Hi All
I have a client who is on IdM 7.2 SP 6 with integration into GRC - AC 10.0 for Risk Analysis.
The system is set up in such a way that when the HR/PY team in the business hires a new employee and flags the position for SAP access the IdM extract job in SAP pushes the user into IdM. In IdM the required Business roles are assigned to the user which triggers a GRC Access Request automatically in GRC with the roles required for the user and sent to the user's manager for approval. Once approved it is sent back to IdM and the user is provisioned with the required SAP access roles.
The issue I have is two new users are assigned to the same position in SAP HR. For one the manager has received the GRC approval email and has approved the request and the user has been provisioned. However, for the other user who is assigned to the same position the manager has not received an email for approval or has a workflow inbox item to approve. On investigation I found that for the second user the Access Request has some how picked up the wrong manager. How is this possible? What should I check to understand how this occurred? Please advise.
I have already checked the following
1. Checked SLG1 - no errors
2, Checked the Org structure and both users are assigned to the same org unit/position.
3. The HR/PY team have confirmed that the PA20 records are the same for both users.
4. The MSMP Instance Runtime monitor shows the following
Thanks
Ran