Making changes to composite role

[former_member356668]

Hi friends

I am using grc 10.1 SP8.

Is there any easy way to to add / remove single role to/from composite role. I know we can do role upload under access mgmnt -> role mass maintenance -> role import but is there any better way?

For business roles we can directly do changes through access mgmnt- > role mgmnt-> role maintenance, no such provision for composite roles?  

Thank you!!!

[former_member356668]

GRC experts, can you please help?

[alessandr0]

Dear Pooja,

thanks for reaching out.

An easy way to do is just to reimport the roles and overwrite them. I am sometimes doing that and save all the attributes and add them as soon as the roles are in BRM.

Just for more clarification:

- Export all the role attributes to a XLS file

- Import the composite roles once again with default values (directly via Role Import)

- Export all the role attributes to a XLS file (do not overwrite the one from step 1)

- Update the XLS file with the attributes you exported in step 1

- Import the roles based on your import file

Hope this helps.

Regards,

Alessandro

[former_member356668]

Hi Alessandro,

Thank you for your quick reply. Appreciate it. 

All above steps done, tried re importing and still getting same problem. Also in role update, when I select all attributes, it gives me option to update role approves but not associated roles.  

Is it possible that there is something missing in the configuration of BRM?

Thanks,

Ashwini

[Former Member]

Hi Pooja,

Could you check if the Single roles are also already imported. If not, could you so the same. Also, could you export (standard) a Composite role, from Role search/Maint. And then overwrite this file with your required Composite and Single roles. This will ensure that you are not missing any field

Regards

Plaban

[alessandr0]

Hi Pooja,

mass update does not support the change of associated roles. Therefore the import template can be used. Check column X (Associated Roles) in the upload file. Provide all the roles in column X and import the roles to BRM.

Maybe I don't understand your issue correctly... but this should definitely work with role import.

Can you change the associated roles manually in BRM? Can you add a role in there?

Regards,

Alessandro

[former_member204479]

Hi Pooja,

You can use "role maintenance" like you mentioned for business roles in case of composite roles too.

Is there a specific reason why you are not able to do so?

Can you check in SPRO if composite role is active under Role management -> Maintain role type settings -> Deactivate role types?

Thanks

Sammukh

[former_member356668]

Hi Sanmukh,

I see this setting ( spro -> Role management -> Maintain role type settings -> Deactivate role types) it is not inactive for composite role.  I am assuming default is active?

When I go to any composite role in ( NWBC -> access mgmnt- > role mgmnt-> role maintenance) it does not show me list of single roles in contain to remove from, role list is empty. For business roles it shows me a list of roles from which I can choose to remove.

[former_member204479]

Hi Pooja,

Sorry for the delay in response, I hope you have resolved this issue.

From your screen shot:

Can you confirm if this role is created in BRM or it was already existing and was imported via role import?

If via role import then the import was probably not done properly. Please ensure you are importing the composite roles with the "associated roles" data properly provided in the import template.

Thanks

Sammukh

[former_member356668]

Hi Sanmukh,

Thanks for your reply. Yes, this composite role was imported via role import with all associated roles.

I would think import was successful since when I assign user any composite role through access request all the single associated roles get assigned as well. But I am not able to update that same composite role in role maintenance.

Thanks,

Sanmukh

[Former Member]

Hi Pooja,

you can use 'Role update', in Role Mass Maint. , to add Single roles to Composite roles. This is helpful, for 1 composite role. But for multiple, you  have to use Role import.

regards

Plaban