GRC 10.0 -SP13 - ARQ - separate password notification for one access request

[andreas_dube2]

Hi all,

we have one request "new user" with more then one system to be provisioned (e.g. system A and system B). The new user for system A is approved next working day, but for system B (e.g. a test system) it takes about 2 weeks.

Problem: Email with the password for system A and B is send out after the complete workflow/request is finished, so it takes 2 weeks.

Any suggestions, how to send separate emails for each system, where the user is provsioned before the request is completed? - Besides creating 2 requests at the beginning.

Thank you,

Andreas

[Colleen · Accepted solution]

Hi Andreas

Where do you have your notification events configured in MSMP? Are the under Process Global Settings for Notifications or on the under the Stage

Also, what configuration do you have in IMG for Maintain Provisioning Settings for Auto-provisioning

Governance, Risk and Compliance > Access Control > User Provisioning > Maintain Provisioning Settings

For the approved system, is the password issued at the time access it approved or at the end of the request?

Regards

Colleen

[andreas_dube2 · Accepted solution]

Hi Colleen,

we have one "End of Request" notification event under Process Global settings. What event to choose under stage (only see approved, escalation, forward, new work item, rejected and return)?

Maintain Global Provsioning (IMG)

Role Provsioning Type: Direct

Auto Provsioning: Auto provsioning at the end of each path

For Assign Role Action is checked as well as Account Validation Check and Role Assignment

Send Password "Yes"

The password is send out at the end of the request.

Thank you,

Andreas

[Colleen · Accepted solution]

Hi Andreas

I'm not in a position to test this idea but I think you need to create a notification event at the end of the final approve step of the path. The user will then receive multiple emails

The notification on the Process Global settings is sent once every path is completed.

See if you can test adding a notification to an approval stage and seeing how that works. I assume if the auto provision at the end of the path creates SYSTEMA immediately, then the password should also be issued.

Regards

Colleen

[andreas_dube2 · Accepted solution]

Hi Colleen,

sorry for late response. I will try to test and get back to you.

Thank you.

Andreas