory and Evolution of ERP & SAP
History and Evolution of ERP & SAP
 
What is sap security
What is sap securityWhat is sap security
What is sap security
 
Introduction Into SAP Fiori
Introduction Into SAP FioriIntroduction Into SAP Fiori
Introduction Into SAP Fiori
 
SAP Landscape
SAP Landscape SAP Landscape
SAP Landscape
 
Authorisations in SAP: best practices
Authorisations in SAP: best practicesAuthorisations in SAP: best practices
Authorisations in SAP: best practices
 

Ähnlich wie SAP GRC AC 10.1 - ARM Workflows

RPA Portfolio Assessment
RPA Portfolio Assessment RPA Portfolio Assessment
RPA Portfolio Assessment Eric Rodman
 
Using Business Rules to Make Your Business Process Smarter, Simpler and More ...
Using Business Rules to Make Your Business Process Smarter, Simpler and More ...Using Business Rules to Make Your Business Process Smarter, Simpler and More ...
Using Business Rules to Make Your Business Process Smarter, Simpler and More ...Abhishek Kant
 
Extend SAP processes using IBM BPM Webinar July-2016
Extend SAP processes using IBM BPM Webinar July-2016Extend SAP processes using IBM BPM Webinar July-2016
Extend SAP processes using IBM BPM Webinar July-2016Logan Vadivelu
 
Rethinking Segregation of Duties: Where Is Your Business Most Exposed?
Rethinking Segregation of Duties: Where Is Your Business Most Exposed?Rethinking Segregation of Duties: Where Is Your Business Most Exposed?
Rethinking Segregation of Duties: Where Is Your Business Most Exposed?SAPinsider Events
 
PureApplication: System, Service, Software
PureApplication: System, Service, SoftwarePureApplication: System, Service, Software
PureApplication: System, Service, SoftwareProlifics
 
Next generation business automation with the red hat decision manager and red...
Next generation business automation with the red hat decision manager and red...Next generation business automation with the red hat decision manager and red...
Next generation business automation with the red hat decision manager and red...Masahiko Umeno
 
Final 622 Presentation
Final 622 PresentationFinal 622 Presentation
Final 622 PresentationSayali Jaitpal
 
Profitability & Cost Management Cloud Service: Have It Your Way
Profitability & Cost Management Cloud Service: Have It Your WayProfitability & Cost Management Cloud Service: Have It Your Way
Profitability & Cost Management Cloud Service: Have It Your WayAlithya
 
CWIN17 India / Rpa robotic process automation - presentation - v1.0 - manoj g...
CWIN17 India / Rpa robotic process automation - presentation - v1.0 - manoj g...CWIN17 India / Rpa robotic process automation - presentation - v1.0 - manoj g...
CWIN17 India / Rpa robotic process automation - presentation - v1.0 - manoj g...Capgemini
 
Kovair ALM application on model based process improvement
Kovair ALM application on model based process improvementKovair ALM application on model based process improvement
Kovair ALM application on model based process improvementKovair
 
Introduction To Saa S Tech Ba Apr 2009
Introduction To Saa S   Tech Ba   Apr 2009Introduction To Saa S   Tech Ba   Apr 2009
Introduction To Saa S Tech Ba Apr 2009ScioSales
 
Expert sizing & methods of sizing validation
Expert sizing & methods of sizing validationExpert sizing & methods of sizing validation
Expert sizing & methods of sizing validationJaleel Ahmed Gulammohiddin
 
SAP Identity Management Overview
SAP Identity Management OverviewSAP Identity Management Overview
SAP Identity Management OverviewSAP Technology
 
Moving from SAP HCM to SAP SuccessFactors Employee Central: Evaluating Your R...
Moving from SAP HCM to SAP SuccessFactors Employee Central: Evaluating Your R...Moving from SAP HCM to SAP SuccessFactors Employee Central: Evaluating Your R...
Moving from SAP HCM to SAP SuccessFactors Employee Central: Evaluating Your R...Rizing HCM
 
Blinde la seguridad de su empresa
Blinde la seguridad de su empresaBlinde la seguridad de su empresa
Blinde la seguridad de su empresaSAP Latinoamérica
 
Building Serverless Applications That Align with Twelve-Factor Methods - AWS ...
Building Serverless Applications That Align with Twelve-Factor Methods - AWS ...Building Serverless Applications That Align with Twelve-Factor Methods - AWS ...
Building Serverless Applications That Align with Twelve-Factor Methods - AWS ...Amazon Web Services
 
