External Auditor unable to access Audit Workspace

[Dipin1]

Hi Community Team,

I have a query on the External Auditor [sn_audit.external_auditor] role trying to access Audit Workspace.
OOTB the role on Audit Workspace access is sn_audit_ws.auditor and this role contains sn_audit.user as an inherited role, so clearly we can't assign this role to the External auditor user/group.

Even if we add the extra role to the Audit workspace module to give access to sn_audit.external_auditor role. When we log in as an external auditor then can see the module but as soon as they click on it they get the error message as per the screenshot.

So, does OOTB it should not allow External Auditors to access the Audit workspace? What can be the reasoning behind it?

If yes, do we expect all audit roles (except external auditor) to use Audit workspace and external Auditor to use UI16?

[Community Alums]

Hi @Dipin1 ,

As you mentioned , In terms of Audit Workspace is conserned, "sn_audit_ws.auditor" role should be given to even to External Auditor to have the visibility through Workspace, even though this role contains sn_audit.user as an inherited role.

Reason behind is , a large part of an audit angagement is gathering evidence. Many organization will start collection efforts weeks before an audit begins and may assign a promary contact to liaison with external auditors to provide necessary collateral, for the duration of audit. to alleviate this administrative strain, many companies with a high level of GRC maturity choose to grant external auditors direct access into audit amangement application. This enables auditors to gather evidence already in the GRC suite in support of their audit efforts. to include all historical activities and evidence gathering results.

[Community Alums]

Hi @Dipin1 ,

[Maik Skoddow]

Hi @Dipin1 

try the following ACL and in that ACL the respective role sn_audit.external_auditor

Maik