Reprovisioning Business Roles

Use

You can use this feature to reprovision business roles to users when the technical roles assigned to the business roles have changed.

The application allows you to assign multiple technical roles to a logical role called a business role. This allows you to provision the authorizations from multiple technical roles to a user in one step by provisioning the single business role. This feature allows you to reprovision the business roles to users if the technical role assignments changed after you initially provisioned the roles.

Prerequisites

You have enabled the Provisioning phase for the role methodology.

You maintain the phase in the Customizing activity, Define Methodology and Steps, under Start of the navigation path Governance, Risk and Compliance Next navigation step Access Control Role Management End of the navigation path .

Process

Choose Access Management Role Management Role MaintenanceThe Business Role Management screen appears.
Select a business role and choose Open.

The business role maintenance screen appears.
Note

The workflow graphic at the top of the screen displays the Provisioning phase only if both these requirements are met:
- You are maintaining a business role.
- You have enabled the Provisioning phase in Customizing.
In the Definition phase, change the assignment of the technical roles to the business role as needed and then choose Save and Continue.

Complete the phases of the workflow as required, such as Analyzing Risks, to get to the Provisioning phase.

The Provisioning tab page is displayed only if you have completed the conditions above.

It has the following sub-tabs and functions:

Tab	Functions
Provisioning	Choose the Update Assignment button and the application performs a background job to reprovision the business role to the associated users. The application performs the background job immediately, but depending on your system setup, it may take some time. Note The Update Assignment button is enabled only if the business role has been assigned via the access request process. The table displays the relevant background jobs and its status. Choose the Refresh button to refresh the status. When the Result column displays Complete, the background has finished reprovisioning the business role.
Summary by User	This tab displays the results of the reprovisioning background job by user. This allows you know which users were affected by this reprovisioning. The Result column displays whether the reprovisioning was Successful or Failed.
Details	This tab displays the details of the reprovisioning job. It lists the following information: Job ID User Associated Role System Valid From Valid To Action Whether the job added or deleted the role. Result Reason For example, the reason why reprovisioning failed. Provisioned On Time and date the application provisioned the roles. Initiated On Time and date the background was started. Initiated By The person who initiated the provisioning job.

Tab

Functions

Provisioning

Choose the Update Assignment button and the application performs a background job to reprovision the business role to the associated users. The application performs the background job immediately, but depending on your system setup, it may take some time.

The table displays the relevant background jobs and its status.

Choose the Refresh button to refresh the status. When the Result column displays Complete, the background has finished reprovisioning the business role.

Summary by User

This tab displays the results of the reprovisioning background job by user. This allows you know which users were affected by this reprovisioning. The Result column displays whether the reprovisioning was Successful or Failed.

Details

This tab displays the details of the reprovisioning job. It lists the following information:

Job ID
User
Associated Role
System
Valid From
Valid To
Action

Whether the job added or deleted the role.
Result
Reason

For example, the reason why reprovisioning failed.
Provisioned On

Time and date the application provisioned the roles.
Initiated On

Time and date the background was started.
Initiated By

The person who initiated the provisioning job.

Choose Save and Continue, and then complete any remaining phases in the workflow as needed.

More Information

Defining Roles

Role Maintenance