We have GRC 10.0 running, and it currently has three stages for provisioning access requests:
1. Risk Analysis
2. Manager Approval
3. Role Owner Approval
The problem with the Stage #3 is that it could take several days before a user can have access to SAP before ALL role owners to complete their approval/rejection. The approval notification is sent to all role owners simultaneously, but some approvers are quicker to complete their approval request than others. By default, the actual provisioning won't take place until the final approval Stage #3 completes -- meaning all Role Owners have to approve or reject in order for the Stage #3 to complete and the provisioning workflow kicks in.
Is it possible to setup GRC 10 to provision approved access roles as soon as each relevant Role Owner approves at the Stage #3 above?
Basically, the auto-provisioning process would have to be triggered in parallel at the Stage #3 so that those approved access roles can be provisioned as soon as each Role owner approves. This means the auto-provisioning would have to be triggered before the Stage #3 completes as a whole.
This would allow the user can start using the approved access as soon as one of the Role Owners approves.