Use Case:
How are the Criticality and Risk parameters used for calculating Risky Entitlements/Roles as part of Basic Insights Feature in Request Approval Screen
Application Version:
2020.x and above
Solution:
Entitlement_Values and Roles have an option to define Risk, SOX criticality and System Criticality with values as very low, low, medium, high and very high.
Path for defining Risk, SOX Criticality, System Criticality at Entitlement_value and Role Level
Admin --> Identity Repository --> Roles/Entitlement_value --> Select a particular Role/Entitlement_value --> Risk, SOX Criticality, System Criticality
Based on the Thresholds (very low, low, medium, high and very high) defined in Admin --> Global Configurations --> Request --> Settings for parameters Risk and Criticality, if the Risk and criticality at entitlement are => then the threshold levels set up in Global Configurations an entitlement will be counted towards being a risky entitlement.
E.g. if Medium is selected in the Global Config for Risk, then all the items in the request (Roles or Entitlements), which have a Risk of Medium, High and Very High should contribute towards the count of Risky items
Further drilling down the Criticality parameter, it is a combination of SOX Criticality and System Criticality, i.e. if the minimum level for criticality in Global config is set to High and the SOX criticality for the item is Medium but the System criticality is Very High then also the entitlement will be considered as Critical and included in critical count since the System Criticality is above the minimum set in the config.
Screenshot of Global Config Setting
Screenshot of Basic Insight/ Risky Entitlement in Request Approval Screen
