Roles cleanup from GRC10.1 system

[former_member631141]

Hi All,

GRC10.1, SP005

Roles are imported to GRC system through NWBC->role mass maintenance->Role import.

Not using any work flow for BRM.

Roles are assigned to users via access request work flow.

After couple of months 2 roles are deleted from plug-in system( ECC).  Now I want to remove these 2 roles from GRC system also.

Please advise on below queries.

1. What is the best method to deleted them? Can I delete from NWBC->Role management->Role maintenance-> search role and hit "Delete" by making sure no assigned users.

2. Is this ok to delete the roles from plug-in system before deleting from the GRC system?

[Former Member · Accepted solution]

Hi Venu,

To answer your questions:

1. Yes you use NWBC to delete the roles as you mentioned.  However, pay attention to the prompt that you receive after choosing delete.  Depending on your configuration parameters, you can choose to delete the physical roles from the target system(s) in addition to the GRC system's repository, or you can delete from the GRC repository only.
2. Yes it is okay to delete the roles from the target system before the GRC system.  Deleting in the GRC system simply prevents the role from being added within an Access Request.  FYI - physical role deletions in production (non-GRC) should be made via transporting to ensure landscape consistency.

-Ken