We are in the process of implementing HR position based role provisioning in GRC 10.1.
although we are able to assign the role based on position in HR trigger, we are not able to remove the existing role which pertain to the old position.
We want removal of role on real time basis.
Nov 29, 2017 at 04:56 PM
Narayanan,
I am guessing you might have indirect provisioning in place, where you assign the role to the position(step1) and when someone hired to the position you will assign the role (assigned to the position) (step2) to user in backend (only HR role I guess).
So what you are saying if user changed his/her position the role is not removed from the user or you are expecting the role
to removed from position)
Thanks
Ramesh