Setting up User Defaults in Access Control 10.0

Purpose

The Purpose of this document is to explain the working of User defaults in GRC Access Control 10.0 and the various configurations required to make it work as per the user requirements.

Overview

During the process of creating a user, the admin might like a few default parameters to be assigned to the newly created user automatically. This assignment might be based upon various request attributes like Request Type, Request Priority, etc. This can be achieved by setting the User Defaults.

Basic flow of User Defaults

To get user defaults work, user needs to create a BRF+ applications that returns a User Default ID based upon various request attributes as listed below:

• Request Type
• Priority
• Business Process
• Functional Area
• Employee Type

When the BRF+ decision table gets a match for values defined in it, a corresponding User default ID is returned. This User Default ID is then used to assign appropriate User Defaults to the user.

Setting up the BRF+ Decision Table

Create a BRF+ Application for user defaults and set its decision table so that it returns the User Default ID based upon the Request attribute chosen by you. As an example, if you want to assign certain user defaults to the user based upon various request types, you can create the decision table as shown in the screenshot below:

Mapping BRF+ Application for User Defaults 

User also needs to map the BRF+ Application for user defaults under the IMG configuration shown below:

Goto IMG->Governance, Risk and Compliance->Access Control->Maintain AC Applications and BRFplus Function Mapping

Insert a new entry with the values mentioned in the Table shown below. You need to enter the BRF+ Function ID that you have used in the BRF+ for User Defaults.

A reference screenshot showing the settings is shown below:

Maintaining User Defaults based upon User Default ID

Now, you need to set the various User Defaults and Parameters that would be assigned based upon the User Default IDs returned by the BRF+ Application as described above. To set these user defaults and parameters Goto IMG->Governance, Risk and Compliance->Access Control->User Provisioning->Maintain User Defaults. The Screen there looks as shown in the screenshot below:

Here, you can set various User Defaults like Start Menu, Time Zone, Decimal No, Logon Language, Date Format, etc. as per the requirement. A new entry can be created for a User Default ID if it does not exist already. A reference screenshot has been shown below for this:

You can also assign User Group based upon this User Default D by clicking over the "Set the User Group' link in the left panel as shown in the screenshot below:

Finally, if you want to assign values for certain Parameters for this User Default ID, click on the 'Set Parameter ID' on the left panel and set the Parameters as shown in the reference screenshot below:

Once all these settings are made properly, the User Defaults would be assigned to the User when the Access Request would be provisioned. Please note that the User Defaults cannot be seen during the creation of Access Request. They would be assigned at run time when the request would be provisioned.

Related Content

Related Documents

 Related Notes