Sav Role with minimum SOD feature

[ssharma0-7]

Hi All,
We have client requirement where we need minimum features of a SAV role that allows user to take action on any SOD Violation from SOD workbench irrespective of risk owner(like admin but just for risk).

Let us know how to achieve this .

Thanks,

[Dhruv_S]

Please confirm if the below features are required for the sav role. 

To move risks from Open to In Process, Risk Accepted or Closed from SOD violations?

Please specify all the required features.

[ssharma0-7]

HI  
Our requirement is we want to remediate risk ,  work on risk part like an admin.
can close anyone risk..etc

Thanks

Shivam 

[rushikeshvartak]

Add below features

SOD Workbench

View Mitigating Controls

[ssharma0-7]

HI @rushikeshvartak 
I have tried this option but it still nit working 
thanks,
shivam 

[rushikeshvartak]

share current features and what menu u see vs what is missing

[ssharma0-7]

Hi @rushikeshvartak 

PFA list of feature added in SAV_Role- ROLE_ADMIN_RISK_MITIGATION_CONTROL

Menu user is able to see with this role:

Missing option:- We want the user with this sav role can remediate the risk take action on SOD violation, We want user to have admin like access  in SOD with this role.

Note: user will have End user role and this role sav role  along with Admin read-only role with No SOD access  

[ssharma907]

Hi @rushikeshvartak 
Can you please provide any update on this.

[Dhruv_S]

Hi @ssharma0-7 , please remove the feature access which start with Read only in SOD and mitigating controls. Also please do the same for all of the sav roles assigned to user if there are multiple sav roles assigned to user. Then please logout and login again. Go to SOD workbench and see if you can see the options like "open", "In-progress", "Risk accepted", "closed", "Remediated" and "Move to" as in the below screenshot.

Regards,
Dhruv Sharma
If this reply answered your question, please accept it as Solution to help others who may have a similar problem.

[Abhay_Yadav]

@Dhruv_S Is there any sav feature that allows admin to see all the SOD violations and take action on them. We have only one sav role assigned to the user in v23.7 but admin is not able to see any SOD violation which is not assigned to admin.

Can you please help in identifying the features required for taking action on All SOD violations present in Saviynt.

PFA the feature list sheet of the SAV role that we have for admin. It does not have any readonly feature for SOD or mitigating control.

[Dhruv_S]

Hi @Abhay_Yadav 

Below features access are needed which are already there in your SAV Role attached list.

SOD Workbench

View Mitigating Controls

Have you run the SOD Evaluation job? Are there SODs present for any of the access? 

Regards,

Dhruv Sharma

[rushikeshvartak]

---

@Abhay_Yadav wrote:

@Dhruv_S Is there any sav feature that allows admin to see all the SOD violations and take action on them. We have only one sav role assigned to the user in v23.7 but admin is not able to see any SOD violation which is not assigned to admin.

Can you please help in identifying the features required for taking action on All SOD violations present in Saviynt.

PFA the feature list sheet of the SAV role that we have for admin. It does not have any readonly feature for SOD or mitigating control.

does logged in user is owner of any risk ?

you need to owner of risk to see sod violation if you don’t have role admin sav role

[Abhay_Yadav]

Hi @rushikeshvartak @Dhruv_S 

If we are able to take action on all SOD violation using ADMIN role there should be a way to achieve it using a custom SAV role also right. Is this functionality not based on features.

If ability to take action on all SOD is based on any features then can you please help in identifying them.

does logged in user is owner of any risk ? -- no user is not the owner any risk and no open risk is assigned to him. But the requirement is to create a BAU SAV role that allows admins to take action on all SOD violations on daily basis.

[Dhruv_S]

Hi @Abhay_Yadav 

SAV Role features provide users access to SOD Workbench, but users can see the SOD violations and act on them they are added as Risk owner or have the ROLE_ADMIN. 

Regards,
Dhruv Sharma
If the response is helpful, please click Accept as Solution and kudos it.

[rushikeshvartak]

Add User Group as Risk owner