SOD Detective and preventative control configuration

[Shubhamjain27]

Hi,

We have SAP applications for which we want to enable the detective and preventative SOD.

For preventative below are the configurations needed:

1. Ruleset set to default

2. Savrole update - Show sod on request

For detective:

1. Create SOD evaluation job and add account criteria.

Is there any other configuration required for the same?

Also for SOD simulation, do we need to configure anything?

[Raghu · Accepted solution]

@Shubhamjain27  need to add in externalconfig.properties file  in

sod.endpoints=XXX(endpointname)

[Shubhamjain27]

For detective job:

If i want to run SOD for 4 endpoints, do I have to 4 detective jobs specific to each endpoint?

And if we are using ruleset, do we need to add system as well?

[rushikeshvartak]

You can create one job and add all SoD rulesets

[Shubhamjain27]

If we add all the rulesets, do we not need to add the systemname?

[rushikeshvartak · Accepted solution]

No. It will be blank