Access Request role search restriction using GRAC_ROLP and Rolename

[nanditas]

Hi All, We have a business requirement where we are trying to restrict the roles a requestor can select while submitting an access request. In order to achieve this I'm trying to restrict the role selection using the auth object GRAC_ROLEP and Role name. In BRM we have Business roles named as ***** DENMAK , *** SWEDEN. I'm trying to use a string in the Role name however I'm getting the error- Unsuitable generic input for authorization changed. I came across sap note -3195139 regarding the error. Could someone assist me to know how can I achieve this?

Many Thanks,

Regards,Nandita

 

 

[cavalcante96]

Hello, Nandita!

Have you tried to restrict by Role Status? You can select the roles and change their status from Production to Development status.

Before you must be configure those status on SPRO in GRC system.

Path: Go to SPRO > SAP Reference IMG > Governance, Risk and Compliance > Access Control > Role Management > Maintain Role Status.