Share all details about your problem, including any error messages you may have received.
is there any OOTB way to detect Role SoD violations when access requests are submitted for underlying role entitlements?
For example -
I have an SoD policy for Role 1 (Role contains Entitlement A) and Role 2 (Role contains Entitlement B).
Role 1 is already assigned to my identity. When I submit an access request for Entitlement B (just the entitlement, not the role), is there a way to throw a violation?
OOTB in IdentityIQ, SoD policies are usually checked based on the access a user will have after the request is completed. If the policy is defined at the role level, the violation is normally detected when the conflicting roles are assigned.since the request is only for Entitlement B and not Role 2, the violation may not trigger if the SoD rule is defined only between Role 1 and Role 2.
@SReddy_IAM I tested this with EntSOD and it is working for me. TestPrism1 and TestPrism2 are conflicting entitlements defined in policy. I assigned a role having TestPrism1 and tried assigning TestPrism2.. it is throwing the conflict.
