How enable remove option under User Access tab in GRC 10.1

[former_member308197]

Hello

We have a requirement to enable remove option at security stage, so that we can remove some line items at end of the request

Regards

Satish

[former_member193066 · Accepted solution]

first add some role or system, then u can see its enable, without any line item it will remain disable.

Regards,

Prasant

[former_member308197 · Accepted solution]

No Prasant,

It is appearing while submitting the request, but not in approval stage even i have provided RT config/override options for that user at path modify options

Thanks

Satish

[former_member193066 · Accepted solution]

If it is submitted by requestor then will remian greyed out.

if approver adds a role then he can remove that role.

try adding a role at approver stage and select that role then you can see remove button get enabled.

Regards,

Prasant

[former_member308197 · Accepted solution]

Hello Prasant,

Can't we enable this functionality for the users, who can approve at request level?

Regards

Satish

[former_member193066 · Accepted solution]

you don need to enable that, as approver can select the role and choose reject before submitting

Regards,

prasant

[former_member308197 · Accepted solution]

Babai,

Our security team got used to it in GRC 5.3 system, where Role owner approves all roles and then later he will send an email that he approved one role by mistakenly, So in that senario we will have to remove that one role after role owner stage instead of creating new request.

Satish

[former_member193066 · Accepted solution]

hello,

if role owner has not rejected any role,

if he send email, then security team can reject that role before approving .

you dont need separate request then

the role which are marked as reject will not move to next stage.

Regards,

Prasant

[former_member308197 · Accepted solution]

Ok Prasant,

I will put it in this way

1. Requester submitted the request -with three Role Line items

2. Peer_Review Stage - There is no option to remove one Role Line item (or) either he can reject at Role level, as we gave an authroization for request level, not sure i'm under impression that if a user has an access to Request level then he should be able to reject at role lineitem aswell.

3. Role Owner approver - If he approved all the three roles

4. Security - Then security should be able to remove one line item if required, again they have authorizations at request level

Am i missing something here?

Regards

Satish

[former_member193066 · Accepted solution]

Hello,

You can change setting ,in MSMP under modity task settings.

instead at request , make it system and role that will solve ur purpose.

[former_member308197 · Accepted solution]

Thanks Prasant,

But can this approver (PEER_Review (or) Security) is able to approve/reject at request level?

Regards

Satish

[former_member193066 · Accepted solution]

these settings are at stage level,

you can define for each stage..

at 1 stage if u want to define at request you can,

i would suggest you keep at at system and role for all stages that is always helpful.

Regards,

Prasant