Understanding SAP GRC MSMP Tables: Your Key to Workflow Configuration

SAP Governance, Risk, and Compliance (GRC) Access Control is a robust tool for managing risks, streamlining access requests, and maintaining compliance. At its heart lies the Multi-Stage Multi-Path (MSMP) workflow, a powerful engine for customizing approval processes. A grasp of the underlying database tables is critical to understanding and configuring MSMP workflows.

Key MSMP Tables

Let’s break down some essential tables and their functions:

• GRFNMWCNPRCS/ GRFNMWCNPRCST: These tables hold the process definitions.
  • GRFNMWCNPRCS: Stores the Process ID (e.g., SAP_GRAC_ACCESS_REQUEST) and type.
  • GRFNMWCNPRCST: Stores corresponding process descriptions.
• GRFNMWCNPRINI: This table links a Process ID to its Rule IDs, which define the logic for determining approvers.
• GRFNMWCNGLBSET: Stores global settings that apply to a specific process.
• GRFNMWCNGLBNOT: Contains global notification settings for a process, controlling how users and approvers are informed about workflow events.
• GRFNMWCNESCCOND: Houses “escape conditions” which can divert a workflow from standard paths.
• GRFNMWCNGLBESR: Stores “escape paths” – the alternative routes when ‘escape conditions’ are met.

Practical Use Cases

How does working with these tables translate into real-world scenarios? Here are some examples:

1. Retrieving Workflow Details: Need a quick list of all stages and paths defined within a workflow process? Query the relevant tables based on the Process ID.
2. Troubleshooting Approval Issues: A request is stuck? Examine the tables to identify the current stage, approver, and logic that led to the situation.
3. Customizing Workflows: Manipulating table entries allows for adding stages, modifying paths, and implementing advanced logic for approver determination.

Important Notes

• Expert Mode: Directly updating MSMP tables often requires working with the ‘expert mode’ transaction GRFNMW_CONFIGURE. Exercise caution as incorrect entries can break workflow functionality. The transaction GRFNMW_CONFIGURE_WD is generally the preferred method for regular workflow maintenance.
• SAP-Delivered Content: Many standard MSMP workflows are pre-configured by SAP. Avoid modifying these unless necessary.

Beyond the Basics

This blog offers a starting point for understanding SAP GRC MSMP tables. Additional tables exist for functions such as:

• Workflow Instance Tracking: Monitor status and detailed history of individual workflow instances.
• Logging: Store Firefighter (emergency access) logs for compliance purposes.

Final Words

Understanding the structure and relationships of SAP GRC MSMP tables is essential for GRC administrators who configure and troubleshoot workflows. By becoming familiar with the key tables, you’ll be able to customize processes, analyze issues, and unlock the full potential of SAP GRC Access Control.