Query on User Access Review

[Former Member]

Hi All,

As per the workflow UAR can be performed either by manager or role owner. Let's say we select "role owner" as the option. If I am one of the role owners for the role X and I have X assigned to me as well then the workflow will ask me to perform the action for my Id as well. This is not acceptable to the audit team. Is there any way this can be eliminated so that in case of such conflict the workflow can be triggered to the role owner's manager.

Please let me know should you need any other information.

Thank you,

Regards,

Praman Mulay

[vijayakumarsuth]

Hi Praman,

In standard delivered UAR, you dont allow role owner's manager to approve the UAR request.

I would suggest you 2 option

Option 1 - Can try utilize the co-ordinator option (NWBC-->Access Management-->Compliance Certification Reviews-->Manage Coordinators) but you need to maintain roleowner manager (reviewer) and his Manager (as Co-ordinator) then your workflow configuration you can go for agent GRAC_MSMP_COORDINATOR_AGENT at stage level

Option 2 - You can develop your own BRF+ Rule or Function Module to determine the approver of the UAR request.