Confidentiality and Security Management Flashcards
User hierarchy is enabled for which 2 tables?
grc issues and grc tasks
Which 3 properties need to be activated for user hierarchy?
sn_grc.enable_user_hierarchy_access_control, sn_grc.user_hierarchy_sync_frequency, and sn_grc.batch_size_to_sync_user_hierarchy
What are the 2 supporting tables for user hierarchy?
sn_grc_user_hierarchy and sn_grc_user_hierarchy_configuration
What are the steps to enable user hierarchy?
Policy and Compliance>Administration>GRC Properties and select enable user hierarchy access control, go to user hierarchy configuration module and create a record for every table you want user hierarchy applied to
What business rule runs when a record is inserted or updated on the issue table with user hierarchy enabled?
Set issue usr hrchy status & raise event
In order to view a confidential record you must be named in ______ or ________
allowed users or allowed groups
which roles are required to view a confidential record?
sn_grc.confidential_user or sn_grc.user
How does auto-population of allowed users on a confidential record work?
the user that sets the confidentiality flag is added to allowed users, additional users are added depending on the table
Where is auto-population of allowed users and allowed groups fields defined?
GRC Administration>Confidentiality Configuration
Which role is for users who are not GRC users but who want to access GRC confidential records?
sn_grc.confidential_user
Which property enables confidentiality and can’t be turned off once enabled?
sn_grc.enable_record_confidentiality
What do you identify on the confidential record configuration?
fields used in confidentiality and default allowed users and allowed groups
True or False: inheriting tables inherit confidentiality
true