GRC Best Practice for converting existing assignments into Business Roles

[gustavo_soares]

Hello all,

What is your recommendation to convert the users' existing assignments into Business Roles?

We have thousands of users with the technical roles already as per the Business Roles, but those assignments were done manually (SU01, PFCG, SU10).

Now that we are implementing ARM and using Business Roles, is there a recommended way to "convert" those technical roles assignments in the backend into Business Roles in GRC?

We are on GRC10.1 SP15.

Thanks and best regards,
Gustavo

[alessandr0]

Gustavo,

that looks like you have a huge project ahead of you. I have never migrated technical assignments to business roles and from my knowledge there is no such functionality available. Anyways, it seems to be feasible with a quick migration tool that can be written in ABAP to upload you technical roles to business roles, and also assign the business roles to end users. Basically you can define the business roles with the role import functionality, but then the assignments need to be done with an ABAP. I do see two options: either with mass requests that can be automatically started from a webservice (input from an ABAP), or directly writing into the tables. However, I see here a project and very difficult to provide you the solution here in the community.

Regards, Alessandro