Auditor Access for Compliance records

[jaikellaila]

Hello,

As part of an internal audit, We would like to give access to auditors only to specific records from controls and indicators. What are the options to avoid giving them access to all GRC records please?

Thank you

[Community Alums]

Hi @jaikellaila ,

We have dedicated role available for the Auditors :

 sn_audit_ws.auditor, sn_audit.user

The following table lists the key tasks that you can perform in your role as an auditor.

Tasks of an auditor

Activity	Task
Examine records, reports, operating practices, and documentation to ensure compliance with internal controls.	Update an assigned control test.
Create test plans to document control testing procedure.	Create a test plan.
Coordinate walkthroughs and interviews for assessing internal control processes.	Update other assigned audit tasks.
Request and review evidence for control implementation.	Request evidence for audit tasks.
Comply with federal, state, and local security legal requirements.	Create an observation for an audit task assigned to an auditor.

Now, if you still want to restrict them, you would certainly have to go down the ACL route . Depending on the length of the audit engagement, perhaps you could shift things around.