Role and Group naming conventions

[Kim Machado]

We are setting up groups and roles for Policy, risk management and vendor risk management.     What is the best prefix to use on the role and group names, GRC or IRM?       What do other clients use?       

[Allen Andreas]

Hi,

It can vary (per preference), but in all my implementations of GRC, etc. we use GRC Admin, GRC Reader, GRC Manager, etc. which then those groups contain the relevant roles, example: sn_compliance.admin would be a role for the GRC Admin group.

Please mark reply as Helpful/Correct, if applicable. Thanks!

[Allen Andreas]

Hi,

I just wanted to check-in on this and see if this has been resolved.

To clarify, my comments above are merely about group naming conventions. We leave the role names alone.

If my reply above helped guide you correctly, please mark as Helpful & Correct.

Thank you!

[Allen Andreas]

Hi @Kim Machado 

If I also helped guide you Correctly, please also mark as Correct.

Thanks and take care! 🙂

[Mehernosh Amrol]

We've used GRC to prefix the group names in most cases, but if a group already exists, we've just applied the roles to the existing group.  We've kept the Roles OOB and didn't modify.