Identify Segregation of Duties Conflicts

Use this screen to compare a user-defined list of conflicting applications with user and user group rights.

This determines if users have been assigned rights to two applications that conflict with each other. The list of conflicting applications must first be defined on the Manage Application Conflicts screen.

Define whether this process will prevent conflicting rights from being implemented using the Enforce Segregation of Duties Rules check box in Corporate Settings of the Configure System Settings screen. If that check box is selected, this application reviews user and user group rights and checks if there conflicts. If it finds one, it flags the appropriate rights record as in-conflict and unusable unless someone overrides the conflict using the Manage Segregation of Duties Conflict Overrides screen.

If the Enforce Segregation of Duties Rules check box is cleared, the Identify Segregation of Duties Conflicts process still examines user and user group rights for conflicts and produces a report listing conflicts, but it won't disable user and user group rights. It will be up to the appropriate system administrator to correct the conflict by changing user/user group rights.

The process checks both user group and user rights for application conflicts. When checking for rights conflicts for a user group, it compares only the module and application rights for that specific user group. For users, however, it compares the rights of the user with the rights of any user group assigned to them. After reviewing the rights records, this process will update the rights status.

Use this screen whenever you need to identify segregation of duties conflicts. If the Enforce Segregation of Duties Rules check box found in the Corporate Settings block of the System Settings screen is selected, run this process soon after user and/or user group rights are added or changed to allow the user to use the new rights (assuming no conflicts are found).

Note: Always run this process after printing or previewing the report. If the Segregation of Duties information on the report does not look correct, correct the rights set up for the appropriate Users/User Groups and then run the process. If you select the Review Previously Manually Approved Rights check box and also select the Accepted and Conflicting Rights option in the Include on Report field, the report shows the currently manually approved rights. After you run the process with Review Previously Manually Approved Rights check box selected, the current manually approved rights are deleted.