Hi All,
We are on GRC SP13.
User Access Review workflow has been setup.
1. UAR requests are generated.
2. During review, if the roles assigned to the user are fine, approver just approves the request. In this scenario audit log shows "NO PROVISIONING LOGS AVAILABLE"
3. During review, if the roles assigned to the user are removed by the approver then user is getting modified in the target system and logs are coming properly.
Request Type - UAR Review
Actions - Change User
As mentioned in point 2, if the existing roles are just approved to be there, since there is no change in the user assignment, no action is happening and no logs are being captured.
Please suggest how to handle this scenario. I assume that most of UAR requests would be just reviewed and approved to retain the existing roles, then the scenario as mentioned in point 2 is happening with no logs.
Thanks in advance.
Regards,
Sai.