MSMP Issue - GRC 10

[madhusap]

Hi All,

Request Type : New Account

Roles : X [Has Role Owner] and Y [Has Role Owner] added

Request Submitted.

Default Role : Added based on request attributes - Z [No Role Owner]

Step 1: Request is at Manager stage. Manager can see all 3 roles [2 mentioned in request] + 1 [Added by default].

Manager approved the request. In this case 2 roles with role owners need to go to next stage. One role which is default role should be moved to different path and for this role there should not have any approval and should get assigned directly.

Problem is from Manager stage, 2 roles are going to next stage but the 3rd role, how to manage this as this should not have any approval and the user has not yet been created as request type is New Account.

I defined no role owner detour path at manager stage, so my third role goes to that path, but again that path should not have any stages, so it will look for provisioning to user, but user is not created yet

Anyone came across this scenario.

My Requirement : Default roles should not have any approval. But according to the scenario shared above i am not able to handle the role without role owner or default role to wait until the user gets created. Please guide me with your valuable inputs in this case.

Regards,

Madhu.

[alessandr0 · Accepted solution]

Dear Madhu,

did you set the parameter 2038 (Auto Approve Roles without Approvers)? With my configurations, which seems to be similar than yours, it is working fine. I have set 2038 to YES.

Regards,

Alessandro