Is there a pre-defined role type in GRC that allows you to submit a request for a grouping of roles?

[Former Member]

I am looking for a way to submit a request for a grouping of roles, by only requesting only one role. For example, if someone is on boarded and they need a set of 5 roles per their job - I would like for them to request one role, which is mapped to the five roles they need. After a request is submitted for a role, the request is then broken down and routed to each individual role owner. I have researched role type: group and template but have not found much information.

We are on GRC 10.1 SP 12.

[Colleen]

Hi Jamie

Have you looked at building business roles and grouping those singles together? Business roles exist in GRC only and are not technical roles in the system (i.e. not PFCG)

Regards

Colleen

[Former Member]

Hi Colleen,

Thank you so much for the quick response. I just tested the business role concept - It is similar to what I was hoping to achieve; However, I was looking for a way to submit a request for one role, and have it broken down into single roles within the request (prior to provisioning). I would like for the single roles within the "business role" to be routed to each individual role owner. If I'm remembering correctly, there was a way to do this in 5.3. I thought the concept was called templates roles but I could be wrong.

Jamie

[Colleen]

I haven't tried breaking it down like that I'm sorry. I'm not sure if the MSMP setting for your scenario would help as line-by-line might apply to the individual business roles

Thing to consider is if you can change you governance and approval of roles. If your design makes business roles available for a certain group of users (i.e. based on job) then you could shift approval to your role design phase. Therefore, the role owner agrees on principle that someone should receive the single roles as they are a member of the group.

If not, is there any way you could have different ARQ templates built for the roles and default them?

Regards

Colleen

[Former Member]

I was able to resolve the issue by creating a role with type: Template within NWBC. From there when I add the template role to the request it breaks it down into the single roles which are then routed to the approvers.

Thank you for your assistance.

Jamie

[gustavo_soares]

Hi Jamie,

I tried to use the request type Template during role import, but it is not successful, saying that type TPL is not valid for PFCG roles.

Would you have any suggestion?

Thanks,
Gustavo