GRC 12.0 SP17 SOD Review

[former_member813568]

When Creating and Running the "Generate data for access request SoD", we are always only retrieving one user. The user is the first id in the list for a risk. We configured the Agent Type to Directly Mapped Users, we have run all batch jobs in order. We are executing this in our Sandbox enviroment but have run the SOD report and know full set of users. Would much appreciate any suggestions anyone has.

[Monsores]

Hi Mike.

I know you mentioned that you have run the required jobs, but just to double check, you need to run the repository sync, role usage sync, action usage sync and the batch risk analysis (with offline analysis, par 1027, enabled).

You also need to have parameters 2016 to 2023 configured.

Your risks must have owners set (if par 2018 is set to Risk Owner) or your users must have managers assigned in GRACUSER (if par 2018 is set to Manager), and concerned rolles must have been imported to BRM.

It is also a good idea to have the Admin Review step enabled so you can check if any of your reviewers (risk owners or managers) are missing coordinators.

Finally, please confirm if the risks you are expecting to be shown are not already mitigated.

Regards,

Marcelo Monsores