Roles by Highest Executed Risk

The Roles by Highest Executed Risk report identifies how many unique roles have an inherent SoD or sensitive access risk built in and indicates if that risk has been fully executed by the assigned users. Selecting this report will navigate to the Role Summary report and apply filters based on the Highest Level of Fully Executed Risk column.

Use Case

This report is often used to identify those roles that cause the most risk in your environment, which might be a place to focus initial remediation efforts. It can show roles that have execution on both sides.

Since it can be different users executing both sides, the role can be split, resulting in two roles that are inherently free of SoDs. For more information, refer to the Role Conflicts Matrix report.