Skip to Content
avatar image
Former Member

Submit multiple provisioning requests to GRC

Hi experts, Recently my client has given me a requirement for user access (roles and privileges) certification in ABAP systems. Basically, it consists of identifying the exception assignments (privileges that do not belong to user's business role) of all users and send a de-assignment request per user to the GRC provisioning framework to the respective approver. All this must be done with a job scheduled to run every three months. The part of the exception assignments identification is done, but I'm trying to find a solution for the GRC part. Any help will be much appreciated!
Add comment
10|10000 characters needed characters exceeded

  • Get RSS Feed

2 Answers

  • Best Answer
    Nov 21, 2013 at 11:04 PM

    Hello Mauricio,

                          not sure on this one but maybe try a thread on the GRC space http://scn.sap.com/community/grc .

    Cheers,

    Chris

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Nov 22, 2013 at 09:04 PM

    Hi Mauricio,

    If I understand your question correctly, if you wrote a job that triggered the removal of the unwanted privilege privilege and had the del_member event on all the privileges set to be the Grc approval task, that should do something like getting the removal approved in GRC before the removal is done by Idm.

    Hope that helps?

    Ian

    Add comment
    10|10000 characters needed characters exceeded

    • Hi Ian,

      Thank you very much for your reply. Actually, I am like 2 steps away from writing the job. See, I'm kind of new to IdM and got this complex requirement. At this point, I'm not even sure if IdM supports this kind of functionality (multi-user privilege de-assignment through GRC provisioning framework). Any suggestions on a possible approach? Can this even be done?

      Greetings.