Skip to Content
0

Modifying Role search criteria in GRC 10.0

Jan 09, 2017 at 04:00 AM

134

avatar image
Former Member

Hi All,

Please note that i ma working on GRC 10.0 sp14.

I want to modify the role search criteria screen in Access request. While adding roles in access request, there is no option of Reference user. There are cases when number of roles to be added in access request are more than 50-60. So, we have to copy paste each role.

Requirement - Is it possible to add a search criteria as "Reference user" where we can get the list of all roles assigned to a particular user in satellite system and add them to access request.

Thanks,

Mahak Kumar

10 |10000 characters needed characters left characters exceeded
* Please Login or Register to Answer, Follow or Comment.

3 Answers

Alessandro Banzer Jan 12, 2017 at 11:18 PM
0

Dear Mahak,

unfortunately, that's not available on your release / support package. If you upgrade to 10.1 you are able to use simplified access request applications where you can search for a role that is assigned to a user.

In 10.0 the only option you have is to start from Model User application and put the reference user.

Hope that helps.

Cheers,

Alessandro

Show 1 Share
10 |10000 characters needed characters left characters exceeded
Former Member

Hi Alessandro,

Thanks for your reply!

Yeah i know about simplified access request in GRC 10.1. But as of now my client does not have a plan to upgrade their system. So i was looking for something in this system only if possible.

Could you please suggest if it is possible with some kind of developments.

Thanks,

Mahak

0
Prasant Kumar Paichha Jan 20, 2017 at 06:14 AM
0

infact reference user can raise request for new user, user can go to my profile select roles and click request access.

Regards,

Prasant

Share
10 |10000 characters needed characters left characters exceeded
Marcelo Monsores Mar 02, 2017 at 05:21 PM
0

Hello Mahak.

In your case, to avoid a hard-working development which will probably be unnecessary from your next upgrade, I suggest you to (as a not-pretty-but-easy workaround), in the access request creation window, select the reference user as the target user, click on "existing assignments", add the resulting roles to the access request and finally change again the target user to the one you wish to have these roles assigned.

Regards,

Marcelo

Show 5 Share
10 |10000 characters needed characters left characters exceeded
Former Member
Dear Marcelo,

If possible, could you please attach the screenshot for the same? Because in my system, i am not able to find this thing.

Thanks in advance!
Mahak

0

Hello Mahak.

I attached some screenshots for the access request creation with this trick I told you. I'm sorry, but ours is already GRC-AC 10.1. I also have this main screen for GRC-AC 10.0 in my documentation, but it is in Portuguese.

For a template based request, the idea is basically the same, except that you would have to go back and forth through the workflow to shift between template and target user.

Regards,

Marcelo

ss1.png (27.4 kB)
ss2.png (29.8 kB)
ss3.png (40.6 kB)
ss4.png (43.3 kB)
0

Marcelo,

therefore, the "Model User Application" has been built. You can specify both the regular user you want to give access, as well as a the template user (in the case here that's the reference user). That's the suggested way - going back and forth in other applications doesn't make sense.

Regards, Alessandro

1

Hi Alessandro.

I understand and agree with you. In the end, it's exactly what the 'Model User' functionallity (which would be the best choice) does.

But I'm supposing that Mahak has any particular reasons not to use it and just wanted to share an alternative in the screen he asked. Despite not being the recommended way, it works and, in our particular scenario, it was also a vulnerability we had to deal with (I can explain better on the next cup of coffee, if you wish to know :-) ).

Regards,

Marcelo

0
Former Member
Marcelo Monsores

Dear Marcelo,

Thanks for sharing this info. I will try this and will let you know if it works fine in my case.

Thanks again!

Mahak

1