on 10-28-2014 2:10 AM
Hi All ,
I would like if it possible for us to have auto provisioning for certain non-derivable role . We are currently implementing GRC 10.1 and it was suggested for those roles which non derivable we define multiple owners . However the concern was this will lead to e-mail notification to multiple approves which the business seems not keen on this . After reading forums one approach would be derive all non -organization role with domain and assign role owner so that the notification would go to the app rover however there is hesitant to use this approach due to the amount of work needed .
However after done some check I see in the role upload template we have one column with
Allow Auto Provisioning [ Alphanumeric(1)] [Y/N]
If this is set to Y and no role owner is defined would the role would be assigned automatically without going through the approval process . In our organization only approves would be having access to GRC thus end users would not be able to submit a request . Not certain if this will work but any feedback would much appreciated . I try to find the meaning of each of the column but no success .
Regards
Kumar
Dear Kumar,
In role template Allow Auto Provisioning [ Alphanumeric(1)] [Y/N] indicates auto provisioning in target system after approval or not
Role template is used to import the back-end roles into BRM,in another way it will information about the role status in BRM.
if i understand correctly,your issue is to define default roles
follow the below link to know get more details
BR
Baithi
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hi Kumar,
Allow Auto Provisioning [ Alphanumeric(1)] [Y/N] - This option will allow the role to be auto provisioned or not at the end of the request or end of the path according to your settings. This option doesn't work if you want to role to be auto assigned without any approvals.
There is another option called "Auto Approve Roles without approvers". Check if that helps you.
1709391 - AC10: Auto Approve Roles without Approver Configuration Parameter 2038 is not Checked
1757735 - Auto Approve Roles or Systems without Approver
1765630 - ARQ: "Auto Approve Roles without Approver" option not working when Role Owner stage is the first stage of the path
Can you confirm if your requirement is to assign roles to the users without any approval stages??
If this is the case, then you can create one path with no stages and route your requests to that path then the roles will be assigned automatically whenever request goes to that path.
But is this the process you are looking for?
Regards,
Madhu.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hi Both ,
Thank you on the providing me some guide for me to do more research on this .
Madhu , the requirement is to get those non derivable role to be assigned automatically so that approvers won’t get multiple notification . The SAP Note is really helpful I will go through this .
Hi Baithi ,
Deviating from this topic , I assume to define role owner in Access Control we need to us the role template right is there other approach to define role owner .
“Role template is used to import the back-end roles into BRM,in another way it will information about the role status in BRM.”
Regards
Kumar
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.