IDENTIFY SEGREGATION OF DUTIES CONFLICTS

Use this screen to compare a user-defined list of conflicting applications with user and user group rights. This determines if users have been assigned rights to two applications that conflict with each other. The list of conflicting applications must first be defined in the Manage Application Conflicts screen.

Define whether this process will prevent conflicting rights from being implemented using the Enforce Segregation of Duties Rules check box in the Corporate Settings block of the Configure System Settings screen. If that check box is selected, this application reviews user and user group rights, and if it finds a conflict, flags the appropriate rights record as in-conflict and unusable unless someone overrides the conflict using the Manage Segregation of Duties Conflict Overrides screen.

If the Enforce Segregation of Duties Rules check box is cleared, the Identify Segregation of Duties Conflicts process still examines user and user group rights for conflicts and produces a report listing conflicts, but it won't disable user and user group rights. It will be up to the appropriate system administrator to correct the conflict by changing user/user group rights.

The process checks both user group and user rights for application conflicts. When checking for rights conflicts for a user group, it compares only the module and application rights for that specific user group to one another for conflicts. For users, however, it compares the rights of the user with the rights of any user groups assigned to them. After reviewing the rights records, this process will update the rights status.

Use this screen whenever you need to identify segregation of duties conflicts. If the Enforce Segregation of Duties Rules check box found in the Corporate Settings block of the System Settings screen is selected, run this process soon after user and/or user group rights are added or changed to allow the user to use the new rights (assuming no conflicts are found).

Always run this process after printing or previewing the report. If the Segregation of Duties information on the report does not look correct, correct the rights set up for the appropriate Users/User Groups and then run the process. If you select the Review Previously Manually Approved Rights check box and also select the Accepted and Conflicting Rights option in the Include on Report field, the report shows the currently manually approved rights. After you run the process with Review Previously Manually Approved Rights check box selected, the current manually approved rights are deleted.

Identification

Use the fields in this block to create a new parameter ID or to retrieve a previously saved parameter ID. A parameter ID represents a set of screen selection parameters. After you have saved a parameter ID and its related parameters, you can retrieve them using Query.

You can use the retrieved parameters to produce reports and run processes more efficiently and with greater consistency. The saved parameters are also useful and necessary when you want to run the process as part of a batch job. Many users save a unique set of parameters for each different way they run a report or process. When you select a previously saved parameter ID or parameter description, the associated saved screen selection parameters automatically display as selection defaults. The page setup and print options are also included in the saved parameter ID if there are any. You can change any of the associated selection defaults as necessary.

Parameter ID

Enter, or click to select, a parameter ID of up to 15 alphanumeric characters. Choose characters for your parameter ID that help identify the type of selections you made in the screen, such as PERIOD or QUARTERLY.

When you save your record, all the selections made in the screen are stored with the parameter ID. Later, you can retrieve the parameter using Query.

You can use the parameter to run the process more efficiently because you can select the parameter ID with its previously defined screen selections. After the default selections display in the screen, you can override the defaults.

Description

Enter, or click to select, a parameter description of up to 30 alphanumeric characters.

Sort By

1st Sort

Use this drop-down list box to sort the data in this report by Application, User/User Group, or Conflict Type.

Options

Use this group box to specify additional settings you want to use for this report.

Include on Report

Use this drop-down list box to specify the data you want to include in this report. The choices in this drop-down list are dependent on the choice you made in the 1st Sort field. Your choices are:

Review Previously Manually Approved Rights

Select this check box to disregard and delete any previously entered manual overrides of conflicts entered in the Manage Segregation of Duties Conflict Overrides application. If you clear this check box, any previously overridden conflicts will be checked to determine if a conflict exists.