read access to sn_grc_profile not granted

Mukesh Bhati
Giga Contributor

Hello Experts,

I'm learning how a scripted Indicator works. But facing the issue, help me to figure out.      

Error : com.glide.script.fencing.access.ScopeAccessNotGrantedException: read access to sn_grc_profile not granted

Log

find_real_file.png

 

Script include.find_real_file.png

indicator template

find_real_file.png

 

Thanks In Advance!

Regards,

Mukesh

1 ACCEPTED SOLUTION

Community Alums
Not applicable

Hi Mukesh,

The indicators run under the GRC: Profile scope. Can you please recreate your script include and indicator template under that scope? Never create any GRC related record under Global scope unless required. It's all about cross privilege permissions and GRC data model. Probably to help you out, I would create a kind of IndicatorUtils under the scope GRC:Profile (and all my script goes there) and the Indicator Template under GRC:Profile because this can be shared between Risk, P&C and Audit.

As alternative, you could always give permissions to scope Global to have read access to the scope GRC:Profile but I don't see it as beneficial at the point we stand. 

Many thanks
Raf

View solution in original post

3 REPLIES 3

Community Alums
Not applicable

Hi Mukesh,

The indicators run under the GRC: Profile scope. Can you please recreate your script include and indicator template under that scope? Never create any GRC related record under Global scope unless required. It's all about cross privilege permissions and GRC data model. Probably to help you out, I would create a kind of IndicatorUtils under the scope GRC:Profile (and all my script goes there) and the Indicator Template under GRC:Profile because this can be shared between Risk, P&C and Audit.

As alternative, you could always give permissions to scope Global to have read access to the scope GRC:Profile but I don't see it as beneficial at the point we stand. 

Many thanks
Raf

Phil Swann
Tera Guru
Tera Guru

Also, please follow standard naming conventions for Script Includes.... e.g. TitleCase , no spaces, underscores

 

Do not call it:

indicator_template_for_control 

 

call it:

ControlIndicatorTemplate, IndicatorTemplateControl 

(check other script includes in the system)

or if you really want it reusable IndicatorTemplate and it would also be applicable to Risk etc

Hello Phil,

 

Thanks for Advice!

I will follow the Naming conventions

 

Regards,

Mukesh