This blog is intended to explain “Role owner stage auto approval” functionality in IAG (Access request service) and the configuration required to enable it.
Section 1
What is role owner stage auto approval?
Role owner stage auto approval is a new feature released in 2503 release. This functionality allows for automatic approval of access request line items during the role owner stage.
Conditions / attributes of access on which auto approval rules can be based:
Role nameRole criticality/Business role criticality (Low, medium, high and critical)Role approverRole business processRole sub processRole risk count
Please follow the below documentation to configure the data objects and its associated attributes required for enabling this functionality
Role Owner Stage Auto Approval
Section 2
Defining a sample decision table for role owner stage auto approval
Defining conditions and result
Defining the values
Section 3
How the decision table logic works?
If an access request is submitted for any Business or Technical role with a ‘low’ criticality, it will be automatically approved during the role owner stage.
Note: Business rule takes precedence over the assignment approvers: if any given access has designated assignment approvers and it also matches the condition(s) in the business rule for auto approval, such access will be auto approved.
Section 4
Example scenario:
For the sake of simplicity, the access to request is set to follow the role owner path during the workflow approval process.
An access request is raised for the role with low criticality
Access request audit log shows the request submission and approval details
This blog is intended to explain “Role owner stage auto approval” functionality in IAG (Access request service) and the configuration required to enable it.Section 1What is role owner stage auto approval?Role owner stage auto approval is a new feature released in 2503 release. This functionality allows for automatic approval of access request line items during the role owner stage.Conditions / attributes of access on which auto approval rules can be based:Role nameRole criticality/Business role criticality (Low, medium, high and critical)Role approverRole business processRole sub processRole risk countPlease follow the below documentation to configure the data objects and its associated attributes required for enabling this functionalityRole Owner Stage Auto ApprovalSection 2Defining a sample decision table for role owner stage auto approvalDefining conditions and resultDefining the valuesSection 3How the decision table logic works?If an access request is submitted for any Business or Technical role with a ‘low’ criticality, it will be automatically approved during the role owner stage.Note: Business rule takes precedence over the assignment approvers: if any given access has designated assignment approvers and it also matches the condition(s) in the business rule for auto approval, such access will be auto approved.Section 4Example scenario:For the sake of simplicity, the access to request is set to follow the role owner path during the workflow approval process.An access request is raised for the role with low criticalityAccess request audit log shows the request submission and approval details Read More Technology Blog Posts by SAP articles
#SAP
#SAPTechnologyblog
