Business role getting removed before deprovisioning backend roles completely

[sreekanth_sunkara]

Hi,

When we approve a access request for role removal, the business roles are getting removed before removing the back end roles. when the user in the access request gets locked by admin(in change mode) then the provision in the back-end fails because the user is locked by admin(in change mode). The audit log is capturing this information but the Business role is getting removed without checking the back-end role removal. we are having issue with re-approving the role in escape path. we are in SP17. Is there a way to add the Business role back directly in GRC or any note or correction to check the back-end role removal prior to removing the business roles in GRC.

Thanks,

Sri.

[Former Member]

Sri,

As far I know there is no way we can add a BR to the user directly.Whats your auto provisioning look like.

Thanks

Ramesh

[sreekanth_sunkara]

Ramesh,

Auto provisioning is at the end of the request.

Thanks,

Sri.

[Former Member]

Sri,

Just curious whats your GRAC_COMPARE_ROLES look like?

Thanks

Ramesh