Hello GRC experts,
I need help with a very basic requirement and unfortunately I am not able to build the logic. Here is the requirement:
When a new/change user request is submitted, it should go to manager for approval. If request has any role for removal action (prov. action) then it should auto provision.
For any other action, request should go to role owner. If role has no role owner and no SOD in request, it should auto provision. However, if there is no role owner and SOD in request, it should go to compliance.
Post role owner's approval (where role owner exists) request should go to compliance if SOD exists in request and auto-provision else it should auto provision after role owner's approval.
Now I create a custom brf routing rule at manager stage and rule results 1. for prov action "remove", 2. for SOD + no role owner in role, 3. no SOD + no role owner. I submit new access request with 2 roles - one has role owner and other does not and request has SOD. The request first goes to manager, then it splits and goes to compliance for roles that do not have RO and at the same time also goes to RO. Post RO's approval, request again goes to compliance.
How can I build a logic where all requirements are satisfied but request goes to compliance only once towards the end of request.
Bluesky
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.