Case Study: Learn How Expeditors Uses APM as Both a Technology and Process T...
Case Study:  Learn How Expeditors Uses APM as Both a Technology and Process T...Case Study:  Learn How Expeditors Uses APM as Both a Technology and Process T...
Case Study: Learn How Expeditors Uses APM as Both a Technology and Process T...CA Technologies
 

Ähnlich wie SAP GRC AC 10.1 - ARM Workflows (20)

RPA Portfolio Assessment
RPA Portfolio Assessment RPA Portfolio Assessment
RPA Portfolio Assessment
 
Using Business Rules to Make Your Business Process Smarter, Simpler and More ...
Using Business Rules to Make Your Business Process Smarter, Simpler and More ...Using Business Rules to Make Your Business Process Smarter, Simpler and More ...
Using Business Rules to Make Your Business Process Smarter, Simpler and More ...
 
Extend SAP processes using IBM BPM Webinar July-2016
Extend SAP processes using IBM BPM Webinar July-2016Extend SAP processes using IBM BPM Webinar July-2016
Extend SAP processes using IBM BPM Webinar July-2016
 
Rethinking Segregation of Duties: Where Is Your Business Most Exposed?
Rethinking Segregation of Duties: Where Is Your Business Most Exposed?Rethinking Segregation of Duties: Where Is Your Business Most Exposed?
Rethinking Segregation of Duties: Where Is Your Business Most Exposed?
 
SAP GRC Training
SAP GRC TrainingSAP GRC Training
SAP GRC Training
 
PureApplication: System, Service, Software
PureApplication: System, Service, SoftwarePureApplication: System, Service, Software
PureApplication: System, Service, Software
 
Next generation business automation with the red hat decision manager and red...
Next generation business automation with the red hat decision manager and red...Next generation business automation with the red hat decision manager and red...
Next generation business automation with the red hat decision manager and red...
 
Final 622 Presentation
Final 622 PresentationFinal 622 Presentation
Final 622 Presentation
 
Profitability & Cost Management Cloud Service: Have It Your Way
Profitability & Cost Management Cloud Service: Have It Your WayProfitability & Cost Management Cloud Service: Have It Your Way
Profitability & Cost Management Cloud Service: Have It Your Way
 
CWIN17 India / Rpa robotic process automation - presentation - v1.0 - manoj g...
CWIN17 India / Rpa robotic process automation - presentation - v1.0 - manoj g...CWIN17 India / Rpa robotic process automation - presentation - v1.0 - manoj g...
CWIN17 India / Rpa robotic process automation - presentation - v1.0 - manoj g...
 
ITChamps - Application Management Services
ITChamps - Application Management ServicesITChamps - Application Management Services
ITChamps - Application Management Services
 
Kovair ALM application on model based process improvement
Kovair ALM application on model based process improvementKovair ALM application on model based process improvement
Kovair ALM application on model based process improvement
 
Introduction To Saa S Tech Ba Apr 2009
Introduction To Saa S   Tech Ba   Apr 2009Introduction To Saa S   Tech Ba   Apr 2009
Introduction To Saa S Tech Ba Apr 2009
 
Expert sizing & methods of sizing validation
Expert sizing & methods of sizing validationExpert sizing & methods of sizing validation
Expert sizing & methods of sizing validation
 
SAP Identity Management Overview
SAP Identity Management OverviewSAP Identity Management Overview
SAP Identity Management Overview
 
Moving from SAP HCM to SAP SuccessFactors Employee Central: Evaluating Your R...
Moving from SAP HCM to SAP SuccessFactors Employee Central: Evaluating Your R...Moving from SAP HCM to SAP SuccessFactors Employee Central: Evaluating Your R...
Moving from SAP HCM to SAP SuccessFactors Employee Central: Evaluating Your R...
 
Blinde la seguridad de su empresa
Blinde la seguridad de su empresaBlinde la seguridad de su empresa
Blinde la seguridad de su empresa
 
Building Serverless Applications That Align with Twelve-Factor Methods - AWS ...
Building Serverless Applications That Align with Twelve-Factor Methods - AWS ...Building Serverless Applications That Align with Twelve-Factor Methods - AWS ...
Building Serverless Applications That Align with Twelve-Factor Methods - AWS ...
 
