Quantcast
Channel: Governance, Risk and Compliance (SAP GRC)
Viewing all articles
Browse latest Browse all 205

Creating Access Request: Template Based Requests and Configuring End User Personalization forms for use with Access Request: Template Based Requests in GRC 10.0/10.1

$
0
0

    The purpose of this post is to demonstrate how to create Template Based Requests and make them available for provisioning in SAP. This document will demonstrate how to customize and associate End User Personalization forms for use with Access Request: Template Based Requests.

 

    Template Based Requests are an effective way to provision access in SAP environments. Security administrators can create pre-defined templates with specified roles for each back-end environment to simply provision requests for end users. In addition, templates can leverage the Business Role Concept from Business Role Management in GRC 10.0/10.1 to provision bundled composites and singles roles across multiple back-end environments. The following steps outline the process to follow when implementing template based requests:

 

Step 1: Customize EUP personalization

 

Access the GRC IMG via t_code SPRO followed by menu path:


Governance, Risk and Compliance> Access Control> User Provisioning> Maintain End User Personalization


1.jpg


2.jpg


Step 2: Create copy of the default EUP personalization form

 

Within the IMG activity, select the default EUP personalization form.

3.jpg

 

With the default EUP personalization form selected press F6 or click the “copy as” icon.

 

4.jpg

 

 

Enter a new EUP ID #, EUP Config Name, and Description.

 

5.jpg

 

Execute or hit enter and copy all dependent entries in the following pop-up.

6.jpg

7.jpg

 

 

Click through the confirmation pop-up and save.

 

8.jpg

 

 

Step 3: Customize the EUP Copy

 

Select the new EUP personalization form and double click the maintain EUP fields folder.

 

9.jpg

 

10.jpg

 

Select fields to include or exclude in the Template Based Request and save.

8.jpg

11.jpg

 

List of available options for each field.

 

      12.jpg13.jpg14.jpg15.jpg

 

Step 4: Create an Access Request: Template Based Request and how to associate EUP Personalization forms.

 

Navigate to the Access Management Work center in NWBC and select the Template Management under Access Request Administration.

 

16.jpg

 

Select create, input name of Template, EUP form, and Request Type.

 

17.jpg

 

18.jpg

 

19.jpg

 

Select Access Details, and click the add button, choose role.

 

20.jpg

 

 

Choose single, composite, or business role, move role down and select OK.

 

21.jpg

 

22.jpg

 

Role will now appear in the Template, select save.

 

23.jpg

 

24.jpg

 

 

Access Request: Template Based Request is now available for provisioning.

 

25.jpg

 

 

Access Request: Template Based Request end user view.

 

26.jpg

 

 

Template Based Access Requests can take some time to configure, but the benefits gained simplifying access requests for end users often makes this an easy enhancement to justify for your GRC environment.


Viewing all articles
Browse latest Browse all 205

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>