4.1 Configuring Request Types

A request type defines the actions that are performed when a request is processed. The SAP GRC Access Control driver is requestor. The driver works with the default request types. You must create a new request type that contains only the action of CHANGE_USER. If you create other request types, the driver does not recognize them. However, you can change the actions assigned to the default request types and the driver performs the assigned actions.

Table 4-1 contains the default request types, the required assigned actions, and the GCV that contains this request type. The request types can have more actions assigned to them, but the actions listed are what the driver is expecting to be there. For more information about the GCVs, see Section A.2, Global Configuration Values.

Table 4-1 Request Types and GCVs

Request Type

Action

GCV

NEW

CREATE_USER

New account request type

CHANGE

ASSIGN_ROLE

Role assignment request type

DELETE

DELETE_USER

Delete account request type

LOCK

LOCK_USER

Lock account request type

UNLOCK

UNLOCK_USER

Unlock account request type

CHANGE_USER*

CHANGE_USER only

Modify user information request type

The last request type is the new request type that must be created for the driver to work. This request type must contain only the CHANGE_USER action. There is a default request type of CHANGE in the GRC Access Control, but it also contains ASSIGN_ROLE, and this request type does not work for the driver.

To create the new request type:

  1. Log in to the SAP GRC Access Control as an administrative user.

  2. Click the Configuration tab.

  3. Click Request Type, then click Create.

  4. Use the following information to create the request type:

    Type: Specify a unique name for the request type. It must be in uppercase.

    Short Description: Specify a short description for the request type.

    Description: Specify a description for the request type.

    Sequence: Specify a value for the sequence. The sequence defines the order in which request types appear on the Request Access screen. If you assign 0, the request type does not appear on the Request Access screen. However, if the request type is active, it appears on the Request Type drop-down list throughout Compliant User Provisioning.

    Workflow Type: Select CUP as the workflow type.

    Active: Select the check box to make the request type active.

    End User Description: Specify a description that is displayed to the users.

  5. Click Go under Available Actions to see the actions.

  6. Select CHANGE_USER, then click the left-arrow to assign the action.

  7. Click Save to save the request type.