Skip to main content

SoD Evaluation for Non - SAP Functions

POST 
/sodEvaluation

This API can be used to evaluate SODs for entitlements with the same name.

Mandatory Parameters:

* user - account name
* entitlement JSON

StartFragment

{    

"user": "soduser971",

"entitlementJSON": { 

 "Data": [

 {

 "Endpoint": "SODendpoint2",

  "EntitlementType": "NewPandC",

   "ExistingEntitlementsKeys": [

    "635216",

    "635217", 

     "635218" 

     ],

 "NewEntitlementsKeys": [

 "635215",

 "635214"  

   ]

   },

   {

  "Endpoint": "SODendpoint2",

  "EntitlementType": "NewPandC",   

   "ExistingEntitlementsKeys": [   

    "635216",  

     "635217",    

     "635218"    

      ], 

    "NewEntitlementsKeys": [       

    "635215", 

    "635214"  

      ]    

      } 

      ] 

   }

}

EndFragment

HEADERS

EndFragment

The Authorization must have Bearer followed by Token.

Optional parameters:

Ruleset - ExistingEntitlementsKeys/NewEntitlementsKeys -These parameters are available from Release v2022.0.
The SODEvaluation API takes the input parameters in the following order:

* Key of the entitlement
* Name of the entitlement

The Key of the entitlement takes precedence to check SODs during access request to avoid the failure of duplicate entitlements so that the SOD risks are displayed if exists. If the entitlement key is not passed in the API, then the entitlement name is considered.

Request​

Body

    entitlementJSON

    object

    Data

    object[]

  • Array [

    • Endpointstring
    Example: SODendpoint2
    EntitlementTypestring
    Example: NewPandC
    ExistingEntitlementsKeysstring[]
    Example: ["635216","635217","635218"]
    NewEntitlementsKeysstring[]
    Example: ["635215","635214"]

  • ]

    • userstring
    Example: soduser971

Responses​

SoD Evaluation for Non - SAP Functions / SoD Evaluation for Non - SAP Functions(riskSODEvaluationByUser) / SOD Evaluation for Non-SAP Duplicate Entitlements

Response Headers

  • Date

    string

  • Set-Cookie

    string

  • Strict-Transport-Security

    string

  • Vary

    string

  • X-Content-Type-Options

    string

Schema

    errorCodestring
    Example: 0
    messagestring
    Example: SUCCESS

    result

    object

    anyOf

    SOD

    object[]

  • Array [

    • Assigned_MitigatingControlsundefined[]
    Example: []
    Available_MitigatingControlsundefined[]
    Example: []
    Descriptionstring
    Example:

    Functions

    object[]

  • Array [

    • Descriptionstring
    Example:

    Entitlements

    object[]

  • Array [

    • Entitlementstring
    Example: [Accounting Journal Event: Create Journal: Initiate, Verify Capital Project Expense: Review Capital Project Transactions - Manual Journals: Initiate]
    EntitlementDescriptionstring
    Example:
    EntitlementDisplayNamestring
    Example:
    ParentRolestring
    Example: [Accountant]
    Rolestring
    Example: Accountant

  • ]

    • FunctionNamestring
    Example: GL: Enter Journal Entry

  • ]

    • Prioritynumber
    Example: 1
    Riskstring
    Example: GL: Enter Journal Entry conflicts with PTP: Create Invoices
    RiskIdnumber
    Example: 1762

  • ]