Configuring Risk Management for Provisioning Through GRC
This configuration is used where provisioning is configured through GRC. Risk Management performs risk analysis to find whether the requested access has violations on IdentityIQ. When a new access request is raised it goes to the SAP GRC ARA module for risk analysis. If the requested access has any violations, a policy violation message is raised on IdentityIQ before creating the access request ticket. The requester will receive an option to remove risky entitlements, and the approver can also view the violations before approving or denying access.