GRC Business User Role - v 12.x - new updates you want to know about

[Jan Spurlin]

A couple of months ago @Rafael Cardoso posted a very good article on this role - but things have changed.  I will put a link to his article at the end of this article.

The intent and purpose has not changed, however what happens during an upgrade has changed. And it depends on what version you are installing:

• 11.x version of the GRC:Profiles application adds the GRC: Business User to all users in the sys_user table.  

• 12.x version of the GRC:Profiles application modified this logic to only apply the GRC: Business User to users that have previously performed a GRC operation in the past 90 days.

While this is the current list of operations available to the GRC Business user, that could change in the future. Watch the release notes!

If you do not want this role applied, then the KB article referenced below suggests that you CREATE a property called skipBusinessUserUpdate and set the value to true prior to upgrade.

If you skip the GRC Business User group population - both the group and the role will still be created.  The group will be empty after upgrade and the role not assigned to any users.  You can still manually add any users to the GRC Business User group at any time to give them the GRC Business User role.

What this also means is that after upgrade, you need to have a process to add this role to users that need it.

Link to Rafael's article:

https://community.servicenow.com/community?id=community_article&sys_id=5717db091bf668101e579979b04bcb72

Link to the full KB article in HI/Now Support:

https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB0864247

Jan