Business Role creation in SAP IAG or SAP GRC in Hybrid approach?

[komal2ligade64]

Hello all,

We will be using GRC AC and IAG Bridge to extend the current GRC functionality for Access Management.
There will be Hybrid approach where Access request will be provisioned through GRC if its for On-premise system and through IAG if its for Cloud Apps. Initial access request will be triggered from GRC only.

I would like to know what will be feasible-

1. Creating Business roles in IAG for cloud apps and then sync it with GRC? in GRC job roles for On-premise system are already available. So create another Business role in GRC which will contain Job role of On-premise and Business role from IAG.

or

2. Create a Business role in IAG for cloud apps and include all the job-roles from On-prem in the same business role via sync. Is this possible in IAG bridge scenario?

Let me know if any further information is required.

Thank you.