SOD on Enterprise roles

[DiwakarKPatil]

Hi 

We need to build SOD violation on request of Enterprise roles.

However the rule/function would be based on actual role assigned to the identity rather than the entitlements given as part of the roles.

Is this feasible in Saviynt, as I do not see any option of choosing roles while creating functions.

Regards,
Diwakar Patil

[rushikeshvartak]

You can have sod only at entitlement level. Please raise idea ticket for enhancement to implement sod at role level

[DiwakarKPatil]

Hi Rushikesh ,

Thanks for reply ,

Ok , SOD is not possible on role level,

is there any work around on this requirement?

Regards

Diwakar Patil

[sai_sp · Accepted solution]

@DiwakarKPatil No, there is no workaround for this feature as Saviynt's SOD engine is based on the entitlements assigned to the account. Role is just a grouping of these entitlements and we do not support SOD evaluation at the role level as of today.

[DiwakarKPatil]

Thanks Sai for clarification. 

[dgandhi]

This is not an issue. SOD evaluation happens at the entitlement level.

Thanks