RiskSODEvaluationJob should evaluate only the active users

[vermark]

Hi Team,

After running the RiskSODEvaluationJob we are seeing that the risk is evaluated for both active and inactive users. We want this job should evaluate only active users. Please suggest.

Thanks

[nimitdave]

You can leverage the User Account Evaluation Criteria config in the job config to fetch accounts of active users only.

[dgandhi]

Hi @vermark @nimitdave 

Why we would we limit just to active users?

If there are any Inactive users having active accounts with conflicting access then it should be detected in the SOD scan and violation owner should be able to remediate the violation.

If we limit just to active users , then how the system will detect conflicting access of inactive users with active accounts?

Thanks

[vermark]

Hi Nimit/Devang,

Thanks for the reply. I was looking to filter active accounts which I was able to achieve using User Account Evaluation Criteria as mentioned by you.

[nimitdave]

Fine @vermark , But as mentioned by @dgandhi , you have to consider inactive accounts as the conflicts in those are more serious and should be addressed immediately.