GRC risk and assessment is not visibale to non grc admin user from workspace

[YashasM]

The Risk Workspace provides a Task-overview. This overview do not show/list the risk assessments that has been assigned the user. To be able to see their tasks the user must have this role: platform_ml_read. However, this role is granted to the risk.admin role, and not risk.manager or risk.user role. We don't understand why the configuration is like this, it does not make sense that only the risk admin receives their risk assessment in the task overview.Please help us to resolve this

[Vinod54]

Hello @YashasM ,

The platform_ml_read role is a platform-level Machine Learning read role, not a GRC-specific role. It is inherited by sn_risk.admin because admin roles tend to aggregate many platform roles. 

Instread granting platform_ml_read role, Leverage sn_grc.business_user role. 
Business users, risk assessors, and assessment approvers access their tasks through the GRC Tasks page in Employee Center — not the Workspace. This requires the GRC Business User role (sn_grc.business_user). 

sn_risk.user without security risk.

Add the sn_grc.business_user role along with the existing user access levels(manager or user). 

This should work if not then 

Recommended action: Raise a ServiceNow support ticket referencing the specific ACL carrying the platform_ml_read dependency, as this appears to be either a bug or an unintended role inheritance gap. 

If the answer helps, hit the Helpful and Accept As Solution buttons.

Thanks,

Vinod Kumar M