Thanks Matt.
With regard to (2), did you go about using the Approval mechanism which was available prior to SP4 when using the GRC Framework ?
Also, wanted to hear from you how you managed the GRC_MANAGER_ID in your implementation ?
Cheers,
Murali