topic Re: Role sensitivity in Application Development and Automation Discussions

Role sensitivity

Former Member — Sat, 07 Mar 2015 06:21:40 GMT

Hi,

In our current project ,we like to add role sensitivity attribute in role .so I would like to know what is significance of role sensitivity attribute in role?

Thanks

Sankar

Re: Role sensitivity

madhusap — Sun, 08 Mar 2015 07:32:08 GMT

Hi Sankar,

Role Sensitivity is just like other role parameters available in GRC.

You can use this role parameter for differentiating your PFCG roles using this parameter as: Normal, Restricted, Confidential etc

Regards,

Madhu.

Re: Role sensitivity

Former Member — Mon, 09 Mar 2015 01:13:24 GMT

Hello Sankar,

Role sensitivity to use as an attribute by creating or editing role sensitivity values.

Using role sensitivity with PFCG helps to organize the authorization structure for your company.

In PFCG, you can specify that only roles with role sensitivity of Restricted are authorized to access certain data in your company or certain roles of sensitivity confidential need to have special approvals if they need to be assigned to some users

Regards,

Deepak M

Re: Role sensitivity

AndrzejP — Mon, 09 Mar 2015 09:51:41 GMT

Hi Sankar,

we also use sometimes this attribute to mark if role is relevant for processing personal user data (if yes - additional documentation from user is required - according to local regulations).

Best regards, Andrzej

Re: Role sensitivity

Former Member — Tue, 10 Mar 2015 13:53:00 GMT

Hi Andrzej,

Could you please give one scenario. because I have to describe this attribute to my business.

Thanks

Sankar

Re: Role sensitivity

Former Member — Tue, 10 Mar 2015 14:17:27 GMT

Sankar,

Just as beauty is in the eye of the beholder, likewise deeming a role sensitive is in the judgment of the business. None of us here can tell you the scenarios of what is sensitive to your/ your client's business. That is for the business people to figure out and tell the IT folks. The above suggestion from Adrzej, that in their business model, roles granting access to PII, certainly makes sense. In other organizations, roles that grant access to data such as highly confidential product recipes, pricing information that must be restricted from joint venture business partners for SOx compliance, health information that must be tightly restricted for HIPAA compliance, roles that grant access to data that is sensitive for trade export compliance- the list goes on and on.

Or have I misunderstood your question?

Gretchen