cancel
Showing results for 
Search instead for 
Did you mean: 

GRC business role assignment

former_member75544
Discoverer
0 Kudos

Hi

I have run report GRAC_CHECK_BROLE_ASSIGNMENT (we are on GRC 10.1) doing spot checks on a number of users. It looks like we have a very large number of inconsistencies with the message "User is directly assigned to technical role". But the business role is displayed as well in the report. My question is:

Is there any report which can automatically create all those missing User<-->Business Role relationships?

Thanks in advance

Aage

Accepted Solutions (0)

Answers (2)

Answers (2)

aryendradalal
Explorer
0 Kudos

Hi Aage,

Do you able to find any program or report to update business role to user sync for all missing users assigned or deleted through backed.

Please let us know as we are facing same issues in our system.

Former Member
0 Kudos

Hi Aage,

Hope you will find your answer with below details

1.) User is not assigned any business role: This message indicates that the user is not assigned any business role and only single roles are assigned to user either via access request or directly in backend

2.) Single role assignment is consistent: This message indicates that the business role to single role relationship is maintained correctly in repository. This is ideal scenario and suggests that there is no inconsistency in the business role assignment to user

3.) Business to single role relation does not exist: This means that single role which is part of business role is assigned to user with correct validity dates but its relationship with business role does not exist. This means that the business role id column in GRACUSERROLE table is blank

4.) Single role is assigned with different validity date and without any relation to business role: This means that single role which is part of business role is assigned to user with different validity data and without relationship with business role

5.) Single role is not assigned to user: This means that single role which is part of business role is not assigned to user at all. This can happen in case user/role is deleted manually from backend or in case of partial provisioning due to some error

Thanks

Amit