SAP Knowledge Base Article - Public

2787479 - Enabling Four-Eyes Principle on Workflow Step Approvals - Employee Central

Symptom

  • This KB article details the process of enabling the Four-Eyes Principle on Workflow Step Approvals.
  • How to enforce a secondary approver when the initiator is also the approver by selecting Enforce Four-Eyes Principle on Workflow Step Approval option.

Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental.

Environment

  • SAP SuccessFactors Employee Central - Workflows

Resolution

Procedure to Enable "Enforce Four-Eyes Principle On Workflow Step Approval":

Image1.png
  1. Go to Admin Center > Platform Feature Settings. This opens the page so you can enable platform feature settings.
  2. Locate the Enforce Four-Eyes Principle on Workflow Step Approval feature to select the checkbox to enable and Save.

Four-eye Principle For Workflow Approvals

  • Enable the Four-eye principle that enforces security mechanism so the initiator cannot be an approver for their own workflows.
  • The way the Four-eye principle is being used for workflow approvals:
    • Initiator cannot approve their own workflows
    • Enforces secondary approver

When turning on the Enforce Four-Eyes Principle On Workflow Step Approval feature, it is important to note when the initiator is skipped as an approver, they do not receive:

  • Workflow requests in their Approve Requests or My Pending Requests.
  • When using workflows for alerts, the initiator doesn't receive To-Do Alert notifications or Alert E-mail when the initiator is added as an approver or as CC role.
  • For MDF workflows, an initiator may receive alerts if set up to run when the change occurs and not when the scheduled job runs.

Understanding Skip Logic When Four-eye principle is Enabled

The Four-Eye Principle doesn't apply to these single-user roles: Self, Manager, Manager Manager, and Employee HR. It's applicable for all other single-user roles and multi-user roles.

For position workflows:

  • When Four-eye principle is not enabled:
    • If the initiator and the subject user are the same individual, the approval request is sent to the subject user manager.

  • When Four-eye principle is enabled:
    • If the initiator and the subject user the same individual, the subject user manager is skipped.
    • The approval step is skipped and the workflow doesn't trigger.

  • When the initiator is the approver, and there’s only one approver depending on the configuration in the 'No Approver Behavior' field in the workflow object:
    • Skip This Step: Workflow doesn't trigger  OR
    • Stop The Workflow: Workflow stalls

Note: Initiator will be prevented from approving his/her own request only when the workflow was triggered, however system will still allow the initiator from approving if he/she has been made as delegate.

Keywords

sf, success factors, wfl, work flow, initiator, approve, skip, logic, EC, foureye, approver type, position relationship, dynamic group, role, four eye. , KBA , LOD-SF-EC-WFL , Workflows - Configuration, Tools, Objects & Rules , LOD-SF-EC , Employee Central , How To

Product

SAP SuccessFactors Employee Central all versions ; SAP SuccessFactors HCM suite all versions