Run SoD rules check in process

Hi Lucrezia,

Please provide some more details on your use cases. SoD rule violations are detected by a scheduled process, which creates the PersonInNonCompliance entry exists. Are you saying that you would like to check if the next scheduled process will detect any new violations?

Hello Hanno,

I'll be more precise. I want the process to be triggered when a system role is assigned to an identity, and that assignment violates a SoD rule.The process must delete the group assignment consequent to the system role assignment.

I hope this is clear,

thank you!

You need to assign the system role via a request to be able to prevent the assignment.

You need to assign the system role via a request to be able to prevent the assignment.

So, this is the only way right? I cannot make up any other implementation to get the same behavior also without requests?

Thanks for your answer