18.3 SoD Reports

Two reports describe the current state of separation of duties:

18.3.1 SoD Constraint Report

The SoD Constraint Report shows:

  • Currently defined separation of duties constraints by name

  • The description of the separation of duties

  • The list of the conflicting roles

  • The list of people with permission to approve an exception to a violation of separation of duties

To create and view the SoD Constraint Report:

  1. Open the User Application and choose Roles > SoD Reports.

  2. Choose SoD Constraint Report in the Select a Report drop-down menu and click Select. The Role Reports page prompts you to select the parameters to include in the report.

  3. Choose to list all SoD Constraints, or select one SoD Constraint. If you choose Select an SoD Constraint, the selection box activates. See the description of selection box icons at Step 4.

  4. Choose to list all roles or select a role. If you choose Select a Role, the selection box activates. See the description of selection box icons at Step 4.

  5. Click Run Report to create and view a PDF report similar to the one in Figure 18-3.

    Figure 18-3 Sample SoD Constraint Report

  6. To save the report, choose File > Save A Copy in the Adobe Reader window. Specify a directory to save the file in and specify a filename for the report.

18.3.2 SoD Violations and Exceptions Report

The SoD Violations and Exceptions Report shows:

  • The name of each separation of duties constraint, its description, and the conflicting roles

  • The users in violation of the constraint, including both approved exceptions and unapproved violations. Users can be in violation by being members of a group or container that grants them a conflicting role.

  • Approved exceptions. These are violations that have been approved as exceptions to the separation of duties.

  • The names of those who approved or denied the exceptions and the date and time of the approval or denial.

To create and view the SoD Violations and Exceptions Report:

  1. Open the User Application and choose Roles > SoD Reports.

  2. Choose SoD Violations and Exceptions Report in the Select a Report drop-down menu and click Select. The Role Reports page prompts you to select the parameters to include in the report.

  3. Choose All SoD Constraints to show any violations and exceptions outstanding across all SoD constraints. Or, choose Select an SoD Constraint to focus the report on violations of a single SoD constraint.

  4. Click Run Report to create and view a PDF report similar to the sample shown below.

  5. To save the report, choose File > Save A Copy in the Adobe Reader window. Specify a directory to save the file in and specify a filename for the report.