Skip to content

Preventing Policy Violations

Configure global approval settings to prevent separation of duties (SoD) policy violations by automatically enforcing your policies.

  1. Go to Admin > Global > System Settings.
  2. Select Feature Settings from the left navigation.
  3. Under Feature Settings, select Access Requests.

  4. In the SoD Conflicts section, use the toggles to select a global approach to all requests with separation of duties conflicts, regardless of individual policy settings. Options include:

    • Block all Identity Security Cloud access requests with SoD conflicts - The system will automatically cancel access requests with SoD conflicts.
    • Block all SAP ARM access requests with SoD conflicts - The system will automatically cancel SAP ARM access requests with SoD conflicts.

  5. Select Save.

You can also configure individual SoD policies to prevent requests that violate that policy. Refer to Creating a Separation of Duties Policy.

Documentation Feedback

Feedback is provided as an informational resource only and does not form part of SailPoint’s official product documentation. SailPoint does not warrant or make any guarantees about the feedback (including without limitation as to its accuracy, relevance, or reliability). All feedback is subject to the terms set forth at https://developer.sailpoint.com/discuss/tos.