Skip to Content
avatar image
Former Member

Major purpose of Agent Rule in MSMP

Hi All,

Can some please let me know what is use of agents rule in GRC AC?

By creating a workflow with initiator rule, the workflow selects the path and the agent approves the request at this stage. As I understand the same happens in agent rule where in the request goes to the agent and gets approved.

As the same is being happening with initiator rule, can some one explain the scenarios in which we should use Agents rule.

Also, Give me a scenario where I can use both initiator rule and agent rule?

thanks in advance.


Gowtham K.

Add comment
10|10000 characters needed characters exceeded

  • Get RSS Feed

2 Answers

  • avatar image
    Former Member
    Jul 19, 2015 at 04:07 PM

    Hi Gowtham,

    you can use standard and customized Agent rule. These rule ids are created through BRF+. Like Initiator rule, you can route your requests, to custom agent ids, as per your decision table.

    Eg. Standard: FF LOG REVIEW approval requests can be sent to Controller, as per standard Agent id: GRC_CPM_CNTRL_AGENT,but if you want to send these requests to particular ids(and not to respective controllers), based on Connector, then you can create custom Agent ids, where the  

    Recipient Column(will forward the request to this particular user id) is Output/Result Column, can be assigned to any User id

    Refer document at below link

    AC 10.0 - Customizing Workflows for Access Management



    Add comment
    10|10000 characters needed characters exceeded

  • Jul 19, 2015 at 04:37 PM

    Hi Gowtham,

    Initiator rule is to determine the path for your workflows based on the criteria you have set like Request Type or System or Roles etc.

    Once the path is determined, each path will have stages defined in it and each stage will have an agent (Approver for that stage). To determine the approver for respective stage you need an agent rule.

    All MSMP workflows uses initiator rule to determine the workflow paths and stage is in the paths determine approvers for that stage using agent rules.

    Is this the information you are looking for? Let me know if u have any queries.



    Add comment
    10|10000 characters needed characters exceeded

    • Former Member Former Member

      Hi Gowtham,

      Initiator rule only decides the path on which request would be sent. It do not decide the agent who will be approving the request. Once the path is determined by initiator rule, request is sent to the path. Now path would normally contain stages and at each stage you will have to assign an agent who will approve the request.

      So you have to maintain agent rules in your path/stages and these agents will automatically called when the request is routed to your path/stage.

      Best Regards,