Skip to Content
0

GRC business role assignment

Jan 20, 2017 at 11:21 AM

140

avatar image

Hi

I have run report GRAC_CHECK_BROLE_ASSIGNMENT (we are on GRC 10.1) doing spot checks on a number of users. It looks like we have a very large number of inconsistencies with the message "User is directly assigned to technical role". But the business role is displayed as well in the report. My question is:

Is there any report which can automatically create all those missing User<-->Business Role relationships?

Thanks in advance

Aage

10 |10000 characters needed characters left characters exceeded
* Please Login or Register to Answer, Follow or Comment.

1 Answer

Amit Nanaware Feb 07, 2017 at 12:16 PM
0

Hi Aage,

Hope you will find your answer with below details

1.) User is not assigned any business role: This message indicates that the user is not assigned any business role and only single roles are assigned to user either via access request or directly in backend

2.) Single role assignment is consistent: This message indicates that the business role to single role relationship is maintained correctly in repository. This is ideal scenario and suggests that there is no inconsistency in the business role assignment to user

3.) Business to single role relation does not exist: This means that single role which is part of business role is assigned to user with correct validity dates but its relationship with business role does not exist. This means that the business role id column in GRACUSERROLE table is blank

4.) Single role is assigned with different validity date and without any relation to business role: This means that single role which is part of business role is assigned to user with different validity data and without relationship with business role

5.) Single role is not assigned to user: This means that single role which is part of business role is not assigned to user at all. This can happen in case user/role is deleted manually from backend or in case of partial provisioning due to some error

Thanks

Amit

Share
10 |10000 characters needed characters left characters exceeded