Hi Nithish,
What is Training Verification Routing Rule?
<Madhu> Generally in most of the organizations access to perform their job functions will be given to the users only when they finish the required trainings for that job. Training verification integration with GRC can be done using Training verification rules or BADI to check if the user requesting the access has already completed the required trainings.
If user already has 312 profiles assigned, Can we submit Access Request for new role assignment?
<Madhu> Request submission can be done and only the provisioning will fail
In the above scenario, a) Role B is selected for REMOVE action and Role A is selected for Assign Action, b) Role A is selected for REMOVE action and Role B is selected for ASSIGN action?
<Madhu> 312 Profiles does not mean 312 roles. A role can have multiple profiles and each role can have a maximum of 101 profiles with 170 authorization in each profile. So your query cannot be assessed based on the roles but based on roles already assigned to the user and number of profiles in those roles and then what you are trying to assign or remove along with the profiles in these roles.
Can we see User Group in the Risk Analysis Report?
<Madhu> It is a Standard functionality and user group will be shown in the report.
What is the difference between “Auto provisioning at the end of the request “and“Auto provisioning at the end of the path“?
<Madhu> End of request only when the whole request is completed. End of path only when a path of the request is completed. A request can have multiple paths.
How to create the org value for particular role in BRM
<Madhu> Do you mean how we create org value maps in BRM or how we assign org values to a role?
Regards,
Madhu
Bluesky
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.