On the Requests home page, click,
A request that has generated violations but is in the requestor stage (not moved to the approval stages).
The page for this request is displayed.
This page provides details of a selected SAP request. The information is displayed on the following panels:
This panel provides a summary of general details, such as the creator of the request, the creation date and the connection for which the request is created.
Click the Details link to view the Details pop-up window. Depending on the request type, one or all of the following tabs may be displayed on this pop-up window:
The Proposed Details tab displays details of the changes proposed in the request. Depending on the request type, this tab may contain any or all of the following tabs:
The Current Details tab displays current details of the user. Depending on the request type, this tab may contain any or all of the following tabs:
This tab is displayed only if IRC roles are assigned to the user. Details of these IRC roles are also displayed on this tab.
This panel does not display any information if the request has not generated any violations.
If the request has generated violations, this panel provides a graphical view of the number of rules generating violations and the priority of violations generated. The total number of rules violated is listed on the right side of the panel.
This panel does not display information if the request has not generated any violations. Whereas, if the request has generated violation, click here to view the details of all the violating objects displayed on this panel.
You can perform the following actions from this panel:
Create new compensating controls
Create a new compensating control to be attached to the violated rule as follows:
Click Add below the rule name.
In the Create Compensating Control window displayed, expand the Create New Compensating Control panel.
Specify the required details on the General Information and Supporting Documentation tabs.
Click Save. The newly created control is added to the list of compensating controls displayed below.
Select the check box next to this control and click OK.
Click Mitigate. An icon is displayed next to a violation mitigated by attaching compensating controls.
Click Send. The request moves to the Inbox and the Requests home page of the next stage approver and to the History tab of the signed-in user.
A violation can be mitigated by attaching compensating controls to the violated rule. This ensures that the violating object is excluded from all analyses using that rule.
You may mitigate violations by attaching compensating controls as follows:
Select the violating object on the left panel. The right panel displays all the rules violated by this object. The Compensating Controls field below the rule name lists all the controls already attached to the rule.
Additional compensating controls can be attached. You have the following options to do so:
Removing violating objects from this page means removing the objects for which changes are requested. If any of the violating objects are removed, IRC analyzes the request again for new violations.
Remove a violating object as follows:
On the left panel, select the required violating object.
Click Remove. A message is displayed on this panel stating that the request is resubmitted for analysis.
Click the cion next to a violation to view the details around the violation.
The Actions panel is displayed on the user interface only if the request has not generated any violations. This panel enables you to approve or deny each requested objects (roles or users).
To approve or deny an object:
Select the check box next to the required object and click the appropriate icon. The Action column on this panel will display the status depending on the action taken.
Click Submit.
Some requests may also be approved or denied from the Request home page. In this case, the action is applicable to all the objects in that requests.
The icons tabs are disabled on the user interface if, the owner of the requested role is the approver of the role assignment and you are not the role owner.
Note: No action is required on Emergency Access requests as their self-approval is always set to 'automatic'.
This panel provides the following details:
Comments : This tab displays comments added by approvers and also enables you to add your comments: If you have set your time zone in the Preferences page (General Panel-> User time zone field), the time displayed here is your local time when the comment was added. In case of a Revoke Emergency Access request, if the emergency access role is manually revoked by clicking the Quick Process button; the details of the manual revocation are displayed on this tab. These details are displayed as comments of the user who has executed the manual revocation.
E-mail Settings: This tab provides an overview of the email notification settings defined for this request.
Approval Stages: This panel provides details of the approval stages defined for this request as well as the current status of the request.
Track Request: This tab helps you keep a track of the request. The approvers who have taken action on the request are displayed on this panel. In case the assigned approver is out of office and the alternate approver has taken action on the request, the alternate approver name is displayed on this panel; even though the assigned approver name is displayed on the Approval Stages tab.
Application Message: If request completion is set to automatic and a failure occurs while updating the ERP with the requested changes, the application error message is displayed on this tab. The date and time displayed in this error message is the local user time.
This page enables you to perform the following actions:
This button is displayed for requests that have the completion option set to 'automatic'.
When you click Submit, the request is sent to the next approver and removed from your Requests home page and Inbox.
The Revoke Emergency Access request details page displays the Force Submit button on the request details page. The creator of the request and the administrator can view the Force Submit button. They can use it to manually revoke the emergency role before the role assignment validity period lapses.
The Edit tab is displayed on the user interface only if the request is in the requestor stage and has generated violations
Edit a request as follows:
Click Edit. The page for this request is displayed.
Make the required changes and click Send. The request is resubmitted for analysis and a confirmation message is displayed.
Click Yes to continue. The request appears on the Requests home page.
The Send icon is displayed on the user interface only if the request has not generated any violations.
Click the Send icon to send the request for approval.
The Delete tab is displayed only if the request is in the requestor stage and not moved to the first approval stage.
Click Delete to delete the selected request. All references to this request are deleted from the system.
The Discard button is available only to the creator of the request or the administrator. Requests can be discarded at any stage by the creator of the request by clicking this button.
These requests are cancelled and are moved to the History tab of the Requests home page.
This button is displayed on the Request Details page of an approver. If required, approvers can request for more information regarding the request from other approvers or the requestor.
To request for more information:
Click Request more information from. The Discuss Request window is displayed.
From the drop-down list, select an approver or the requestor. In this drop-down list, you can see only the approvers of previous stages. If you are the first approver, then you can see only the requestor in the drop-down list.
Enter your comments.
Click Request
more information from. The requestor or the selected
approver will be notified by email and can view your comments
on the Comments panel
of the Request Details page.
Click Cancel to exit from the Discuss Request window.
The next time when you open the Request Details page of this request, the Cancel Additional Information button is displayed. If more information is not required, provide your comments and click Cancel Additional Information. Your comments are displayed on the Request Details page of the requestor or an approver to whom you have requested for additional information.
This button is displayed on this page only if other stage approvers have requested additional information about the request from you.
Enter your comments in the Comments field on the More Details panel and click Submit Additional Information. The approver who requested for this information is notified by email and your comments are displayed on the Comments panel of that approver.
Check out this Request for Manual Completion
This button is displayed on this page if the request completion is set to 'manual'.
Click Check out this Request for Manual Completion to update the ERP with the requested changes.
Revisit the Request details page and click one of the following buttons after updating the ERP:
Check-in Request Completed: Click this button if the updates to the ERP is successful and then click Check-in Request Completed to complete the request.
Check-in Request Failure: Click this button if the requested changes could not be updated in the ERP. The request is then cancelled.
Click Cancel to exit from the Request Details page.