• State Suggested Answer
  • Replies 4 replies
  • Answers 1 answer
  • Subscribers 94 subscribers
  • Views 190 views
  • Users 0 members are here
Options
Related

SAP Role Approval - mandatory Order Reason for a certain amount of rolls

Sergio
1 month ago

Hello,

we are running One Identity 9.1 and 9.2 in our company in business context.

I want to ask a short question regarding the SAP Role approval.

We are working with hundreds of SAP roles, which can be assigned after approval.

The most critical roles (Firefighter) need, according to our process,

a mandatory reason filled before the order is submitted

in order to check the activity trace afterwards.

By default the reason field is not mandatory and I guess it can be defined so.

But is this black or white, I mean when the Reason field is set to mandatory,

does this automatically apply to all SAP Roles existing.

Or is it possible, like demanded in our process,

to set this filed mandatory only for fixed defined amount of roles ?

Best regards,

Sergio

Parents Reply
  • 0 1 month ago in reply to Sergio

    Hi Sergio,

    As I believe you can see in the documentation Markus linked the 'Reason type on request' is set on the service item / Acc product.

    Each individual role has their own Accproduct / service item (it's the think that you actually request, with the description, name, the IT-Shop it's linked to, etc).

    So yes, you can set the OrderReasonType for only a subset of your SAP roles. Obviously, you'll need to either set it by hand on those roles (as part of your creation procedure) or have some good way to identify them if you want a template / automation to set the OrderReasonType to the value you want.

Children