Access certification provides the support for process and role owners to collect and manage attestations that users only have the access privileges required to perform their job function. It facilitates faster and accurate access reviews of user privileges by highlighting conflicting permissions in users' access entitlements that have to be revoked or approved under listed exceptions.
CSI tools provides this functionality not only for the roles and role assignments, but also for the access to critical functionality and SoD conflicts. You can define and report (on user id, user group or role level) who should and who should not have access to critical functionality and SoD conflicts using the norm functionality.
Besides this, CSI tools also has the functionality to reaffirmate roles and user - role assignments.
Using this functionality you can collect and manage attestations that users only have the access privileges required to perform their job function.