SOD evaluation for an enterprise role

[Community_User]

Originally posted on May 26 2021 at 11:34 UTC

Hi,

We have a requirement where we need to evaluate SOD while requesting enterprise role. For example, let's say our requirement is that entitlement A & entitlement B have a SOD conflict. Also, entitlement A is part of an enterprise role ER.

Now the use case is, if a user already has access to entitlement B and is trying to request role ER, then Saviynt should identity that it is a SOD violation.

We have enabled all the possible configurations in global config, however, we do not see that working for in our environment. We are using v6.0_2020 of SSM.

Additionally, SOD evaluation is working while requesting entitlement A & entitlement B.

Please let us know, if I am missing anything.

Thanks,

Pavani Bharadwaj A

[Community_User]

Originally posted on May 26 2021 at 15:39 UTC

Hi Pavani,

Not yet familiar with v2020 behaviour, but while raising a request, have you made sure the SAV Role of the end user has the below option enabled ?

Hope this helps.

[Community_User]

Originally posted on May 26 2021 at 15:45 UTC

Hi Adrien,

Thanks for the update. We have enabled that option along with couple of more options, part of our configuration.

Thanks,

Pavani Bharadwaj A

[Community_User · Accepted solution]

Originally posted on June 11 2021 at 15:01 UTC

This has been identified as a bug. SOD evaluation is being done for enterprise role, but the UI is not reflecting the same,

[Community_User]

Originally posted on December 1 2021 at 06:21 UTC

Hi,

Is this bug fixed? Even we have similar requirement.

Thanks

Devang