GRC 10.1 Access Request Risk Violation light

[Former Member]

Hi Expert,

I'm trying to create an Access request with GRC10.1, I'm not able to understand the SoD check that is automatically executed by system. Why changing the field provisioning action from Romove to Retain/change in the same request the SoD results is changing despite of SAP_ALL assignement:

1- Remove Role (always green light despite of any risk, as user has SAP_ALL)

2- Retain/Change (red light, correct as the user has SAP_ALL)

Please help in this!