How to manage Mitigation Control assignment Approval workflow in GRC-IAG Bridge ?

[asitkumarbehe]

Hello Everyone,

We are working with customer and have the below scenario encountered, Please help us understand what would be the appropriate way to move forward in this IAG-GRC AC Bridge scenario :

Scenario : Customer will have bridge scenario of GRC-IAG, Access request feature will be utilized from GRC AC Access request form for cloud and on-premise systems ( AS-IS : Mitigation Control approval workflow is currently in activate state for GRC AC which triggers on assignment of Mitigation Control to owner for approval during access request in case of On-premise systems)

Note : Access Control Risk Definition synchronization job & Access Control Mitigation Control Transfer job are instructed to run only once for syncing data from GRC AC to IAG to fetch data and recommended to start the maintenance of Risk and Mitigation data for both On-Premise & Cloud IAG moving forward in IAG.

Question : How to manage mitigation control assignment workflow for Cloud and On-Premise risk in GRC AC Access Request Form if mitigation data would be coming from IAG as runtime for cloud and on-premise systems, Customer wants to continue with Mitigation control approval workflow which is critical for business.

Regards

Asit Kumar Behera

[Uppdeep_Mann]

Hi,

Have a look at SAP note 3239757 - IAG job to synchronize the mitigation controls and user - mitigation control assignments from Access Control 12.0 to IAG.

Your Mitigation workflow will run in AC as it is and once you have new mitigation setup , sync it to IAG.

Regards,

Uppdeep