Show TOC

Function documentationMy Work: Create Request Locate this document in the navigation structure

 

Here, you can create many types of requests.

If you are a Requestor, most of your work takes place here, in the   My Work   Create Request   screen.

If you are an Approver, you can also create an access request for yourself or for another user, or you can create several other types of requests. The data entry procedure on the screen is similar for all request types.

Caution Caution

Whenever a Request is submitted, the system performs an account validation, checking to see if the user exists in a specified system, and then notifies the Requestor. This information is provided even if the system is down. If the user does not exist, then depending on your configuration either a warning or an error message is displayed. Errors prevent the system from processing the change request. Warnings provide information and let you go ahead with the request.

End of the caution.

Completing and submitting a request initiates a predefined approval workflow that varies based on the request type, and other configurable attributes.

Note Note

As an Approver, you also see the completed fields from this request screen, which appear in the submitted requests from other users that you receive in the workflow for you to process an approval.

End of the note.

After you submit your access request for approval, you can track it and view its status. You can also view any comments that are appended by managers, approvers, and security analysts as your request goes through each stage of the workflow.

Follow the steps below to create requests.

  1. On the My Work tab, choose Create Request.

  2. Complete the General Information section fields and the Requestor and Manager Information fields.

  3. Choose the +More link, to access important additional sections.

    Additional sections

    Additional Fields

    +More link

    Choosing this link displays the Additional User Information fields. There are three sections, as follows.

    Advanced Options

    Here, you can select a specific business process to apply to this request. Choose it from the Business Process dropdown list, and complete the related fields.

    Choose a User Validity Start Date and a User Validity End Date using the calendar icons. These dates specify the time range when the access is valid.

    You can also extend validity dates. For more information, see Selecting Roles

    Customized Information

    Here, you can add customized fields.

    SNC

    Here, you can enter an SNC name. Next, you can select Yes or No from the dropdown list for the option: Unsecured Logon Allowed (SNC)

  4. Choose from the buttons at the bottom of the screen to select the action that you want to perform on the request. Your choices are listed in the tables below.

    Note Note

    The options that you see depend on the permissions that you have been granted as an Approver.

    End of the note.

Tab

Description

Roles/Profiles

This tab displays the roles and profiles that the Requestor wishes to have.

As an Approver, you may reject one or more of these proposed roles. You may also add more roles to the request by selecting the Select Roles button.

Note Note

When you add a role,you can even add an expired role, and then you can set a new Validity Date to extend the access. For more information, see: Selecting Roles

End of the note.

PD Profiles

This tab displays PD profiles that are part of the request. PD profiles are used by the SAP HR system. If you want to add more PD profiles to the request, use the Select PD Profiles button to access the PD Profiles tab and select new PD profiles for this request.

Risk Violations

This tab displays the results when you run Risk Analysis. It displays the possible risk violations that you can then mitigate.

Mitigation

This tab displays your choices for mitigating risks that are discovered when you run the Risk Analysis process. The Approver must mitigate any unmitigated risks before approving a Request.

Superuser Access

This tab displays any Super User assignments that are associated with this request.

Comments

This tab displays comments that are associated with the request.

Request Reason

This tab displays the reason that was given for this access request.

You can use the pushbuttons as described in the following table

Pushbutton

Description

Submit

This button is used to submit the request.

After you submit it, the system routes the request to the first step in the approval workflow.

Risk Analysis

Use this button to perform risk analysis on the access request.

Select Roles/Groups

Use this button when you want to search for and add more roles, or groups of roles, to the access request.

You can also add a role to extend a validity date for an existing user, using the related Selecting Roles screen. For more information, see Selecting Roles.

Select PD Profiles

Use this button to open the PD Profiles tab, and to search for and then add or delete PD profiles for a given system.

Continue pushbutton; Cancel pushbutton

Choose Continue to save your entries and return to the Create Request main page.

Choose Cancel to clear the additional page and return to the Create Request main page.