ESS Leave request approval by HR Administrator

[Former Member]

Hi All,

We are implementing ESS MSS in EHP7.

Requirement:- When employee submits the leave request after manager's approval it should be approved by Leave Administrator in portal before updating in It2001.

There is one Leave administrator for each personnel Area and Org Unit.

What we have designed:

- Created a Ztable and storing Leave administrator's user id and personnel number in Ztable.

- Modified the standard leave request workflow to determine the Leave Admn.

The Issue we are facing:

- After manager approves the leave request,the work item is visible in Leave Administrators workoverview in portal and we are able to open the item ONLY when we give MSS role and SAP_ALL authorisation to the Leave Admn User ID.

- Because Leave Administrator is not a manager we cannot assign MSS full role in back end and portal to such users.

What are the correct roles we need to assign to Leave Administrators in such scenario???

Kindly help with your experiences

Thanks

Gita

[ChrisSolomon]

You should REALLY be working with your security team to run a trace on this. Then you will find all auth. objects needed/missing instead of doing the most giant no-no of all...granting SAP_ALL.

Second, you should/could have a custom "Leave Admin" role in the portal. NOTHING is stopping that (in fact, if you are using straight out-of-the-box standard roles, you are most likely doing it very wrong already).

Soooo.....have a portal role for your Admins (which sounds like they need the UWL and maybe not much else for your needs)....second, have backend security corrected for them.

In addition, might I suggest that your "z" table to look up admins could be done slightly different (as I have used one similar)....instead of having the "Leave Admin" userid and pernr in the table, simply have your table with the Pers. Area and Org Unit (I use country but whatever), and then a "workcenter" ID number. Then in OM, you simply create "workcenters" and you can assign/relate persons/employees to the workcenter.....in that way, you can have SEVERAL admins related and when/if an admin leaves,you simply end that IM relation and do not have to update/maintain your table. Make sense?

[siddharthrajora]

Typically, you should be able to see the leave request first? are leave admin see it, if they dont have the approver profile too! If they are next agents, workitem would be routed to them. You can do the authorisation trace using ST01. what is teh error you get when you dont assign the role to the? You can us Substitute role as well? Anyhow in this case you can check standard HR professional role PS : If you are using EHP7 you dont need to use custom WF for multi level approval, Try to use standard and default the first level approval using PT_GEN_REQ http://scn.sap.com/docs/DOC-41537 http://help.sap.com/erp_hcm_ias_2013_01/helpdata/en/98/133cd0eabf4095b636f36a2b727bdb/content.htm?fr...