Skip to Content

User Parameter Removal via GRC Access request

Hi,

we have a requirement to remove user parameter(s) along with the role removal/user change in GRC access request. I think there is no standard SAP GRC functionality to handle the parameter removal automatically along with role removal in GRC access request. so i added permission for security approval stage to edit(Add/Remove) the values in parameter tab before submitting(approving) the request. Still the parameter removal is not working, please advise on this.

Thank you,

Sri.

Add comment
10|10000 characters needed characters exceeded

  • Follow
  • Get RSS Feed

2 Answers

  • Apr 26 at 04:53 PM

    Hi Sri,

    Removal of parameter is allowed in GRC request just like other roles and system. One difference in request between role and parameter options is that,with Roles you have provisioning action whereas for Parameter you don have any provisioning action. So, when you raise a change request for an existing user, the parameters will be fetched for user based on datasource configurations, for example, your datasource system is configured with ABC system then parameters will be fetched for particular user and shows the same in request under parameter tab. Now end user can decided which one to remove and submit the request, during the workflow process and autoprovisioning process, only parameter which are exists in request will be updated and rest will be removed for user.

    Add comment
    10|10000 characters needed characters exceeded

    • Thanks Vijayakumar,

      My understanding is the same. I allowed security team to remove the parameters from the access request at the security approval stage instead of end user removing the parameters. but once the request is approved the parameter removal is not working.

      Thank you,

      Sri.

  • May 10 at 04:05 PM

    May be time to create incident to GRC now.

    Add comment
    10|10000 characters needed characters exceeded