Exclusion List

In certain cases, an object, a user, or a role, is authorized to perform certain actions that violate a rule. Such violating objects must be excluded from the rule analyses to avoid violations. The excluded objects can be mitigated for the associated risks.