Possible inherited SoD violations should be checked accurately on role-request-time. Currently, there is only then a violation, when directly assigned/requested roles are in a SoD conflict. If we request a parent of a SoD-role, there will be no violation at all. Please support Role-Inheritance in SoD.

by: Rita K. | over a year ago | Role Based Provisioning