Grouping of business roles approvals
We need your help concerning on of our running project on IDM implementation (version 7.2 SP9) with GRC10 framework version 2.
Does anyone already implement a grouping of assignment requests for several business roles before sending it to GRC?
The limitation of the standard framework is to manage several requests in GRC AC in parallel >> analysis is done only for already assigned roles in the backend + roles in the current request but not with other parallel requests.
A lot of specific processes have already been developed around assignment requests for this project, both concerning privileges and business roles, to satisfy the client's request.
Among them are heavy adjustments to the GRC10 framework in order to support business roles requests approval after GRC check.
It means that we cannot go with the solution of creating a "Request" entry type to manage this grouping at this point of the project, it needs to be done with the standard entry types.
Be sure that we have been trying to discourage the client from this request. Our investigation leads (with a priority to keep the rest of the workflow intact) to a modification in the code of the dispatcher, in order to group roles requests the same way as privileges. Very risky!
Can you confirm our analysis of the issue, that modification to the internal processes of IDM is the only way to do this without redoing the whole projects workflows?
Thanks for your time