Request for clarification on Permission level configuration RAR 5.3

[Former Member]

Hi,

We are configuring the SoD rules at permission level. We need a small clarification on the boolean operations AND & OR at permission levels.

When we are enabling the Authorization objects which logic we need to follow:

For ex:

V.07 - Periodic Billing has the following auth objects

V_KONH_VKS - Condition: Authorization for condition types with values as below

Field Value from Value to Condition Status

ACTVT 01 OR/AND Enable/Disable

ACTVT 02 OR/AND Enable/Disable

ACTVT 03 OR/AND Enable/Disable

If we gave OR logic then does it means NO Conflicts between 01, 02 & 03 or Is it if a user having access to any values should be thrown as conflicts

If we gave AND logic between all the values and enable it then Does it mean a user having access to all the values i.e.01,02 & 03 only will be thrown conflicts or Users having any value will be thrown conflicts.

What exacly we need to give if we want to have only Users having access to 01 & 02 both should be thrown as conflicting users. Users having only either 01 or 02 should not be thrown as conflicting users.

Please clarify

Thanks and Best Regards,

Srihari.K

[Former Member]

Hi Sri,

In your case, use the following:

ACTVT 01 AND Enable

ACTVT 02 AND Enable

ACTVT 03 OR Disable

AND means user should contain both the values. OR means use can contain either values for the conflict.

Regards,

Alpesh