You must have a workflow defined in the GRC Access Control in order to act upon the request types. A workflow consists of an initiator, a stage, and a path. Each request type must assigned to an initiator. You can set up one workflow that contains all of the request types, or you can create a separate workflow for each request type.
The following is an example of how to configure one workflow with all of the request types.
An initiator is an object that defines a precise request condition, and identifies the single, unique workflow designed to handle that type of request. Initiators and workflows function as matched pairs. Each initiator can call only one workflow, and each workflow can be called by one initiator.
Log in to the SAP GRC Access Control as an administrative user.
Click the tab.
Click > , then click .
Use the following information to create the initiator:
Name: Specify a name for the initiator. It must be uppercase and it cannot contain spaces. For example, WF_INIT_ONE.
Short Description: Specify a short description for the workflow.
Description: Specify a description for the workflow.
Workflow Type: Select as the workflow type.
Select attributes for the initiator with the following information:
Condition: Select the condition of , , or . For this example the condition is .
Attribute: Select for the attribute.
Value: Select one of the request types listed in Table 4-1.
Click , then repeat Step 5 for each request type listed in Table 4-1.
Click to create the initiator.
Continue with Section 4.2.2, Creating a Stage.
A stage is a decision point in a workflow. At each stage, one or more approvers must approve or deny the request. The stage defines who must approve the request. It also determines what happens next, based on the decision of the approver. At each stage of the request process, the system sends an e-mail message to the user designated to approve or deny the request. The request process cannot continue until the approver responds by approving or rejecting the request.
Click > , then click .
Use the following information to create the stage:
Name: Specify a name for the stage. It must be uppercase and it cannot contain spaces.
Short Description: Specify a short description for the stage.
Description: Specify a description for the stage.
Workflow Type: Select the workflow type as .
Approver Determinator: From the drop-down list, select who receives the request types from the driver.
Request Wait Time (Days): Specify amount of time, in days, for the Compliance User Provisioning to wait for an approver to respond to a request before escalating the request. In this example it is 0, because there is no escalation configured.
Request Wait Time (Hours): Specify amount of time, in hours, for the Compliance User Provisioning to wait for an approver to respond to a request before escalating the request. In this example it is 0, because there is no escalation configured.
Escalation Configuration: From the drop-down list, select .
Notification Configuration: Configure whether and to whom the system notifies about actions taken at this point in the stage.
Additional Configuration: Define any additional functionality required at this stage.
Additional Security Configuration: Define whether the approver needs to configure his or her identity to take an action at this stage.
Click to create the stage.
Continue with Section 4.2.3, Creating a Path.
A path defines the sequence of stages in a workflow. When you create a workflow, you begin by creating each of its stages. By themselves, the stages serve no purpose. Each stage is an independent entity, unrelated to any other stage. When you create a path, you define the order in which the workflow calls its stages.
Click > , then click .
Use the following information to create the path:
Name: Specify a name for the path. It must be uppercase and it cannot contain spaces.
Short Description: Specify a short description of the path.
Description: Specify a description of the path.
Workflow Type: Select the workflow type as .
Number of Stages: Specify the number of stages you want to include in the path.
Initiator: From the drop-down list, select the initiator that you created in Section 4.2.1, Creating an Initiator.
Active: Select to make the path active when it is created.
Click to create the path.