Sitemap

Amicuk Programming Answers

Access Control View All Role

-0001-11-30   Views:1

Advertisement

Hello Experts, We are currently implementing GRC Compliant User Provisioning for the client. Apart from the configuration team with role AEAdmin, we have few client experts to look into the sandox system and understand the cnfiguration we made is as

Hello Experts,
We are currently implementing GRC Compliant User Provisioning for the client. Apart from the configuration team with role AEAdmin, we have few client experts to look into the sandox system and understand the cnfiguration we made is as per the requirement.
In doing so, they tend to modify some or other configuration at times knowingly/ unknowingly which lead us to longer debugging time.
Is there a way I can create a UME role with only View Configuration Action to avoid such circumstances.
Thanks
Rashmi

The replay answer
Advertisement
Hi Rashmi,
1- Assign following actions to Role:-
ViewReject
ViewHold
ViewCopyRequest
ViewCreateRequest
ViewSearchRequestAll
ViewRequstAuditTrail
ViewForwardRequest
ViewReRoute
ViewAccessEnforcer
ViewSelectPDProfiles
ViewMitigation
ViewRiskAnalysis
ViewSelectRoles
ViewReaffirms
ViewRiskAnalysis
ViewSelectRoles
ViewReaffirms
ViewApprove
ViewApproverDelegation
Using this action You can saw following Tabs in Access Enforcer
1- Access Enforcer
        -Requests For Approval
        -Create Request
        - Search Requests
        -Requests On Hold
        -Approver Delegation
        -Copy Request
        -Search Request Audit Trail 
        -Role Reaffirms
2-Informer Tab
        -Services Level For Requests
        -Conflicts And Mitigations
        -Request By Roles And Role Owners
        -List Roles And Owners
        -Requests By PD/Structural Profiles
3-Configuration Tab
        -Monitoring
                  -System Log
                  -Application log
       - Upgrade
Rest of the Tabs in Configuration is running along with Modify action in  AE5.2.
2- Some new actions are added by SAP GRC RND Team  In Compliant User Provisioning 5.3( Access Enforcer 5.3) for only view the Initiators,Stages,Path,Connectors,Provisioning,HR Trigger,Userdefaults Etc.
In AE 5.3 independent  View and Modify actions are available
for each tab like for initiators ,Connectors Ect, But this type of provision is not available in AE 5.2.
Regards,
Jagat

Go to See the other 6 answers

Access Control View All Role

Category:DefaultRelease time:-0001-11-30Views:130

Hello Experts, We are currently implementing GRC Compliant User Provisioning for the client. Apart from the configuration team with role AEAdmin, we have few client experts to look into the sandox system and understand the cnfiguration we made is as[More]

GRC Access Control 5.3 - Role Reaffirm Notification Email

Category:DefaultRelease time:-0001-11-30Views:130

Hi Experts, We have GRC 5.3 system and we want to change the content of Role Reaffirm notification email. Is there any way to change the default email text? We want to add few additional lines and CUP link in the email notification. Thanks, RajendraH[More]

Access control for different user groups in APEX 4.0

Category:DefaultRelease time:-0001-11-30Views:130

Hi guys, in Apex 4.0, is there any way to use the access control page to configure access control for different user groups? The access control page currently only has an access control list by users with 3 privileges namely, Administrator, Edit & Vi[More]

Process to activate access control dynamiclly

Category:DefaultRelease time:-0001-11-30Views:130

Hello, I would like to make a process that activate the access control to a specific button, page..etc dynamically according to a condition, something like: " Assign access control (view,edit,admin) of (page#, button..) to user (x) when (condition)&q[More]

Role Based Access Control in Java

Category:DefaultRelease time:2015-10-11Views:130

Hi, we are designing a software solution that makes use of the Role Based Access Control pattern to control access of functions, EJBs, Servlets to certain users based on their "role". I have not been able to understand clearly how that pattern c[More]

ADF UIX Role Based Access Control Implementation

Category:DefaultRelease time:-0001-11-30Views:130

Hi, Can anybody suggest a detailed example or tutorials of how to implement a role based access control for my ADF UIX application. The application users can be dymanically added to specific roles (admin, Secretary, Guest). Based on the roles, they s[More]

Any best practice to apply role based access control?

