- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-07-2020 11:07 PM
Hello Experts,
I'm learning how a scripted Indicator works. But facing the issue, help me to figure out.
Error : com.glide.script.fencing.access.ScopeAccessNotGrantedException: read access to sn_grc_profile not granted
Log
Script include.
indicator template
Thanks In Advance!
Regards,
Mukesh
Solved! Go to Solution.
- Labels:
-
Policy and Compliance Management
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-07-2020 11:33 PM
Hi Mukesh,
The indicators run under the GRC: Profile scope. Can you please recreate your script include and indicator template under that scope? Never create any GRC related record under Global scope unless required. It's all about cross privilege permissions and GRC data model. Probably to help you out, I would create a kind of IndicatorUtils under the scope GRC:Profile (and all my script goes there) and the Indicator Template under GRC:Profile because this can be shared between Risk, P&C and Audit.
As alternative, you could always give permissions to scope Global to have read access to the scope GRC:Profile but I don't see it as beneficial at the point we stand.
Many thanks
Raf
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-07-2020 11:33 PM
Hi Mukesh,
The indicators run under the GRC: Profile scope. Can you please recreate your script include and indicator template under that scope? Never create any GRC related record under Global scope unless required. It's all about cross privilege permissions and GRC data model. Probably to help you out, I would create a kind of IndicatorUtils under the scope GRC:Profile (and all my script goes there) and the Indicator Template under GRC:Profile because this can be shared between Risk, P&C and Audit.
As alternative, you could always give permissions to scope Global to have read access to the scope GRC:Profile but I don't see it as beneficial at the point we stand.
Many thanks
Raf
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-08-2020 01:33 AM
Also, please follow standard naming conventions for Script Includes.... e.g. TitleCase , no spaces, underscores
Do not call it:
indicator_template_for_control
call it:
ControlIndicatorTemplate, IndicatorTemplateControl
(check other script includes in the system)
or if you really want it reusable IndicatorTemplate and it would also be applicable to Risk etc
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-08-2020 02:07 AM
Hello Phil,
Thanks for Advice!
I will follow the Naming conventions
Regards,
Mukesh