Submit multiple provisioning requests to GRC

[former_member615753]

Hi experts,

Recently my client has given me a requirement for user access (roles and privileges) certification in ABAP systems. Basically, it consists of identifying the exception assignments (privileges that do not belong to user's business role) of all users and send a de-assignment request per user to the GRC provisioning framework to the respective approver. All this must be done with a job scheduled to run every three months.

The part of the exception assignments identification is done, but I'm trying to find a solution for the GRC part.

Any help will be much appreciated!

[ChrisPS · Accepted solution]

Hello Mauricio,

                      not sure on this one but maybe try a thread on the GRC space http://scn.sap.com/community/grc .

Cheers,

Chris

[former_member615753 · Accepted solution]

Thanks Chris, I will try that.

Greetings.

[Former Member]

Hi Mauricio,

If I understand your question correctly, if you wrote a job that triggered the removal of the unwanted privilege privilege and had the del_member event on all the privileges set to be the Grc approval task, that should do something like getting the removal approved in GRC before the removal is done by Idm.

Hope that helps?

Ian

[mauricio_padilla]

Hi Ian,

Thank you very much for your reply. Actually, I am like 2 steps away from writing the job. See, I'm kind of new to IdM and got this complex requirement. At this point, I'm not even sure if IdM supports this kind of functionality (multi-user privilege de-assignment through GRC provisioning framework). Any suggestions on a possible approach? Can this even be done?

Greetings.