Clarification on SAP GRC Risk Analysis Mode Behaviour

IdentityIQ (IIQ) IIQ Discussion and Questions
,
1

Hi Team,

I am currently implementing the Risk Analysis mode in the SAP GRC connector and wanted to understand the expected behaviour in cases where there is no SoD risk in the requested access.

Does SailPoint display anywhere that the requested role does not contain any SoD risk? Currently, we are not seeing any such information in the Interaction section.

Also, are we expected to modify the script provided by SailPoint for Risk Analysis mode?

In our client environment, request type 023 is configured for creating Risk Items. However, in the script provided by SailPoint:

  • 01 is used for Create Account (without S/4HANA account)
  • 02 is used for Modify Account (with S/4HANA account)

When we send request type 01 or 02, we receive an “Invalid Request Type” error. However, when we send request type 023, the Risk Item request is created successfully in GRC.

Could you please clarify if this is the expected behaviour and whether any script changes are required from our side?

Thanks.

2

Hi @nitinbibm

SailPoint does not explicitly display a message such as:

“No SoD Risk Found”

Here, Do you have any SOD Policy in SailPoint that is defined for this ?

3

@nitinbibm Please check this thread: SAP GRC Risk Management Mode