GRC Fire Fighter Locking

[former_member663337]

Our auditors are asking us to lock Fire Fighter usernames if the review/approval of the logs by the Controllers has not been completed within a certain period of time. E.g., 28 days. Is it is possible to configure this or would it be manual?

[Mate]

Hello,

with GRC Access Control SP21, the Firefighter IDs are automatically locked after the logoff, and unlocked during the Logon process. So the FFIDs - when not in use - are locked by default. Any older version of GRC the explicit locking is not a feature, hence you can not do it automatically. If this is a requirement, I suggest to upgrade to SP 21.

On the other hand, I do not really understand the logic of locking the Firefighter ID if the controller are not approving the Reviews in time. What would be changed in a session which was happened in the past and already finished, if the FFID was locked? Also FFIDs are designed to be assignable for multiple Firefighters at the same time, hence if you lock an FFID (prior then SP21), then the other Firefighters are not able to use it when it is necessary.

Best regards, Mate