Excluding an Object by Direct Exclusion

Certain objects may be excluded from a rule so that they are not generated as violations when an analysis is performed using this rule. Objects can be excluded from a rule directly, by associating parameters with a base rule or through a parameter list.

 

Note: For the Authorizations Insight , the objects that can be excluded vary as per the ERP application selected:
  • Infor: Users, roles and users by user attributes
  • Lawson: Users, roles and users by user attributes
  • SAP - Users, roles, user attributes
  • Oracle - Users, responsibilities, user attributes
  • PeopleSoft - Users, roles, permission lists, user attributes

Objects can be excluded from a rule in the following manner: 

  • Directly exclude and object
  • Directly exclude an object by object attribute