SOD Rule Sets

After creating new Duties in the previous chapter, we need to create new Rule-Sets.

Rule-Sets will allow the system to detect conflicts in Segregation of Duties (SOD), and increase our Organization's security and compliance status.

On the SOD Rules tab (marked with an arrow below), click on the Create Rule button (circled below).

on the SOD Rules tab, the Create Rule button is circled

In the Create Rule window, we'll name the new Rule, select the two contradicting Duties from our Duties list, and set a Security level.

the Create Rule page

The Security Level depends on us to decide, and can help us identify which SOD Conflict is more severe or negligible, for when we need to resolve Conflicts.

the Security Level selection is circled

Using the Status toggle button (marked with an arrow below) we can select which rules will be active.

On the next Campaign the system will automatically detect Conflicts based only on active Rules.

on the Rules tab, the Rule Status toggle button is marked with an arrow

When entering a specific Rule, we can edit, delete, and view it's details.

Additionally to finding Conflicts during a Campaign, we can use the Run Rule Check button (marked with an arrow below), to run a specific rule on all Duties and find all existing Conflicts of that Rule.

on a Rule's page, the Run Rule Check button is marked with an arrow

After running the Rule Check, if a Conflict exists, we get a Found Conflicts window, showing all existing Conflicts.

We'll click on the Save To Conflicts List button (marked with an arrow below) to add the conflicts to the Conflicts tab list.

after a Rule Check, the Save To Conflicts List button is marked with an arrow

To return to the Access Management Guide hub, click here.

To return to the main guide hub, click here.