Inconsistency Data between Role Level & User Level Risk Analysis

[Former Member]

Hi,

When we run Role Level Risk Analysis for a role (Ex: XYZ), there is no SOD conflicts. But when we try to run the user level analysis, this role shows SOD conflicts. I mean, XYZ is assigned with other roles. Combination of other roles access may bring SOD conflict, thats fine, but here the challenge is role XYZ itself has SOD conflicts. The same does not appear when we run Role Level Risk Analysis!!

How could this happen??

Thanks,

Karthik

[Former Member]

Hi Karthik,

The role might be mitigated at role level.

In RAR Anayze tool, click -More options to expand the selection options

Chose "Exclude Mitigated Risks: No"

[Former Member]

Hi Vit,

There is no Mitigation Control now in place...