Versions Compared

Old Version 3

changes.mady.by.user Kim Landis

Saved on

compared with

New Version 4

changes.mady.by.user Phillip Hanegan

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.


Home / Identity Governance / Separation of Duties / Current: Compiling Separation of Duties Policies
Divstyle
classbreadcrumbs
importhttps://docs.empowerid.com/docs.css
In order to create SoD violation tasks for reviewers to review, Separation of Duties (SoD) policies must be compiled. When a SoD policy compiles, EmpowerID creates a SoD review task for each person in a combination of groups or roles forbidden by the policy. For example, if you have a SoD policy with a rule set that specifies a violation should occur whenever any one person is assigned to both Management Role "A" and Management Role "B," when the policy runs it checks to see if any one person has both assignments, creating SoD review tasks if so.
There are two ways to compile SoD policies in EmpowerID. You can enable theSeparation of Duties Policy Compiler job in the EmpowerID Management Console to have EmpowerID automatically compile your policies as scheduled, or you can manually compile each SoD policy from the EmpowerID Web application.
This topic demonstrates how to compile a Separation of Duties policy both ways.
To 
 enable automated compilation of Separation of Duties policies
  • Log in to the EmpowerID Management Console as an administrator.
  • From the EmpowerID Management Console, click the EmpowerID application icon and select Configuration Manager from the context menu.
    • In Configuration Manager, click the EmpowerID Servers and Roles tree node and check the box to the right of the Separation of Duties Policy Compiler job on at least one EmpowerID server.
    Image RemovedTo manually 
     compile a Separation of Duties Policy
    Log in to the EmpowerID Web application as an administrator.
    1. In the Navigation Sidebarnavigation sidebar, expand Compliance and Reports, then For Auditors, and click Audit Configuration.
    2. From the Audit Configuration page, click the SoD Policies tab and search for the SoD Policy you want to compile.
    3. From the SoD Policies grid, click the drop-down arrow beside the policy and then click Run SoD Policy.



    4. Click OK to close the Separation of Duties Compilation message.
    ...