UAR Reviewer and User is same- Self approval

[ganesh_srini]

Hi Everyone

We have a single stage WF configured for UAR with reviewer being the role owner and stage approver too. In this case, we see the role owner/reviewer approving his own User access review in GRC. UAR approver and User ID is the same. Is there any way to change this in GRC?

Thanks Ganesh

Regards

Ganesh Srinivasan

[alessandr0 · Accepted solution]

Dear Ganesh,

I am not aware of any setting that you can activate. However, I have achieved similar behavior with a routing rule at the approval stage. Once the stage is approved, the routing rule will be triggered. In the routing rule I checked if the approver equals the end user and if yes I routed the request to a second path to get a second approval (four eyes principle).

Shouldn't be too difficult to achieve.

Cheers, Alessandro

[ganesh_srini · Accepted solution]

Hi Alessandro

If you could share the screenshots of that Routing rule that you created,I think it would be a great help to entire Community as this is one of critical question I come cross very often from GRC Consultants.

Thanks

Ganesh