on 02-19-2012 6:06 AM
Hello Gurus,
I am back with my queries once again !!
We have implemented BRM functionality in AC 10.0 and it is working fine.
But i have confusion with Role Status during "creation" / " modification" of roles.
We have set our ERP development system as place where roles will get created , hence when we go thru various stages
e.g. Define role, Assign Authorizations , it is asking for Role status as "Development" , "testing" , "Production".
Since we are developing a new role should we set it to "Development" ??
Further on it also asks for "Provisioning" status for each System as "Yes/No".
My confusion is how should we use this BRM for new roles.
E.g.) A request for new role comes up , and then using BRM i create one get the approval done and the role is generated in ERP development system(Backend) for which Role Status is "Development" and provisioning status for all the system is set to "No" except the ERP development itself.
Now the role is transported to "ERP QA" system , so again i have to go to "BRM and change the Role Status to "testing" and get the approval process done and now include the role for provisioning "ERP DEV & QA" ??
After the testing is successful in ERP QA, that the role meets our requirements , i should again change the status of role to "Production" and again get the approval process done ??
Please correct me if i am understanding this functionality wrong ??
I would like to know on what basis should we set the roles status as "development" , "Testing" & "Production" ??
Thanks in advance.
Regards,
Victor
Hi everyone,
Have you ever tried to set multiple connectors for role generation instead of role transport?
I did so and now my doubt is how to control that Security Admin won't set the role status to PRD and though bypass user testing.
I tried with a trace and unfortunately changing role status doesn't have an authority check.
I could set an approval workflow for the user after testing, but this would be difficult to maintain.
What it would be perfect is to develop a user exit for the role status field.
Do you have any ideas?
Thanks!
Regards,
Fernando
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Victor, we have recently starting using GRC and trying to get a grip on certain things. We have a ERP DEV, QAS and PRD. We also have a GCP, GCQ and GCP. Now we have changes to do in some Business Roles and trying to figure out where it should be initiated.
When you said, "A request for new role comes up , and then using BRM i create one.." is this in GRC Production System or GRC Development system.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hi Victor,
I was wondering if you have any answer on your question?
and if so,
where do u see it in the role screen?
Best Regards
Michal
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hello Michal,
This query was posted almost a year ago 🙂 and I do have an answer to the question as well since the Project already went live 7 months back.
So the status is seen under "Role Status" --> PRD/QA/Dev (This can be modified from SPRO).
e.g) In my case i kept only DEV & PRD.
So that when role was created and sent for approval it would be DEV & once when approved , just before generating the role , we would change the status to PRD and run the SYNC job so that it is reflected in CUP request.
If you have any queries do let me know.
Regards,
Victor
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.