SAP IDM 7.2 SP7 - Integration with GRC10 for RISK Analysis ONLY

[Former Member]

Hi ,

We are upgrading from IDM 7.1 - GRC 5.3 ( Distributed Provisioning Scenario) to IDM 7.2 SP7 - GRC 10 ( Centralized Provisioning Scenario) As part of this Change , we are also sending IDM Role approvals workflow in Business Role Level ( Not in Privilege Level) .So Role Approval Workflow is Triggered in Business Role Level.Our Business Role is grouped as shown below .

     Business Role A : Privilege A (System A)

                               : Privilege A ( System B )

                               : Privilege A ( System C)

So when a Workflow is triggered on Business Role A , pending Value will be created on Business Role level & approvals will happen in this Business Role Level . Privileges will be automatically assigned once Business role is approved for user . Our issue is related to IDM 7.2 - GRC 10 Integration scenario RISK ANALYSIS ONLY .

So in IDM our Pending Value is Created at Business Role Level , not at Privilege Level .So when we integrate for RISK Check , SAP Scripts is looking for Privilege MSKEY (FIX PVO) in the Pending Value .So can some one provide help around this !!

• IDM Pending Values on "Business Role level" integration with GRC Folder - ACCESS RISK ANALYSIS ONLY which has set default on Privilege Level

Thanks ,

Jerry George

[Murali_Shanmu · Accepted solution]

Hi Jerry,

I am not quite clear. In an IdM-GRC integration, when you assign a business role to a user, all the privileges (which belong to this business role) only will flow to GRC for approval. Are you expecting a Business Role to flow into GRC for approval.

Are you getting any error message ?

Cheers

Murali

[Former Member · Accepted solution]

Hi Murali ,

Thanks a lot for clarification . So even though Approvals are happening at Business Role Level ( Logical grouping of Multiple Privileges) system will automatically determine Privileges associated with the Business role Level ? .

Thanks ,

Jerry

[Murali_Shanmu · Accepted solution]

Yes, that's right.