Is it not a myth that roles should not be assigned!

[former_member245311]

Is it not a myth that roles should not be assigned (auto provisioned) via GRC if user ids are locked? My understanding is roles will get assigned (auto provisioned) to user ids irrespective of user id being locked or unlocked? Thanks

[alessandr0 · Accepted solution]

Hello,

technically it is possible to assign (also remove) roles/profiles to a user who is locked.

Regards,

Alessandro

[former_member245311 · Accepted solution]

Thanks Alessandro. I missed out on asking about one more gray area. Does GRC take into consideration user id status of Active Directory \ HR Database's status also ( Suspended, Inactivate accounts etc ). Thanks    

[deepakkg86 · Accepted solution]

Hello Rajashekar,

Not sure about AD but yes from HR(SAP HCM) system GRC can read the user status in terms of HR Actions and based on that take some action like..Provisining / Deprovisioning

[former_member245311]

Dear All, I missed out on asking about one more gray area. Does GRC take into consideration user id status of windows Active Directory \ My Success [ HR ] database's status also ( Suspended, Inactivate accounts etc ). Thanks   

[alessandr0]

Hi Raju,

nope it doesn't. You might be able to set up a mapping for the status but I never tried that.

Regards,

Alessandro

[deepakkg86]

Yes, it is.

GRC will assign access even if user is locked.