Future dated S.O.D Analysis

[Former Member]

Hello All,

For our next go-live we have provisioned all users in the production system with the validity date starting 10/01/2014. We did this so new users wouldn't be able to get into system prior to that date. Simple enough.

Now, we would like to run S.O.D analysis against those users but can't because technically they do not have the access in the system yet. Is there a way to run S.O.D analysis against future dated users?

Regards,

[Colleen · Accepted solution]

Hi Kyle

Have you tried a simulation instead of a risk analysis? Technically, there is no violations as it's future dated so simulation sounds like a closer option. Not sure if this is a possible option to mass simulate your scenario.

Regards

Colleen

[Former Member · Accepted solution]

Hi Colleen!

Yeah we thought of that but like you said, its a mass scenario and wouldn't really work with 1,600 users getting various types of access.

Thanks

[Colleen · Accepted solution]

If you were to look at the 1600 users and simulate the imparting role instead of the derived roles, how many different combinations of access would you have?

You might find there are 20 different access combinations and can simulate them. That will show you which combination has violations? I'm assuming the users do not have other access in Production already active.

If these are new users, you can lock their account but change the validity to today's date. You can then run risk analysis and they cannot login. Only works if new user.

Regards

Colleen