GRC 5.3 vs. GRC 10.0 Workflow capability difference

[Former Member]

Hi, I'm relatively new to GRC workflow, and I am wondering if there are any experts out there who can answer this question.

We currently have GRC 5.3, and the user provisioning process workflow has been setup in a such way that the overall process appears to be processed in an extermely inefficient manner. For instance, at the Role Approver's stage, the request sent to the Role approvers for their approvals are processed SEQUENTIALLY for each Role approver. This makes the overall access provisioning process extremely inefficient when there are 3 or more role owners are involved. Instead of taking 1-2 days to get one access request processed, sometimes it is taking 2-3 weeks to get one access request get approved when many role owners are involved.

The consultants are telling me that GRC 5.3 does not allow such parallel approval, and that this is normal.

However, I am simply shocked that GRC 5.3 cannot do this. How are other people addressing this issue of inefficiency in the approval workflow? It would be so simple to have multiple approvers getting notification simultaneously, and run the approval workflow in parallel. Has this workflow function improved in GRC 10 so that multiple role owners can approve one access request in parallel?

[Former Member]

Thanks for the feedback and suggestions.

[Former Member]

If you have multiple roles to be approved in a request with each role having its own role approver, the roles can be approved simultaneously as the notification will go to each of the role owners simultaneously at the role approver stage.

If one role requires multiple approvers, they all have to approve the request b4 provisioning can happen. But again, here also, all of them will get the notification to approve simultaneously. So, it really depends on how efficient your role approvers are in approving the request on time.

Alley

[Former Member]

Hi Jae

What ever you are trying to achieve is very much possible with almost all version of SAP GRC .

In GRC 5.3 you can simply define CAD for each type of role and request will go to respective role owner simultaneously .

Thanks & Regards

Asheesh

[Former Member]

Are you saying that if the request contains 3 roles with 3 different approvers, the first has to approve them the next? I have mine simultaneous in 5.3 and have since 5.1...

[Former Member]

Hi,

This capability is available in GRC 10, called as MSMP (Multi Stage Multi Path).

Check for the documentation in BPX that should explain you the steps to configure the same, incase if you have GRC 10 configured.

Regards,

Raghu