SeparationOfDutyRuleViolation

Object that provides information about a specific separation of duty rule violation. Use this object to get specific information about a separation of duty policy violation. This object cannot be created for use by the user.

The user can work only with SeparationOfDutyRuleViolation objects that the system has generated as part of the approveSoDViolation workflow.

Availability

IBM Security Identity Manager 7.0.

Provided by

com.ibm.itim.script.wrappers.generic.IRuleResultWrapper

Methods

getName()

Returns the name of the separation of duty policy rule to which this violation corresponds.

getViolationString()

Provides a string that represents the list of roles in violation. It describes the roles the person has that are in violation and which role in a separation of duty rule they correspond to. The role lists might be different due to role hierarchy.

getViolationStringHTMLTable()

Returns a string version of the roles in violation for use in an HTML table or email template.

getPolicyName()

Returns the name of the separation of duty policy which contains the rule in violation.

getPolicyDescription()

Returns a description of the separation of duty policy.

getPolicyOwnerDNs()

Returns a collection of the distinguished names of one or more separation of duty policy owners.

getCardinality()

Returns string that represents the number of allowed roles in the separation of duty policy rule in violation.

Parent topic: JavaScript extension reference