Role mining

Description

Soffid’s role mining feature applies data mining technology to create business profiles based upon current application permissions in order to minimize the number of roles to be managed and maintained with the relevant cost saving.

In this context, Soffid allows the administrator to select different role management strategies:

• More roles with less permissions.
• Fewer roles with more permissions.
• Balanced approach.

Screen overview

Custom attributes

Scope

• Description: a brief description to identify the operation.
• Groups: This component allows you to add groups to the list. Those groups will be evaluated with the role mining process.
• Applications: This component allows you to add applications to the list. Those applications will be evaluated with the role mining process.

Parameters

• User entitlement management cost How much does it cost to assign a role to a user?
• Role entitlement management cost: How much does it cost to assign a role to a profile?
  
• Role management cost: How much it cost to create a role? 
• Status:
  • Preparation
  • Scheduled
  • Review
  • Finished

Results

• Name: name for the new role.
• Description: a brief description.
• Actual Users: actual users number.
• Permission: roles number.
• Benefit: benefit to be obtained.
• Cost: current cost.
• Status:
  • Proposed.
  • Accepted.
  • Rejected.

Reports

• Permissions per role
• Users per role
• Entitlement changes

Actions