Your work includes processing the requests for approval that have been submitted to you.
When an access request is submitted, the system sends an e-mail to the first approver that is defined in the approval workflow, and then routes the request to that approver. All of the requests that are awaiting approval by a particular Approver, appear on that approver’s Requests for Approval screen under the My Work tab.
For each access request that needs approval, the system displays a list with the same sections and fields that were filled in by the user in the Create Request form. These are now populated fields, seen by the Approver.
In addition, there is an approval header at the top of each request received for approval:
Approval path status section: |
|
- |
Manager status indicator |
- |
Roles status indicator |
- |
Security status indicator |
- |
Request Removal. You use this pushbutton to remove all header path information. |
Request status section: |
|
- |
Request Number |
- |
Status |
- |
Approval Due Date |
General Information section, including: |
|
- |
Request Type |
- |
Priority Type |
- |
Request Date |
- |
Requestor |
- |
Due Date |
- |
User Name and contact information |
- |
Stage (of approval workflow) |
Additional Information section, including: |
|
- |
Business Process selected |
Additional fields such as Position, Org. Unit, Personnel Number, Job, Cost Center, Accounting Number. User Validity Start Date, and User Validity End Date selected to provide a timeframe for this access. User Group Approvers can edit the User Group field. |
|
Customized Information |
Selected Customized Field |
SNC |
SNC Name. If Unsecured Logon Allowed at SU01 is set to either Yes or No, then approvers can edit this field. |
User Group |
User Group: refers to User Group field at SU01 Logon Data tab If the Configuration at workflow stage level Change Request–Content is allowed is set to Yes, then the approver can enter or modify SNC and User Group fields. |
Roles, Profiles section |
|
PD Profiles section |
|
Superuser Access section |
|
Risk Violations section |
|
Mitigating Controls section |
|
Comments field |
|
Request Reason field |
|
Audit Information field |
Approvers can either print the list or download it into a spreadsheet.
Actions that you can perform on a request
Follow the steps below to access requests that are awaiting your approval.
On the My Work tab, choose Request for Approval.
Note
To sort the requests by attribute in ascending order, select the column header for that attribute. If you select the column header a second time, the system displays your requests in descending order of priority.
Choose the associated Request Number to select a specific request and to display its details.
Choose from the pushbuttons at the bottom of the screen to select the action that you want to perform on the request. Your choices are listed in the table below.
Note
The options that you see depend on the permissions that you have been granted as an approver. The tabs and the pushbuttons at the bottom of the screen interact as described in the following table.
Tab |
Description |
---|---|
Roles/Profiles |
This tab displays the roles and profiles that a requestor wishes to have. As an approver, you may reject one or more of these proposed roles. You may also add more roles to the request by selecting the Select Roles button. |
PD Profiles |
This tab displays and PD profiles that are part of the request. PD profiles are used by the SAP HR system. If you want to add more PD profiles to the request, use the Select PD Profiles button to access the PD Profiles tab and select new PD profiles for this request. |
Risk Violations |
This tab displays the results when you run Risk Analysis. It displays the possible risk violations that you can then mitigate. |
Mitigation |
This tab displays your choices for mitigating risks that are discovered when you run the Risk Analysis process. |
Superuser Access |
This tab displays any superuser assignments that are associated with this request. |
Comments |
This tab displays comments that are associated with the request. |
Request Reason |
This tab displays the reason that was given for this access request. |
Attachments |
This tab holds any documents that are associated with the access request. |
Button |
Description |
---|---|
Cancel |
Returns user to search results screen. |
Approve |
This pushbutton is used to approve the request. You approve it two times: first on the initial Request Number xxx screen and then on the Request Information screen that appears after you make the first approval. After you approve it, the system routes the request to the next step in the approval work flow. |
Reject |
Use this pushbutton to reject the entire request. |
Hold |
This pushbutton puts the request on hold status. It removes it from the Request for Approval list and puts it on the Request on Hold list |
Risk Analysis |
Use this pushbutton to perform risk analysis on the access request. |
Select Roles |
Use this pushbutton when you want to search for and add more roles to the access request. |
Select PD Profiles |
Use this pushbutton to open the PD Profiles tab and to search for and then add or delete PD profiles for a given system. |
Reroute |
Use this pushbutton to forward the access request to a predefined path such as Security. |
Existing Roles |
This pushbutton allows you to display roles that are already assigned to the requestor. |