GRC AC ARM - Environment displayed for Business Roles in Access Request Audit Log

[gustavo_soares]

Hello everyone, I have a couple of questions related to Access Request for Business Roles:

Why does GRC AC ARM display, for Business Roles in the Access Request Audit Log, that the selected environment is "Development", "Testing" or "Production"?

Why doesn't it show the environment of the connectors or connector group?

What if I have more than 3 landscapes or I want a Business Role to provision in Production and Testing, for example?

And last but not least: what is the link between this environment and the Landscape that I selected?

Thanks for your understanding and answers, because I've been hitting my head on this and I can't figure it out.

Regards,
Gustavo

[gustavo_soares]

Hi Tom,

Your requirement seems similar to one of our projects: keep QA aligned with Prod.

For that, we defined a connector group with the Prod and QA connectors. That means that the role must have exact the same name in both systems.

Hope that helps.

[RameshVithanala]

Tom,

You have to upload/import the Business Role twice (one for Prod and another for Test)

Thanks

Ramesh

[former_member282031]

Sorry for spamming - not sure if the comment or the answer triggers a notification.

Anyway, Gustavo, Alessandro - Do you mind sharing how to select the business role twice?

If I search for the role, I have it in my 'available' list. Selecting it, it goes to my 'Selected' list and dissapears from my 'available' list.

I seem not to be able to select a business role twice.

I'm looking for a solution to attribute a business role to test + prod, but not dev (so the 'all' provisioning environment is not an option).

Would appreciate your input

[gustavo_soares]

See my answer below.

[alessandr0]

To wrap it up: the audit log shows the environment since otherwise you wouldn't know what systems are provisioned. On of the advantages of business roles is the ability to provision roles into different systems (or environments) by selecting (and hence approving ) one role only.

[alessandr0]

Hi Gustavo,

you can provision business roles into different environments. For example, if you want to provision a business role only in production systems, then you select production. The actual systems are then picked by the environment that is defined for each connector (SPRO > GRC > Access Control > Maintain Connector Settings).

In case you want to provision into TEST and PROD, then you have to add the business role twice. Once for each environment.

Does that help?

Regards, Alessandro

[former_member282031]

Hello Alessandro,

Do you mind sharing how to select the business role twice?

If I search for the role, I have it in my 'available' list. Selecting it, it goes to my 'Selected' list and dissapears from my 'available' list.

I seem not to be able to select a business role twice.

I'm looking for a solution to attribute a business role to test + prod, but not dev (so the 'all' provisioning environment is not an option).

Would appreciate your input