Skip to Content

GRC business role assignment

Hi

I have run report GRAC_CHECK_BROLE_ASSIGNMENT (we are on GRC 10.1) doing spot checks on a number of users. It looks like we have a very large number of inconsistencies with the message "User is directly assigned to technical role". But the business role is displayed as well in the report. My question is:

Is there any report which can automatically create all those missing User<-->Business Role relationships?

Thanks in advance

Aage

Add comment
10|10000 characters needed characters exceeded

  • Get RSS Feed

2 Answers

  • avatar image
    Former Member
    Feb 07, 2017 at 12:16 PM

    Hi Aage,

    Hope you will find your answer with below details

    1.) User is not assigned any business role: This message indicates that the user is not assigned any business role and only single roles are assigned to user either via access request or directly in backend

    2.) Single role assignment is consistent: This message indicates that the business role to single role relationship is maintained correctly in repository. This is ideal scenario and suggests that there is no inconsistency in the business role assignment to user

    3.) Business to single role relation does not exist: This means that single role which is part of business role is assigned to user with correct validity dates but its relationship with business role does not exist. This means that the business role id column in GRACUSERROLE table is blank

    4.) Single role is assigned with different validity date and without any relation to business role: This means that single role which is part of business role is assigned to user with different validity data and without relationship with business role

    5.) Single role is not assigned to user: This means that single role which is part of business role is not assigned to user at all. This can happen in case user/role is deleted manually from backend or in case of partial provisioning due to some error

    Thanks

    Amit

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Apr 11 at 09:46 PM

    Hi Aage,

    Do you able to find any program or report to update business role to user sync for all missing users assigned or deleted through backed.

    Please let us know as we are facing same issues in our system.

    Add comment
    10|10000 characters needed characters exceeded