mitigating control

[NM]

Hi Team,

We created a ruleset assigned risk and also created 2 functions and assigned it to the risk.

now we created a mitigating control for the same ruleset and added a recommendation association for the risk. while approving the request, approver saw an option to mitigate the control chose the same and requested submitted but what we see even though time has crossed no remove access task were created automatically for those entitlement

Is there a job that we have to trigger for the task?

[rushikeshvartak]

If your ask is entitlement not removed and those were time bound then schedule 

Create Tasks for Future Ent Role Requests (EnterpriseRoleManagementJob) 

To remove expired MC from Risk  use below job

Expire Old Requests, Mitigating Controls, Simulations, Discontinue Expired Invites (RefreshJob) 

[NM]

Hi @rushikeshvartak , not time-bound

Assigned association has moved to inactive but it didn't create a task to remove the entitlement as we just mitigate the access for a day

[rushikeshvartak]

It won't automatically create task unless action taken from Sod Workbench - Detective sod

[NM]

Hi @rushikeshvartak , Talking about this..

I need to remove the entitlement which were mitigated by owner for a short period.

[rushikeshvartak]

It won’t be removed manually

[NM]

@rushikeshvartak okay so if end date has reached for the 2 entitlements which were mitigated and assigned association shows inactive.. what is the way we can remove the entitlement from user profile .. main thing is automated way?

[rushikeshvartak]

You can use actionable report as workaround

[NM]

@rushikeshvartak , but is this an expected behaviour?

[NM]

@rushikeshvartak , Can you also share a sample query?

[shivmano]

@NM , were you able to figure this out? I am having a similar issue where the entitlements that were mitigated during approval is not removed after the end date is passed 

Please can you let me know what was done in you case? 

Thank you 

[NM]

Hi @shivmano , no we didn't we t ahead with mitigation approach but as per my research it will be be removed automatically.. SOD job is the only way or workaround.

[rushikeshvartak]

You need to schedule mitigation expire job