Skip to Content

GRC AC ARM - Environment displayed for Business Roles in Access Request Audit Log

Hello everyone, I have a couple of questions related to Access Request for Business Roles:

Why does GRC AC ARM display, for Business Roles in the Access Request Audit Log, that the selected environment is "Development", "Testing" or "Production"?

Why doesn't it show the environment of the connectors or connector group?

What if I have more than 3 landscapes or I want a Business Role to provision in Production and Testing, for example?

And last but not least: what is the link between this environment and the Landscape that I selected?

Thanks for your understanding and answers, because I've been hitting my head on this and I can't figure it out.

Regards,
Gustavo

Add comment
10|10000 characters needed characters exceeded

  • Follow
  • Get RSS Feed

5 Answers

  • Feb 06 at 03:33 AM

    Hi Tom,

    Your requirement seems similar to one of our projects: keep QA aligned with Prod.

    For that, we defined a connector group with the Prod and QA connectors. That means that the role must have exact the same name in both systems.

    Hope that helps.

    Add comment
    10|10000 characters needed characters exceeded

  • Feb 28, 2017 at 07:23 PM

    Hi Gustavo,

    you can provision business roles into different environments. For example, if you want to provision a business role only in production systems, then you select production. The actual systems are then picked by the environment that is defined for each connector (SPRO > GRC > Access Control > Maintain Connector Settings).

    In case you want to provision into TEST and PROD, then you have to add the business role twice. Once for each environment.

    Does that help?

    Regards, Alessandro

    Add comment
    10|10000 characters needed characters exceeded

    • Hello Alessandro,

      Do you mind sharing how to select the business role twice?

      If I search for the role, I have it in my 'available' list. Selecting it, it goes to my 'Selected' list and dissapears from my 'available' list.

      I seem not to be able to select a business role twice.

      I'm looking for a solution to attribute a business role to test + prod, but not dev (so the 'all' provisioning environment is not an option).

      Would appreciate your input

  • Feb 28, 2017 at 07:25 PM

    To wrap it up: the audit log shows the environment since otherwise you wouldn't know what systems are provisioned. On of the advantages of business roles is the ability to provision roles into different systems (or environments) by selecting (and hence approving ) one role only.

    Add comment
    10|10000 characters needed characters exceeded

  • Jan 23 at 07:12 AM

    Sorry for spamming - not sure if the comment or the answer triggers a notification.

    Anyway, Gustavo, Alessandro - Do you mind sharing how to select the business role twice?

    If I search for the role, I have it in my 'available' list. Selecting it, it goes to my 'Selected' list and dissapears from my 'available' list.

    I seem not to be able to select a business role twice.

    I'm looking for a solution to attribute a business role to test + prod, but not dev (so the 'all' provisioning environment is not an option).

    Would appreciate your input

    Add comment
    10|10000 characters needed characters exceeded

  • Feb 05 at 09:24 PM

    Tom,

    You have to upload/import the Business Role twice (one for Prod and another for Test)

    Thanks

    Ramesh

    Add comment
    10|10000 characters needed characters exceeded