SoD stands for segregation of duties and is intended to define the potential risk of performing a task (=query) or a combination of tasks.
An SoD conflict is defined by a regular expression and for each variable in the expression a query needs to be set.
Setting the queries is done in the queries related data tab, each query needs to be assigned to a variable of the regular expression.
Queries are assigned to different objects in CSI Accelerator (single role, composite role and/or user).
The relation between the object and the query can be loaded manually or automatically.
An SoD run will check if an object applies to the SoD expression.
Example:
The Multi (M3) SoD definition has the expression "Qa AND Qb AND Qc".
A, B and C are the variables where 3 queries must refer to. An object having the 3 queries will have a hit and the potential risk is displayed.
Note: The results of an SoD run cannot be stored in the database, you can however export the results to an excel file.
Note: validation of SoD conflicts is done automatically.
Copy SoD can be found in the SoD > Mass Changes > Copy SoD ... menu.
Copy an SoD header and a selection of its related data.
This document is up to date with version 11.1.12.31 of CSI Accelerator