Hi All,
We have designed our landscape to provision to SAP systems via GRC. IDM is sending add/remove role request to GRC via VDS-GRC web service but request is not properly grouped and logged in GRC. Here is the example:
There are two positions named P1 and P2 which has 2 and 4 tech roles within it.
Position-1 has tech role A and B
Position-2 has tech role A,B,C,D
User already has Position-1 and tech role A and B. Now user's Position-1 is getting replaced by Position-2. In this scenario following requests are getting logged on GRC:
1. One request to remove tech role A and B
2. One request to add tech role C and D
3. One request to add tech role A
4. One request to add tech role B
Note : All tech roles are from same GRC repository.
As per my understanding, this many requests should not be there when we are using GRC repository constant MX_PRIV_GROUPING_ATTRIBUTE = P:0
I have also observed "Write RequestId and opt. Start Polling" this job is getting executed even before "AC Submit requests" on position replacement even. This job is getting executed number of times based on number of common tech roles.
Any thought why requests are getting splited like this?
Thanks,
Dhiman Paul.