Roles required to view action tasks and smart assessments in GRC DRIR application

[siparimi]

I have created an approver group for GRC Digital Resilience Incident Reporting (DRIR) application with roles of "sn_dri_inc_rptg.digital_resilience_incident_user" and "sn_oper_res.user".  

The approvers need to have Read only access to the DRIR case, Action tasks and the related smart assessments. I found that these roles are parent roles for the roles required for action task and smart assessments.

Inspite of adding these roles, the approver users are only able to access the DRIR case but are NOT able to access the related action tasks and smart assessments.

Is any other additional role needs to be added so that users can see all the 3 records, DRIR case, action tasks and smart assessments?

[Hemanth M1]

Hi @siparimi ,

Can you quickly check what read and write access controls restricting them using access analyzer?

Navigation :

[Hemanth M1]

Hi @siparimi ,

Have you tried this and is this answered your query? if so

[siparimi]

Thank you Hemanth.

I checked the ACLs and found the below points.

- A person needs to be a part of the DRIR case as a reviewer, approver, watch list, assignment group to be able to view the action task related to the DRIR case

- A person should be a contributor (added as a user in the assessment persona table) to be able to view the smart assessment.

After, I added the approvers as reviewers of the DRIR case and users on the persona table, the approvers are able to see all the 3 records (DRIR case, action task & smart assessment).

[Hemanth M1]

Hi @siparimi ,

Glad it helped! Please close the thread by accepting this solution or feel free to ask any follow up questions if you have them.