CUP 5.3, Risk test of all roles in a Composite Role - possible?

[Former Member]

We want to use a Function (Dummy) Role in CUP, that shall have Composite Roles connected in CUP.

But when I do this - I only see the composite role when I make a SoD / Risk check in my cup WF.

Can I somehow also check the single roles in the composite roles?

Thank you

Kristian

[Former Member]

Hello All

Can no one help me here?

please - is there noway to do this?

Thank you

[simon_persin4]

Hi Kristen,

It should definitely be possible to analyse the composite role via GRC.

Either through simulation of the assignment of the additional single role into the composite or by the assignment of the composite role into the user's authorisations.

The composite role itself will not have any authorisations but it should read through the single roles contained within it as it is those authorisations which end up with the user.

Have you tried analysing the composite role directly in RAR to isolate it away form the CUP functionality as a unit test? If that works, you should then be able to prove that the risk analysis is indeed working. Then you can concentrate on the configuration of the workflow processes through CUP without being distracted from primary objective.

Simon

[Former Member]

good plan.

tnx simon