You can set up rules to separate tasks that must be performed by different users. This concept is named segregation of duties. Use Verify compliance of user-roles assignments to verify whether user role assignments comply with new rules for segregation of duties. So, it verifies inter-role compliance and user-level validations.
A notification displays the results of the validation. When the definition of a security role or the role assignments of a user violate the rules, the conflict is logged. The security administrator must resolve all conflicts. Complete the following procedure to identify conflicts.
Steps
Click Security management.
Sub-task: Verify compliance of user-role assignments in batch.
Click Verify compliance of user-role assignments.
Expand the Run in the background section.
Select Yes in the Batch processing field.
Note
If required, define other batch processing settings.
Click Recurrence and set up the recurrence pattern for the batch job.
Click OK.
Click OK.
Note
Check the displayed messages.
Sub-task: Verify compliance of user-role assignments for a specific segregation of duties rule.
Click the Segregation rules tab.
In the list, find and select the segregation of duties rule to be verified.
Click Verify compliance of user-role assignments.
Note
Check the displayed messages.