Divstyle | ||
---|---|---|
| ||
| ||
In order to create Separation of Duties (SoD) violation tasks for reviewers to review, Separation of Duties ( SoD ) policies must be compiled. When a SoD policy compiles, EmpowerID creates a SoD review task for each person in a combination of groups or roles forbidden by the policy. For example, if you have a SoD policy with a rule set that specifies that a violation should occur occurs whenever any one person is assigned to both Management Role "A" and Management Role "B," when the policy runs it checks to see if any one person has both assignments, creating SoD review tasks if so.
There are two ways to compile SoD policies in EmpowerID. You can enable theSeparation of Duties Policy Compiler job in the EmpowerID Management Console to have EmpowerID automatically compile your policies as scheduled, or you can manually compile each SoD policy from the EmpowerID Web application.
This topic demonstrates how to compile a Separation of Duties policy both ways.
To enable automated compilation of Separation of Duties policies
.
To
manuallycompile a Separation of Duties Policy
- Log in to the EmpowerID Web application as an administrator.
- In the Navigation Sidebarnavigation sidebar, expand Compliance and Reports, then For Auditors, and Management and click Audit Configuration.
- From On the Audit Configuration page, click the SoD Policies tab and search for the SoD Policy you want to compile.
- From the SoD Policies grid, click the drop-down arrow beside the policy and then click Run SoD Policy.
- Click OK to close the Separation of Duties Compilation message.