Symptom
- This KB article details the process of enabling the Four-Eyes Principle on Workflow Step Approvals.
- How to enforce a secondary approver when the initiator is also the approver by selecting Enforce Four-Eyes Principle on Workflow Step Approval option.
Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental.
Environment
- SAP SuccessFactors Employee Central - Workflows
Resolution
Procedure to Enable "Enforce Four-Eyes Principle On Workflow Step Approval":
- Go to Admin Center > Platform Feature Settings. This opens the page so you can enable platform feature settings.
- Locate the Enforce Four-Eyes Principle on Workflow Step Approval feature to select the checkbox to enable and Save.
Four-eye Principle For Workflow Approvals
- Enable the Four-eye principle that enforces security mechanism so the initiator cannot be an approver for their own workflows.
- The way the Four-eye principle is being used for workflow approvals:
- Initiator cannot approve their own workflows
- Enforces secondary approver
When turning on the Enforce Four-Eyes Principle On Workflow Step Approval feature, it is important to note when the initiator is skipped as an approver, they do not receive:
- Workflow requests in their Approve Requests or My Pending Requests.
- When using workflows for alerts, the initiator doesn't receive To-Do Alert notifications or Alert E-mail when the initiator is added as an approver or as CC role.
- For MDF workflows, an initiator may receive alerts if set up to run when the change occurs and not when the scheduled job runs.
Understanding Skip Logic When Four-eye principle is Enabled
The Four-Eye Principle doesn't apply to these single-user roles: Self, Manager, Manager Manager, and Employee HR. It's applicable for all other single-user roles and multi-user roles.
For position workflows:
- When Four-eye principle is not enabled:
- If the initiator and the subject user are the same individual, the approval request is sent to the subject user manager.
- When Four-eye principle is enabled:
- If the initiator and the subject user the same individual, the subject user manager is skipped.
- The approval step is skipped and the workflow doesn't trigger.
- When the initiator is the approver, and there’s only one approver depending on the configuration in the 'No Approver Behavior' field in the workflow object:
- Skip This Step: Workflow doesn't trigger OR
- Stop The Workflow: Workflow stalls
Note: Initiator will be prevented from approving his/her own request only when the workflow was triggered, however system will still allow the initiator from approving if he/she has been made as delegate.
Keywords
sf, success factors, wfl, work flow, initiator, approve, skip, logic, EC, foureye, approver type, position relationship, dynamic group, role, four eye. , KBA , LOD-SF-EC-WFL , Workflows - Configuration, Tools, Objects & Rules , LOD-SF-EC , Employee Central , How To