Release 10.0.49.55 (September 2026)

1. Granular license evaluation when duplicating a role

When you duplicate a security role from the Security configuration page, and you choose a lower license type, license compatibility is now evaluated at the leaf level. This includes individual privileges, entry points, and securable objects, not only entire duties.

Previously, all duties associated with a higher license were removed automatically. Now, only the individual objects that are incompatible with the selected license are removed.

• Only objects that are incompatible with the selected license are removed. Compatible objects remain, even in duties that also contain incompatible objects.

• A duty is removed only when none of its objects are compatible with the selected license.

• After you duplicate the role, a summary shows the removed and retained objects.

• An audit log entry is created for every duplicate role operation where a lower license is chosen. The audit log event type is Role copied to lower license.

See also:

• Duplicate security role

• Analyze security configuration history

2. Legal entity assignment for enhanced SoD rules

Organizations that operate across multiple legal entities can have different compliance requirements per entity. Previously, every enhanced SoD rule applied globally. Administrators had no way to scope a rule to only the legal entities where it's relevant.

The Enhanced SoD Rule page now includes a legal entity assignment control.

• A rule can be assigned to all organizations or to specific organizations selected from an organization hierarchy.

• All organizations is the default for new and existing rules. Existing rule behavior doesn't change until you edit the assignment.

• If a rule is assigned to specific organizations, at least one legal entity must be selected before you can save the rule.

• Conflict detection respects the assignment. A conflict is only raised for a user in a legal entity covered by the rule. Users in other legal entities aren't evaluated against that rule.

• The assignment scope is shown on both the Enhanced SoD Rule list page and the rule detail page.

Because roles are assigned to a user without selecting a legal entity, an entity-scoped rule can hide a conflict that only applies in specific legal entities. To surface these conflicts, a new Validate enhanced SoD rules action is added to the User page.

• Use Validate enhanced SoD rules to check a specific user for enhanced SoD conflicts across all legal entities the user has access to. The check respects each rule's organization assignment.

See also:

• Set up segregation of duties rules (enhanced)

• Validate enhanced segregation of duties conflicts for a user across legal entities

3. STAEDEAN Common Library