Skip to main content

SoD Evaluation for Non - SAP Functions

POST 
/sodEvaluation

This API can be used to evaluate SODs for entitlements with the same name.

Mandatory Parameters:

* user - account name
* entitlement JSON

StartFragment

{    

"user": "soduser971",

"entitlementJSON": { 

 "Data": [

 {

 "Endpoint": "SODendpoint2",

  "EntitlementType": "NewPandC",

   "ExistingEntitlementsKeys": [

    "635216",

    "635217", 

     "635218" 

     ],

 "NewEntitlementsKeys": [

 "635215",

 "635214"  

   ]

   },

   {

  "Endpoint": "SODendpoint2",

  "EntitlementType": "NewPandC",   

   "ExistingEntitlementsKeys": [   

    "635216",  

     "635217",    

     "635218"    

      ], 

    "NewEntitlementsKeys": [       

    "635215", 

    "635214"  

      ]    

      } 

      ] 

   }

}

EndFragment

HEADERS

EndFragment

The Authorization must have Bearer followed by Token.

Optional parameters:

Ruleset - ExistingEntitlementsKeys/NewEntitlementsKeys -These parameters are available from Release v2022.0.
The SODEvaluation API takes the input parameters in the following order:

* Key of the entitlement
* Name of the entitlement

The Key of the entitlement takes precedence to check SODs during access request to avoid the failure of duplicate entitlements so that the SOD risks are displayed if exists. If the entitlement key is not passed in the API, then the entitlement name is considered.

Request​

Body

    entitlementJSON

    object

    Data

    object[]

  • Array [

    • Endpoint string
    EntitlementType string
    ExistingEntitlementsKeys string[]
    NewEntitlementsKeys string[]

  • ]

    • user string

Responses​

SoD Evaluation for Non - SAP Functions / SoD Evaluation for Non - SAP Functions(riskSODEvaluationByUser) / SOD Evaluation for Non-SAP Duplicate Entitlements

Response Headers

  • Date

    string

  • Set-Cookie

    string

  • Strict-Transport-Security

    string

  • Vary

    string

  • X-Content-Type-Options

    string

Schema

    errorCode string
    message string

    result

    object

    anyOf

    SOD

    object[]

  • Array [

    • Assigned_MitigatingControls undefined[]
    Available_MitigatingControls undefined[]
    Description string

    Functions

    object[]

  • Array [

    • Description string

    Entitlements

    object[]

  • Array [

    • Entitlement string
    EntitlementDescription string
    EntitlementDisplayName string
    ParentRole string
    Role string

  • ]

    • FunctionName string

  • ]

    • Priority number
    Risk string
    RiskId number

  • ]

Loading...