SOD Evaluation for Tcodes using nosap type function

[asharma]

Hi,

Requirement - We want to evaluate the violations/conflicts at the time of access request but we want user to request sap role and saviynt should evaluate on the basis of Tcode. Is this possible? If yes, how?

[sai_sp]

Yes, this can be done. Please set the function type as Non-Sap and set the sod.entitlement.depth in the externalconfig.properties to 2. SOD will be then evaluated at the 2nd level which is the tcode - 1st being the saprole. Define the ruleset accordingly.

[asharma]

we have to upload a ruleset so we cannot change the function type as non sap. It will sap then only we can upload the ruleset with tcodes.

[NM]

Hi @asharma can you share the ruleset?

You want to evaluate the SOD at which level?

[asharma]

I am trying with default available from Saviynt doc with objects as 

FUNCTION

ENDPOINT

TCODE

OBJECTNAME

FIELDNAME

MINVALUE

MAXVALUE

RELATION

STATUS

[NM]

@asharma so is ilit not working ? Showing an error?

[rushikeshvartak]

• Try using simulation feature