Reviewing SoD Violations

Owned by Universal Importer for Confluence
Last updated: Nov 21, 2018 by Kim Landis (Unlicensed)

When a Separation of Duties policy is compiled, EmpowerID creates a review task for each policy violation it finds based on the rules applied to the policy.

For example, you can have a SoD policy with a rule that specifies that a violation should occur when any one person is assigned to both Management Role "A" and Management Role "B" at the same time. When the SoD engine runs, it checks to see if any one person belongs to both of those roles. If the engine finds people with both roles, it creates an SoD review task for each violation (one per person). These tasks can then be reviewed and remediated by anyone assigned to all of the following Access Levels:

  • The Reviewer Access Level for the people violating the policy
  • The Reviewer Access Level for the Separation of Duties policy
  • The Viewer Access Level for the page Auditor SoD Violations Open page of the Auditor Compliance Dashboard (if appropriate) and/or
  • The Viewer Access Level for the page User Tasks and Requests - SoD - Open Violations page of the User Compliance Dashboard (if appropriate)


To review Separation of Duties violations


If the violation occurs as a result of IT Shop requests, the violation is reported through the Workflow Tasks To Do list rather than SoD Violations. See below for details.

  1. Log in to the EmpowerID Web application asa person with all of the above mentioned Access Levels.

  2. In the navigation sidebar, expand Compliance Management (or Tasks and Requests), then SoD Violations, and click To Do. 

  3. On the Open Violations page, search for the SoD Policy with violations to review and click the link for the violation in the SoD Violations grid.




    This directs you to the View page for this violation. This page lets you view details of the violation, including the assignment combinations comprising it. It also displays a set of decisions to submit to remediate the violation.



  4. From the Separation of Duties page, click the Submit Decision link beside the decision that reflects the remediation taken. These decisions include the following:
    • Acknowledged - The SoD Violation has been noted, but no corrective action has been taken by the reviewer.
    • Corrected - The SoD violation has been corrected.
    • Permitted - The SoD violation is unresolved but allowed.
    • Policy Changed - The SoD Policy has been changed to allow any exceptions to a previous version of the policy.

  5. Enter comments for the resolution and click OK.

    The SoD Policy Violation Details page updates to show the decision.

To review SoD violations resulting from IT Shop requests

  1. In the navigation sidebar, expand Tasks and Requests, then Workflow Tasks, and select Tasks To Do.
  2. Search for "SoD" and then click the arrow to the left of the SoD violation task.



  3. Click View Approval Form.



  4. On the SoD Violation Approval form that appears, in the Management Roles Requested section, select the check box next to any management role requests you want to approve, and leave the check box cleared for any management role requests you do not want to approve, and click Submit.


In this article