IRM License

[Shaik22]

Hi,

i have few queries related to IRM enterprise license and IRM Lite Operator license.

1.what is meant by IRM Enterprise license.

2.Which roles are comes under IRM Enterprise license.

3. what is meant by IRM Lite Operator license.

4.Which roles are comes under IRM Lite Operator license.

5. In our organization, all users currently have the IRM Enterprise license, which is resulting in over-usage. We have decided to transition from the IRM Enterprise license to the IRM Lite Operator license. Is it possible to move? and how we have to do?

6.Is it possible to transition from the IRM Enterprise license to the IRM Lite Operator license while still allowing users to perform the same tasks they did previously? For example, if a user with the GRC Business User role (associated with the IRM Enterprise license) currently accesses and submits a catalog item, will they still have access to that catalog item if the Enterprise license is removed and replaced with the Lite Operator license?

I searched in community but i didn't get exact answers. Please answer my questions it would be very helpful. 

Thanks!

[carlosgaspa]

Hi Shaik,

I too am having similar issues trying to understand SN IRM / GRC subscriptions. My company has purchased a number of GRC Operator (full) subscriptions and some GRC Lite Operator subscriptions. However here is where the confusion begins...

ServiceNow does not have a simple way to limit the number of GRC users to the number of subscriptions purchased! There is a calculation in the backend that is not clear. It is not as simple as associating one user to one subscription. Or as simple as creating a GRC groups and assigning users to those groups (which is what we have done/ attempted). As a result we are finding it almost impossible to contain the number of GRC users to subscriptions purchased.

But to answer your question:

1. A full operator subscription can be granted any role within GRC .

2. A lite operator has a limited subset of the GRC roles. But if you exceed this subset it is counted as a full operator.

When you install the Lite Operator plugin a role called GRC Lite User (or similar) is created which is given all the available roles for a lite operator. See list below. Any GRC roles other than these will result in that role (and associated users) being counted as full Operator.

Available GRC Lite Operator roles:

sn_audit.external_auditor
sn_compliance.reader
sn_grc.confidential_user
sn_grc.reader
sn_grc.user_hierarchy_reader
sn_grc_pa.sn_grc_pa_viewer
sn_grc_workspace.task_reader
sn_risk.reader
sn_risk_advanced.ara_approver
sn_risk_advanced.ara_reader
sn_risk_advanced.qualitative_risk_appetite
sn_risk_advanced.quantitative_risk_appetite
canvas_user