Is it possible to create a SOD Rule Owner Review where the segregation of duties rule owners certify the entitlement sets configured within in the rules?
its a bit tricky but doable, if you are comfortable with a dummy roles and data collectors.
The idea is that you would treat the SOD rules as Roles. stay with me here...
When the Sod rule sure looked at as roles then their other data like the buckets, description, remediation action, justification sets etc are entitlements.
So you would need
a role set e.g. "SOD Rule Recertification Helper Set"
an application e.g. "SOD Rule Recertification Helper Application"
A RDC that collects the rules as roles, having the rule owners become also the role owners
An EDC that collects various datapoint around the rules as entitlements and associates them with the rules/roles
A Role Review that assigns all of the collected roles/rules to the role/rule owners for recertification. The should see all the meta info etc as role meta-info and/or entitlements
Change requests can be processed! I mean, they are just CRs after all. You would have them require a comment for e.g. revoke state (that you rename "change"). The fulfillment workflow for the roleset is a manual fulfillment that you let your SOD governance team fulfill. run the RDC and EDC just like any other DC and watch the change rule definitions close the change requests! pretty neat.
Hi,
Sure thing. I've done that in the past.
its a bit tricky but doable, if you are comfortable with a dummy roles and data collectors.
The idea is that you would treat the SOD rules as Roles. stay with me here...
When the Sod rule sure looked at as roles then their other data like the buckets, description, remediation action, justification sets etc are entitlements.
So you would need
Done
Frank