Provisioining Profiles through GRC 12

[Quadir]

Hi Team,

We have a requirement by client where we need to provision Profiles ( since backend system does not have roles) through GRC 12 ARM. Any idea how it can be implemented.

Thanks

Governance, Risk, Compliance (GRC), and Cybersecurity 

[dyaryura]

Hi

Despite this is note recommended, your request is possible using GRC. I had to do this setup some time ago in a similar situation. For sure, the first approach should be to create roles.

Technically you can enable profiles and upload them to BRM. The profiles can be available in ARM for provisioning. I haven't tried to use any specific BRM functionality with profiles other than upload them just to meet this requirement and provision them for a specific use case. I wouldn't do any other further use of profiles in general in GRC or in SAP systems...

I guess by default you have it inactive, but you can setup in SPRO:

I don't remember if automatic upload via BRM is possible, otherwise you can use Excel template to upload the profile names/approvers

As I said...try not to go for that option but from a technical standpoint is valid. Also bear in mind the rest of the GRC functionalities you are planning to use and test everything. If you just want to upload profile names and make them available from provisioning you shouldn't have major problems from the technical side.

Hope it helps

Diego

[cavalcante96]

Hello, Quadir!

If there are no roles in backend system, you have to created these roles and import to GRC, or configure BRM modelo in GRC to create your roles.