Understanding Audit Policy Violations

An audit policy violation occurs if one or more rules associated with a policy is broken by a user account, a user attribute, or a user role. Oracle Identity Analytics tracks the violation until it is resolved.

Audit policies have designated remediators who are responsible for taking action when violations are discovered. The following three actors can be remediators:

• Rbacxadmin

• Policy Owner

• Remediator (designated person assigned during policy creation)

A remediator can reassign violations to another user so that action can be taken to resolve the violation. The remediator is mentioned in the audit trail of every violation, thereby making the remediator accountable for the action.

Each broken rule, and the user, account, role, and membership details that caused the violation are recorded. Each Identity Audit Violation contains at least one cause. When more than one rule in the policy matches, then the violation will have multiple causes. Violation causes are displayed on the Violation Details page under three different categories:

1. Account Causes

2. Role Causes

3. HR Attribute Causes

For more information about the Audit Violation Details page, see Audit Violation Details Help.