Already Existing User selects New Account Request

[Former Member]

Hello,

We are currently in GRC 10.1 SP12. We would like to restrict an Existing selecting New Account Request Type and New User selecting Change Account Request Type.

Have tried adding the system as a line item in the access request (with a path,no stages) but I think this is inconvenient as there could be many satellite system connected to GRC system.

Please advise is there any other way this could be achieved without having the System as a line item.

Regards,

Jill

[plaban_sahoo6]

hi

New user selecting 'Change request', can be restricted by 2051, if your user authentication data source is the same system as requested system.

else, if your data source is LDAP, then in Global provisioning setting, Account validation check, can be set to error.

For existing user, could you say the problem if new user type is raised. Audit log at provisioning will display, user already exists. But role assignment will still take place.

I think, there is no standard functionality which prevents this scenario.

Regards

Plaban