I have used the Functional module GRAC_INITIATOR_SOD_VIOLAT_LI for SoD Routing
I have created two paths 1 for SoD and other for No SOD and mapped the results in Rule ID .
Process ID : SAP_GRAC_ACCESS_REQUEST
Initiator comes default with this is Rule ID : GRAC_AR_INITIATOR
So when I use Initiator Rule ID for Functional module GRAC_INITIATOR_SOD_VIOLAT_LI , i cannot map the values from GRAC_AR_INITIATOR .
Steps are as below
Step 1
Process ID : SAP_GRAC_ACCESS_REQUEST
Initiator comes default with this is Rule ID : GRAC_AR_INITIATOR
Step 2
Which rule ID I have to select ??? GRAC_AR_INITIATOR or GRAC_INITIATOR_SOD_VIOLAT_LI ??
I believe it is taking both for the workflow
Step 3 Agents : None
Step 4 : Notifications : None
Step 5 : Paths
1. GRAC_DEFUALT_PATH with no stages for automatic assignement
2. SOD review Path with security team as stage
Step 6 : Route Mapping
GRAC_INITIATOR_SOD_VIOLAT_LI with values SOD volations and No SoD Violations
Following are my concerns
1. Which rule ID I have to select ??? GRAC_AR_INITIATOR or GRAC_INITIATOR_SOD_VIOLAT_LI ??
I believe it is taking both for the workflow
2. Do we need to include GRAC_AR_INITIATOR as well in Step 6 ??
3. I have tried doing it , but access is assigned even though SoDs exist ...
Can anyone help me with this ???