SAP Role Approval - mandatory Order Reason for a certain amount of rolls

Hello,

we are running One Identity 9.1 and 9.2 in our company in business context.

I want to ask a short question regarding the SAP Role approval.

We are working with hundreds of SAP roles, which can be assigned after approval.

The most critical roles (Firefighter) need, according to our process,

a mandatory reason filled before the order is submitted

in order to check the activity trace afterwards.

By default the reason field is not mandatory and I guess it can be defined so.

But is this black or white, I mean when the Reason field is set to mandatory,

does this automatically apply to all SAP Roles existing.

Or is it possible, like demanded in our process,

to set this filed mandatory only for fixed defined amount of roles ?

Best regards,

Sergio

Parents Reply Children
  • Hi Everyone,

    Apologies, further questions on this "Reason type on request" Does this function exclusively on the Angular web portal?

    Currently, we are using the 9.2 version and 8.2 for the web portal.

    Thank you in advance.

  • Hi Hana,

    No apologies needed for further questions :). What I've found is that it should work in both the Angular web portal and the (old) web portal but, at least in version 9.0 LTS (CU3) it doesn't work in the old web portal.

    If you look in the web designer you'll see that there is a condition that should make the reason mandatory based on the attribute on the AccProduct but it... Doesn't actually work. The 'work-around' I've seen work is to add a different attribute to the collection which isn't a list of fixed values and use that for the same viewing condition (that does work)... So, if you're seeing this be 'broken' in the old web portal in 9.2 I would not be surprised (as it is in 9.0 LTS at least).