Category:DefaultRelease time:-0001-11-30Views:130

Hi, I am starting to apply the access permissions for new users as being set by admin. I am choosing Role Based Access Control for this task. Can you please share the best practices or any built-in feature in JSF to achieve my goal? Regards, FaysiHi,[More]

Using Roles with Access Control Pages

Category:DefaultRelease time:-0001-11-30Views:130

Hi, I was curious if someone might be able to shed some light for me on an issue. I have a matrix of users who can read or write on different pages. So there are various roles created Admin can write all pages Reader can read all pages Medium Users c[More]

To run OHS at port 80 using solaris role based access control

Category:DefaultRelease time:2015-10-11Views:130

Hi. I already know & have done setuid root to ohs/bin/.apachectl to allow ohs to listen to port 80. Now on a new OFM 11.1.1.4 install, I want to use Solaris Role Based Access Control (RBAC) instead. Is it possible? RBAC does work as I can run a home[More]

401 Unauthorized Error when accessing a task from REST API which contains Role or Privilege in Access Control definition

Category:DefaultRelease time:-0001-11-30Views:130

Hi Team, As of IDM 7.2 SP8 patch2, when we use Enterprise role or Privilege in the access control definition of a task, accessing this task from UI5 i.e REST API is giving unauthorized error even though user is already having the required role or pri[More]

Importing a pkg with rely on server storage and roles for access control

Category:DefaultRelease time:-0001-11-30Views:130

Hi we run std 2008 r2.  I'm reading documentation on prot levels during pkg import to catalog at https://msdn.microsoft.com/en-us/library/ms141747(v=sql.105).aspx but unfortunately the definition of prot level "rely on server storage and roles for ac[More]

Hot
I made a huge (and naive and stupid) mistake and now have an iMac stuck at the Win7 boot screen because it can not find the keyboard. I can't boot it back into OSX either because the keyboard OPT key is not recognized. Here is what happened: My iMac [More]
hi can anyone help let me know if there is any way to achieve this objective. objective is as below There will be a batch file run from a DOS prompt This will generate a CSV file for a SQL query and dump it on the local machine. thanks and regards As [More]
I am trying to activate Photoshop CS3.  It has been some time, but I think my last computer with the program installed suffered a hard drive crash, so I was not able to deactivate the license before it was re-imaged.  When I try to use the activation [More]
Using trial version of Elements and can preview videos. When I switch to Organizer to preview, tag, etc., the screen is black. When I click play, it begins to play but nothing is there. Which is the file format that you are trying to play? Are you ab [More]
Hi, I'm working into the xsl file to create Web Form with Web Page Composer. In some of current exemple it show us some tags or variable into the file like : @rid e.g : <xsl:value-of disable-output-escaping="yes" select="wpc:getAccessLin [More]
I am writing a custom SSIS source that uses a standard SSIS Flat File Connection Manager. I have got a working UI that shows all usable connection managers in a dropdown list and allows the user to pick one. I would like to be able to have a button t [More]
I just purchased convert pdf to word it is not working it just keep reading it won't download.Hi there gizmo5, I see your ExportPDF subscription (active since August 6), but don't see an order for PDF Pack. What happens when you try to convert your f [More]
I've only 1/3 the HD filled. typically, I'm only simultaneously running iPhoto, Safari, iMail, Skype & iCal... Over the last 2 months, -with ANY single application running- the entire OS has slowed to a CRAWL that won't even let me HIGHLIGHT text rel [More]
Hi guys, I am looking for a way how to "speed up" client reconnect in following scenario: I have two brokers running in HA cluster configured against a DB2 database as storage for messages. I configured JNDI with a connection factory pointing to [More]
Hi, i run form (6.0) on Form Server (IAS9i) to call report (6.0) to print receipt on local printer using RUN_PRODUCT command (PARAMFORM=NO, DESTYPE=PRINTER) and got Error Message "REP-3002 Error initializing printer. Please make sure a printer is ins [More]