GRC
GRCGRC
GRC
 
Case Study: Learn How Expeditors Uses APM as Both a Technology and Process T...
Case Study:  Learn How Expeditors Uses APM as Both a Technology and Process T...Case Study:  Learn How Expeditors Uses APM as Both a Technology and Process T...
Case Study: Learn How Expeditors Uses APM as Both a Technology and Process T...
 

SAP GRC AC 10.1 - ARM Workflows

  • 2. 2Copyright © Capgemini 2012 – Internal Use Only. All Rights Reserved Presentation Title | Date CONTENTS 3. Introduction : MSMP - BRF+ 4. Request Header & Line Item 5. If , Else If Rule 6. Workflow Key Terms in SAP BusinessObjects AC 5.3 vs 10.0/10.1 7. Workflow Key Terms Contd. 8. Workflow Key Terms Contd. 9. BRF+ Initiator Rule 10. BRF+ Agent Rule 11. Custom Path : New User 12. Custom Path : Change Account 13. Route Mapping 14. MSMP Workflow Prerequisites 15. General steps to create ARM Workflow 16. General steps to create ARM Workflow Contd
  • 3. 3 © Capgemini 2012. All Rights Reserved Governance, Risk and Compliance Services| Integrated and platform-based Enterprise Risk Management MSMP •is the new workflow engine used within GRC Access Controls 10.0 which is capable of directing requests down multiple approval routes simultaneously. •is used for the management of automated approval workflows for the purposes of access request •works off a multitude of different rules to govern what should happen to the requests. •All of these rules need to be defined up front before they can be assigned in to the configuration and used in the workflow processes. BRF+ •is the Business Rules Framework Plus application which supports the definition of business rules. •it can be the authoring environment for the rules which can then be plugged into MSMP workflow configuration Introduction : MSMP - BRF+
  • 4. 4 © Capgemini 2012. All Rights Reserved Governance, Risk and Compliance Services| Integrated and platform-based Enterprise Risk Management Request Header & Line Item
  • 5. 5 © Capgemini 2012. All Rights Reserved Governance, Risk and Compliance Services| Integrated and platform-based Enterprise Risk Management If , Else If Rule
  • 6. 6 © Capgemini 2012. All Rights Reserved Governance, Risk and Compliance Services| Integrated and platform-based Enterprise Risk Management Workflow Key Terms in SAP BusinessObjects AC 5.3 vs 10.0/10.1 GRC 5.3 Request Type Initiator CAD Detour Path GRC 10 Process ID + Request Type Initiator Rule Agent Rule Routing Rule Path
  • 7. 7 © Capgemini 2012. All Rights Reserved Governance, Risk and Compliance Services| Integrated and platform-based Enterprise Risk Management Process ID • SAP_GRAC_ACCESS_REQUEST • SAP_GRAC_ACCESS_REQUEST_ HR • SAP_GRAC_CONTROL_ASGN • SAP_GRAC_CONTROL_MAINT • SAP_GRAC_FIREFIGHT_LOG_REP ORT • SAP_GRAC_FUNC_APPR • SAP_GRAC_RISK_APPR • SAP_GRAC_SOD_RISK_REVIEW • SAP_GRAC_USER_ACCESS_REVI EW Rule Kind • Initiator Rule • Agent Rule • Routing Rule • Notification Variables Rule Rule Types • ABAP Program • ABAP Class Based Rule • BRFplus rule • BRFplus Flat rule/BRF+ Easy Agent Types • Directly Mapped Users • PFCG Roles • PFCG User Groups • GRC API (Application Programming Interface) Rules Workflow Key Terms Contd.
  • 8. 8 © Capgemini 2012. All Rights Reserved Governance, Risk and Compliance Services| Integrated and platform-based Enterprise Risk Management Process ID • New Account Change Account • Change Account • Delete Account • Lock Account • unlock user • Superuser Access • Information • Role Reaffirm • Create Risk • Update Risk • Delete Risk Request Types • SAP_GRAC_ACCESS_REQUEST • SAP_GRAC_ACCESS_REQUEST_HR • SAP_GRAC_CONTROL_ASGN • SAP_GRAC_CONTROL_MAINT • SAP_GRAC_FIREFIGHT_LOG_REPORT • SAP_GRAC_FUNC_APPR • SAP_GRAC_RISK_APPR • SAP_GRAC_SOD_RISK_REVIEW • SAP_GRAC_USER_ACCESS_REVIEW Workflow Key Terms Contd.  One process ID can have multiple request types
  • 9. 9 © Capgemini 2012. All Rights Reserved Governance, Risk and Compliance Services| Integrated and platform-based Enterprise Risk Management BRF+ Initiator Rule
