Skip to Content
author's profile photo Former Member
Former Member

Different Results - GRC 5.2 and 4.0

In GRC 5.2, I am having problems producing u201Cvalidu201D SOD results when running the Risk Analysis on roles at the auth object level. Basically, for all SCM and HCM roles, I am getting u201Cno conflicts foundu201D using the Global Rule Set in 5.2, but numerous conflicts are found when running the same roles and with the Global Rule Set in 4.0.

I completed a full User/Role/Profile Synchronization and a full User/Role/Profile Synchronization in GRC 5.2. I then ran a Role Analysis on all HCM and SCM roles using the standard Rule Set in the 5.2 Portal Client and found "no conflicts". However, when I run the same analysis using the Global Rule Set in 4.0, I get many conflicts.

Any thoughts or ideas that you guys have are on why the two systems are producing different results are greatly appreciated. Please let me know if you need any more information from me.

Add a comment
10|10000 characters needed characters exceeded

Assigned Tags

Related questions

2 Answers

  • Posted on Jun 17, 2008 at 05:42 PM

    Robert-

    There is no documented way to reconcile your rule set with your 4.0 rule set. However, in my experience you can take a sample of users from 4.0 with a lot of conflicts and compare with the same users in 5.2.

    It seems like you have a sample you can start from. Then you will need to investigate the rule set itself, comparing actions, permissions, functions and risks. This can be very cumbersome and time consuming.

    In one of my past projects, we found that 4.0 was missing a conflict that should have been caught. And 5.2 was catching that conflict.

    Hope this helps...

    Ankur

    GRC Consultant

    Add a comment
    10|10000 characters needed characters exceeded

  • Posted on Jun 18, 2008 at 12:36 PM

    Robert-

    Also make sure you uploaded the static text and auth. objects correctly into CC 5.2. It is described on page 173 of the CC User Guide...

    Ankur

    GRC Consultant

    Add a comment
    10|10000 characters needed characters exceeded

Before answering

You should only submit an answer when you are proposing a solution to the poster's problem. If you want the poster to clarify the question or provide more information, please leave a comment instead, requesting additional details. When answering, please include specifics, such as step-by-step instructions, context for the solution, and links to useful resources. Also, please make sure that you answer complies with our Rules of Engagement.
You must be Logged in to submit an answer.

Up to 10 attachments (including images) can be used with a maximum of 1.0 MB each and 10.5 MB total.