How is Default Approval for the Policy Exception is routed to Control Owner and requestor's Manager ?

[Priya129]

Hi Team,

I see that whenever a Policy Exception is created, within the GRC Application.

- The Approval is triggered to the Control Owner and Requester's Manager.

We want this default behavior to be routed to different users for approval based on the Criticality of the Policy Exception.

But somehow i am unable to find the piece of code written where the default Approval for the Policy Exception is triggered to Control Owner and Requestor's Manager.

I checked the Below Items in Details,

1. Workflow on the Policy Exception table

2. All the UI Actions - Request Approval on the table

3. All the Business rules on the table.

Still i could not find the same.

Request inputs on the same, so that to find the place of trigger of the Approvals for the Policy Exceptions.

Thanks in Advance.

Thanks,
Priya

[Chander Bhusha1]

Hi Priya,

This is defined in the workflow and the script include:

1. Workflow: Policy exception business owner approval.

Open the approval User activty you will see the requestor's manager is hardcoded in the users/field and the control owners they are getting from the script include which they have mention in the script section:

Script include is : new sn_compliance.PolicyException().getImpactControlOwners(current);

Approval User Activty:

highlighted is the requestor's manager 

Script Include part:

Open the Script include: PolicyExceptionBase 

Search for function : _getImpactControlOwners 

Screenshot:

Thanks,

CB

[Priya129]

Hi CB,

But is it on Orlando ????

I am in Orlando,

And My workflow Editor,

I just see one workflow below,

And its clearly NOT : Policy exception business owner approval.

Thanks,

Priya

[Phil Swann · Accepted solution]

Hi Priya, please see this post: https://community.servicenow.com/community?id=community_question&sys_id=967b4c7adb4e5010d5c4d9d9689619d3 hope this helps 

Orlando (GRC V10.1) has moved PER approvals to Flow Designer, but the API mentioned by CB is still being called. 

[Priya129]

Thanks @Phil Swann 

That was really helpfull..