No option to "provision manually" to GRC Access Request

[Former Member]

We are using GRC 10 SP13 and are not able to get the provision manually option to work in the system.

The setting have been enabled:

-Maintain System Provisioning Config setting in SPRO set to Manual Provisioning under Auto Provisioning for specific system as well as Globally.

-In MSMP in the stage definition task settings for the path for a new request set "Allow manual prov".

My understanding from the documentation is that the 1st approver would have the option to "provision manually" instead of submit, but when they open the workflow inbox request there is no such option.  There is only the submit button.  Where is the "provision manually" option and how do we enable?

Don

[alessandr0 · Accepted solution]

Dear Don,

I have never configured manual provisioning but what I can see from the settings. You have to ensure that at the last stage of your path manual provisioning is activated in your MSMP configuration. Also make sure that the workflow is activated after changing that field.

As you have mentioned manual provisioning must be enabled in provisioning settings.

Personally I assume that the workflow needs to be activated once again as you are still missing the button. After activation you have to create a new workflow as all the existings are having the old configuration.

Regards,

Alessandro

[Former Member · Accepted solution]

Thank you Alessandro.  That worked.

All needed to do was regenerate and activate the MSMP.

Now however I have another error.  When I try to click "Provision Manually" button I get error message.

Assignment XXXXX could not be provisioned successfully because Correctly define the scenario handler in class CCI.

XXXXX is the name of the logical connector for non-sap system we using for manual provisioning which has been configured with legacy connection.

Do you know why this occurs?

[alessandr0 · Accepted solution]

Hi Don,

glad that the first issue could be fixed.

With the other I have no idea. Recommend to check some notes and documents:

http://service.sap.com/sap/support/notes/1986339

Regards,

Alessandro

[alessandr0 · Accepted solution]

and also see note 1656440, even it's BRM it seems to be similar than yours:

http://service.sap.com/sap/support/notes/1656440

Hope this helps.

Regards,

Alessandro

[Former Member · Accepted solution]

Hi Alessandro

After further investigating, I think the issue may be due to incorrect configuration of the connection settings.

IMG -> Common Component Settings -> Integration Framework -> Maintain Connection Settings

Now I am able to set up the AUTH integration sub-scenario by following note 1654282.

The note however, does not indicate how to configure the legacy connector for the PROV scenario.

There error seems to disappear when I mess around with this setting for a request in the work inbox however does not provision.

If you go into the PROV sub scenario, and then into Scenario-Connection type link you see that there is no connection type for FILE available.  Further, if you go to SE24 for the list of classes it looks like there is only FILE classes for the AUTH scenario and SUPMG relating to CL_GRAC_AD*_FILE*

How do you configure PROV scenario for legacy connector?  I can't see a way to do this?

[former_member193066]

Once approvers approve it system wont provision automatically.

The provision has to be done manually.

Regards,

Prasant

[Former Member]

Hi Prasant

Thank you for the reply.

1. The system is provisioning the access automatically even though the setting is put on manually provision in the global and system specific automatic provisioning.

2. According to note 2014626 there should be a button that appears for the approver that says "provision manually".  This is not appearing in our requests.

3. How do we get the button to appear and for manual provisioning to be enabled?