  • 10. 10 © Capgemini 2012. All Rights Reserved Governance, Risk and Compliance Services| Integrated and platform-based Enterprise Risk Management BRF+ Agent Rule
  • 11. 11 © Capgemini 2012. All Rights Reserved Governance, Risk and Compliance Services| Integrated and platform-based Enterprise Risk Management INITIATOR RULE SECURITY MANAGER PROVISIONING Custom Path : New User
  • 12. 12 © Capgemini 2012. All Rights Reserved Governance, Risk and Compliance Services| Integrated and platform-based Enterprise Risk Management INITIATOR RULE ROLE OWNER PROVISIONING Custom Path :Change Account  One initiator rule is able to trigger multiple paths based on the rule result value  For every Rule Result Value , there will be a path
  • 13. 13 © Capgemini 2012. All Rights Reserved Governance, Risk and Compliance Services| Integrated and platform-based Enterprise Risk Management Route Mapping  Work areas are not considered to be sequential when maintaining workflows.  One initiator rule is able to trigger multiple paths based on the rule result value  For every Rule Result Value , there will be a path
  • 14. 14 © Capgemini 2012. All Rights Reserved Governance, Risk and Compliance Services| Integrated and platform-based Enterprise Risk Management The following prerequisites must be completed before MSMP workflow configuration can begin. Using the SAP GUI interface, Execute Transaction SPRO -> Customizing Edit Project -> SAP Reference IMG -> Governance Risk and Complia •Choose General Settings -> Workflow 1. Perform Automatic Workflow Customizing 2. Perform Tasks Specific Customizing •Choose Access Control -> Workflow for Access Control 1. Activate Event Linkage for AC Workflows 2. Activate MSMP Content for AC (Activate the BC set) •Access Control -> User Provisioning 1. Maintain Number Range Intervals for Provisioning Requests 2. Define Number Range Intervals for Provisioning Request 3. Maintain Provisioning Settings • Assign Key Roles for Workflow MSMP Workflow Prerequisites
  • 15. 15 © Capgemini 2012. All Rights Reserved Governance, Risk and Compliance Services| Integrated and platform-based Enterprise Risk Management Create Initiator Rule using BRF+ •SPRO - Access Control - Workflow for Access Control - Define Workflow- Related MSMP Rules. Create Initiator rule . •BRF plus- Function - Top Expression - Create Decision Table --Table Settings - Insert Condition Column - Insert Row and enter Condition Values. Add the Initiator Rule in MSMP •MSMP Workflow Configuration - Maintain Initiator Rule - Add Initiator Rule details - Add Rule Result. •MSMP - Generate Versions – Save. Create Agent Rule using BRF+ •SPRO - Access Control - Workflow for Access Control - Define Workflow- Related MSMP Rules Create Initiator rule. •BRFplus - Function - Top Expression - Create Decision Table - Table Settings - Insert Condition Column - Insert Row enter Condition Values. Add Agent Rule in MSMP •MSMP Workflow Configuration - Maintain Agent Rule - Add Agent Rule details - Add Rule Result. •MSMP - Generate Versions – Save. General steps to create ARM Workflow
  • 16. 16 © Capgemini 2012. All Rights Reserved Governance, Risk and Compliance Services| Integrated and platform-based Enterprise Risk Management Maintain New Agent • Maintain Agents- as GRC API Rules under MSMP - Maintain Agents. • MSMP - Generate Versions – Save. Create New Path • Add Stages & Maintain Approvers for each stage. • MSMP - Generate Versions – Save. Maintain Global Process Initiator • MSMP - Global Rules - assign Process Initiator as the new Initiator rule created. Activate • MSMP - Generate Versions - Save & Simulate. • Activate. General steps to create ARM Workflow Contd.
  • 17. 17 © Capgemini 2012. All Rights Reserved Governance, Risk and Compliance Services| Integrated and platform-based Enterprise Risk Management
  • 18. 18 © Capgemini 2012. All Rights Reserved Governance, Risk and Compliance Services| Integrated and platform-based Enterprise Risk Management